
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft
File: FBD9h4cUD_mXb-nB-lhE7V3R48U.mft (raw, json)
Hash identifier: /BfuebvKS82vDgSMLpE0a5aE3ufzSYHmJ5pjTsXsilo=
Subject key identifier: E4:10:70:10:44:B6:2C:E2:EC:51:11:7B:63:40:ED:C1:E9:D6:E7:96
Authority key identifier: 14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5
Certificate issuer: /CN=A91FDD88/serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5
Certificate serial: 05AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft
Manifest number: 05A7
Signing time: Mon 02 Mar 2026 00:01:08 +0000
Manifest this update: Mon 02 Mar 2026 00:01:04 +0000
Manifest next update: Mon 09 Mar 2026 00:01:04 +0000
Files and hashes: 1: FBD9h4cUD_mXb-nB-lhE7V3R48U.crl (hash: xcbIj1sfKN+g9gKeCJ7URl+AOh1JZJq0HbHzI8e3XBA=)
2: A2835264049511ECB774BA31C4F9AE02.roa (hash: f4Fr0Wm4hRAjomJLBDiV5gFbrZywSJyJuObbSUgOIx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl
rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1455 (0x5af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDD88, serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5
Validity
Not Before: Mar 2 00:01:04 2026 GMT
Not After : Mar 9 00:01:04 2026 GMT
Subject: CN=69a4d343-45db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d6:da:02:89:61:23:c1:e2:41:3b:c6:36:f4:
ab:e7:62:55:aa:92:a3:28:4c:16:0c:7b:1f:ca:c3:
86:e4:cc:5e:de:ee:9b:8a:ff:a4:d0:ac:bc:80:19:
68:64:f0:23:44:e8:d3:73:47:3d:56:47:2f:cd:e9:
c4:c5:81:65:6c:d7:62:a4:76:18:0a:df:8e:69:1f:
dc:da:58:33:11:08:18:c5:4d:f9:71:2e:90:02:a0:
96:21:ea:ea:5c:f7:bf:29:80:18:da:22:e1:03:a6:
f8:d3:eb:4b:75:b6:a9:4d:bc:a7:2f:39:31:47:fc:
78:9e:c5:f6:95:bb:89:b8:c3:7a:21:9d:bf:5d:0f:
f0:41:00:c9:62:00:7e:6a:da:1d:8c:e2:df:42:f4:
16:b5:94:06:02:39:b9:1f:1c:d0:c7:cb:e4:23:52:
8a:14:3e:a8:f1:73:00:5f:58:28:df:cd:e8:57:4b:
96:6b:d1:58:5d:ab:ee:b1:de:a3:4f:60:78:94:97:
d5:01:57:28:77:0c:b3:4b:5f:3e:d2:9b:c7:73:04:
fd:ec:92:79:5f:65:73:50:c3:2c:18:5f:5c:27:1f:
c1:1b:45:cf:d5:b0:e1:7c:92:f1:0f:25:7f:b6:e8:
d1:47:63:7e:68:0e:7d:80:aa:41:b3:22:26:02:7e:
5a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:10:70:10:44:B6:2C:E2:EC:51:11:7B:63:40:ED:C1:E9:D6:E7:96
X509v3 Authority Key Identifier:
keyid:14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:2e:81:d9:f1:c9:4b:ce:46:c6:1c:22:e7:f5:7a:15:d8:9a:
9d:a5:61:20:c1:53:47:cf:56:f7:58:91:d0:ce:bd:c0:a0:0a:
62:0e:e9:d0:66:ff:1a:08:8c:d7:df:a3:99:0e:6f:c8:59:06:
2d:6b:70:f0:15:96:75:8e:e3:d3:5f:a0:21:de:86:15:2e:c5:
03:50:ba:13:b5:c2:09:97:69:79:90:3c:5e:70:d1:20:6e:cb:
44:91:10:5b:a4:02:b6:21:b3:b9:d9:22:3e:d4:2b:85:0c:f8:
80:56:0e:d8:bd:8a:b7:42:ff:2d:55:6e:c9:d8:58:40:4c:38:
e9:86:94:f0:1a:14:ef:bb:4e:fc:f7:38:9d:fb:46:51:b5:b0:
c1:66:f8:6e:bd:ab:73:0a:0c:23:ee:bf:8b:e9:9f:16:51:c0:
c0:51:20:a9:88:7c:43:bf:9b:cb:b8:bf:bf:36:2e:b5:2a:3f:
0d:62:3b:95:4e:6e:50:09:8c:fb:be:24:9a:b7:51:91:88:e6:
f5:d1:67:d8:2c:e4:04:92:40:3a:28:a1:4a:37:c4:1e:bb:ff:
09:53:92:23:ec:c1:b9:66:a5:7a:82:fb:20:01:95:6f:4b:06:
ad:83:1b:24:b3:e8:33:e0:12:cb:18:11:f5:59:32:a8:d5:3c:
87:d8:a4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:46 2026 by rpki-client