
$ rpki-client -vvf rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
File: FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft (raw, json)
Hash identifier: pAmU7XbDZmZJwVgtCVwL+FE0WfkPFIUHwpNvU2Eunms=
Subject key identifier: 35:46:2C:F8:DA:B9:CF:EA:F2:26:87:75:89:EA:27:44:C3:55:F7:EB
Authority key identifier: 14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27
Certificate issuer: /CN=A91193C1/serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
Certificate serial: 05CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
Manifest number: 05B8
Signing time: Thu 26 Mar 2026 22:56:24 +0000
Manifest this update: Thu 26 Mar 2026 22:56:23 +0000
Manifest next update: Thu 02 Apr 2026 22:56:23 +0000
Files and hashes: 1: FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl (hash: FJFzXxoyAK5FQVgrCVIPP+Nf4P4vxvBPTOZ1CnQ+8d8=)
2: C8900982059611ECB2896C55C4F9AE02.roa (hash: XdRdJrDsnXBIDFPImXiJdyP4BHiNM7Aw2VJDwyX/Xb0=)
3: AC58009E782A11EFA7DD8F7CC4F9AE02.roa (hash: /CXMp71PCPr4JQ7n5CMpQFrlfwbzRIj75gtHNS1QH9s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl
rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 22:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1482 (0x5ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91193C1, serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
Validity
Not Before: Mar 26 22:56:23 2026 GMT
Not After : Apr 2 22:56:23 2026 GMT
Subject: CN=69c5b998-94cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e4:1c:f6:2e:f7:68:16:c6:33:d5:b0:92:d9:
eb:86:d4:ac:6a:bf:5a:f2:0b:e2:b3:5a:48:7f:99:
25:e6:0a:55:f0:43:cf:96:6b:dc:e5:dd:3f:a7:d6:
58:44:2b:0f:bd:68:a4:3b:ae:78:fd:fc:46:28:88:
06:3a:8b:80:de:c0:f1:0f:93:23:b2:fe:45:a5:a4:
70:7e:a5:07:6c:63:67:4c:8c:61:b2:95:3c:be:cf:
72:e0:ca:4a:7a:b9:19:be:0e:d1:83:2c:2b:aa:09:
07:15:4c:db:66:3b:99:2c:67:85:c4:7c:65:66:ce:
53:43:2a:d2:08:fc:9f:ca:df:8b:fc:37:12:c7:0f:
17:de:b9:aa:eb:04:db:55:f1:56:c0:e6:a8:ff:8e:
64:d0:45:4a:0d:0c:ca:f0:52:a0:59:a5:18:db:0e:
c2:b8:7f:03:70:61:2a:53:4f:a0:cb:29:6d:73:b6:
28:44:61:08:c1:ac:e6:a0:6e:90:f0:62:ac:fb:91:
23:8e:1c:e6:ab:4a:c4:07:eb:16:8e:da:87:61:88:
3a:53:d0:e4:6f:2c:cb:30:e9:c4:f6:63:82:d0:6a:
55:c7:6f:f3:da:0e:8f:e8:ce:20:fb:68:6d:f6:04:
84:44:8c:56:f1:04:ac:06:20:d1:dd:f5:c6:47:aa:
c1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:46:2C:F8:DA:B9:CF:EA:F2:26:87:75:89:EA:27:44:C3:55:F7:EB
X509v3 Authority Key Identifier:
keyid:14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:b1:24:94:1c:aa:25:bb:ec:4f:b2:10:eb:14:4d:53:22:f0:
c5:66:48:39:c3:d6:17:e1:05:77:b0:85:aa:52:0e:8e:d6:fc:
dc:da:eb:c9:91:5f:c8:80:8e:6e:65:63:a0:80:89:73:09:60:
a5:82:57:24:9c:53:81:b1:27:e5:35:98:59:01:1e:9b:a4:a5:
a7:c7:c0:33:5b:11:c5:d8:bb:55:74:f4:32:03:d7:b5:25:22:
85:9c:39:2e:a8:1b:1c:59:1e:49:c4:0e:b4:e0:d2:56:8e:73:
29:f4:06:0a:13:c2:b2:d0:43:f1:bd:57:5a:52:30:e0:58:76:
86:a3:e7:08:4e:60:45:0e:a7:91:65:91:88:0b:70:3c:c3:5a:
65:72:db:33:95:9c:bc:c2:fc:39:5a:29:c4:d4:b7:44:0f:35:
60:ff:a5:40:b4:d2:dc:3c:a9:f8:7f:5e:7f:7a:5b:ae:5d:e1:
25:33:cd:db:55:08:d2:4b:c3:7c:c4:83:e4:02:b9:b6:9b:3a:
98:4f:5a:c2:61:c0:e3:0a:21:37:bf:91:7d:84:68:83:a2:4c:
28:f1:37:cc:43:d2:6d:41:2e:67:79:6c:f0:ea:f2:42:eb:95:
f0:5a:f6:1c:e3:38:c4:f8:ad:4b:c8:32:ac:41:86:3c:62:86:
5e:a0:bb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:10:43 2026 by rpki-client