
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
File: 5_fdQJKCmOyeymRGoYSjWaPtXf4.mft (raw, json)
Hash identifier: hX4fpFk5hLFaAc9dBWugOB93A4V77UcjxjHRtZnqPOU=
Subject key identifier: 56:72:2D:D4:48:7B:AC:28:CB:8C:90:D0:6E:B2:9A:DA:52:AD:00:2C
Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
Certificate issuer: /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Certificate serial: 030A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
Manifest number: 02EC
Signing time: Fri 17 Apr 2026 01:14:26 +0000
Manifest this update: Fri 17 Apr 2026 01:14:26 +0000
Manifest next update: Fri 24 Apr 2026 01:14:26 +0000
Files and hashes: 1: 5_fdQJKCmOyeymRGoYSjWaPtXf4.crl (hash: hawIkI4PYpvsxP0s1/Ugw+xhZQG/vWCmdpa2QHJpOt4=)
2: D39916A82C2811F1968A560B9D833773.roa (hash: Cg7Q5lSS3gOcyBdrrL+IQ2fYxtaoU1QG1+lbZqI7zqQ=)
3: 7B9AF6D818F111F0A3CFBB17C4F9AE02.roa (hash: YZ95zLAZ9RgE3ArJgZyq41uo4zFDNyVSmDttc4IYSCE=)
4: D455E69C623511F0B0F5155FC4F9AE02.roa (hash: 0jvUIwjPXHeEslVKiYpH5B76uWFLmFaAvSZKdVMyJic=)
5: 81087EBA66EE11F0B7640387C4F9AE02.roa (hash: /usqs9ZfkCP+Vt3Y0LGieWhcUSa0ur1qEg+V2Bst5hw=)
6: AAF361C0D18B11EF810E8B66C4F9AE02.roa (hash: p7P2A7jSsNB3VPnyfQ7N/c66d6K3p3AzM6sgD1LCs58=)
7: 4BADF2C62BFC11F18FD847BBCA833773.roa (hash: CMNjVUflNbanBr2nUZsWrSDMaaVdhmqPKm2xo8NZ8TY=)
8: 4B2917AE2BFC11F18FD847BBCA833773.roa (hash: UobL0n4d1TIu9JHNtfVYLskZdX7Mjm5UtYnjoxKoY94=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:14:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 778 (0x30a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Validity
Not Before: Apr 17 01:14:26 2026 GMT
Not After : Apr 24 01:14:26 2026 GMT
Subject: CN=69e18972-149f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e8:33:38:d2:f7:3d:bf:03:5a:4a:1f:20:df:
14:6f:2b:25:c6:be:64:cb:f0:e2:be:f4:93:d7:0a:
04:c2:15:a9:b1:ef:c0:6f:18:18:66:c6:c1:07:c3:
90:b4:8f:40:ca:03:4d:3d:28:9f:3b:ad:4c:38:ae:
2f:06:7c:ff:33:d5:99:6e:b7:3f:11:eb:57:9e:00:
6a:28:b1:44:b3:4f:2e:49:61:a5:ac:0b:9e:73:a7:
d4:21:18:97:3a:aa:b7:15:b9:99:25:40:24:88:09:
d1:02:16:09:e7:72:04:3e:49:a0:b5:3e:ad:78:5f:
80:83:6a:6b:b9:0c:ac:3d:6d:f4:ae:1e:35:56:8a:
b4:d4:ca:6a:5e:c2:cf:e0:af:99:c5:73:85:dd:cc:
9c:b5:03:55:5f:e8:24:54:30:c3:d1:0b:e7:cb:1a:
db:b1:71:a8:0d:21:6c:cf:13:b2:d9:03:8d:9d:48:
ac:99:21:53:a4:3e:b8:72:78:c0:3b:be:85:52:80:
53:f9:e4:a9:9b:2e:2b:d5:82:52:8b:3d:dc:1a:4c:
c1:a5:6f:9a:5b:36:57:20:b7:32:e2:e3:c6:d5:a0:
68:46:13:8c:75:cc:a1:de:33:9b:b5:8a:f0:5d:fb:
cf:8e:fc:6e:c9:e8:43:7e:f8:b3:29:2c:ea:19:f8:
34:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:72:2D:D4:48:7B:AC:28:CB:8C:90:D0:6E:B2:9A:DA:52:AD:00:2C
X509v3 Authority Key Identifier:
keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:47:6e:e5:81:33:27:6e:e5:41:d6:c6:a7:4f:cd:ed:fd:2f:
c0:aa:60:e9:67:73:2b:22:b8:cd:9a:a0:17:42:96:da:93:77:
06:9a:32:0a:0b:2f:17:b3:2c:d8:06:d0:04:9e:c4:9e:ac:3d:
20:50:cc:d0:87:bc:98:ce:37:24:65:8f:4d:41:c1:00:bd:a5:
be:28:2e:89:dc:37:21:f6:39:d6:46:b7:7e:4b:a5:de:92:0a:
cb:35:67:f6:4e:c5:b1:2f:46:35:89:db:35:d9:b1:91:c4:bf:
8b:74:bc:d7:fe:f9:63:07:a2:c0:1c:71:52:98:0e:b5:56:a3:
84:eb:db:fc:60:55:54:a0:eb:25:82:21:d3:f0:c8:23:2a:67:
82:0d:87:83:96:41:70:06:88:d4:1b:b0:3b:fa:8f:eb:2e:08:
3f:6e:13:14:a2:2e:02:c2:d8:69:10:01:ad:af:87:63:a6:ad:
52:e5:d8:3e:e9:f0:13:4e:58:ff:c7:f5:e6:9d:6b:20:6f:62:
5c:5f:e5:77:b1:4c:8a:e4:72:40:f3:77:c4:73:85:b9:2f:11:
6e:06:aa:08:36:70:17:29:55:99:45:a9:a5:2a:48:62:ac:1a:
fe:3f:8e:56:a1:a4:63:36:61:83:f2:4b:4f:0a:96:53:35:cc:
ec:b3:14:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:15:51 2026 by rpki-client