
$ rpki-client -vvf rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
File: Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft (raw, json)
Hash identifier: QoDhe8p1e6zlTuyOg2sL26CFAKIILzjxwdN4yzI7cv8=
Subject key identifier: 76:7A:1A:A2:E7:6C:6F:9D:C7:76:A3:00:D4:7F:90:64:7B:4C:57:D7
Authority key identifier: 16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18
Certificate issuer: /CN=A91295B6/serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718
Certificate serial: 0224
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
Manifest number: 021B
Signing time: Wed 13 May 2026 02:58:20 +0000
Manifest this update: Wed 13 May 2026 02:58:19 +0000
Manifest next update: Wed 20 May 2026 02:58:19 +0000
Files and hashes: 1: Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl (hash: ivugH5nMIWWaoRomPTA8LiVjx78S4bv8xjUTZk1Dslo=)
2: 35C8F50C218A11EE959B7037C4F9AE02.roa (hash: 1pvzyLV21JPKIBe4+vpM9SsFH5SGt6T5Irf10NoZGcc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl
rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:58:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91295B6, serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718
Validity
Not Before: May 13 02:58:19 2026 GMT
Not After : May 20 02:58:19 2026 GMT
Subject: CN=6a03e8cc-9639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bc:88:a8:06:65:83:df:90:47:6d:4c:f0:3a:
66:0f:76:d9:3e:26:7f:c1:80:1e:fe:ef:d5:ff:2c:
3f:9c:98:e4:e0:81:67:46:98:30:33:2d:05:c8:a4:
6d:be:f6:23:4b:de:00:f5:8a:e9:74:0f:37:f6:6d:
b3:e6:ad:1d:e3:64:d5:8c:8a:2a:17:b0:6a:18:12:
6a:c8:cd:a1:33:94:54:ea:b7:1c:56:6f:81:2f:07:
cb:75:b5:47:0b:38:8b:fe:a4:25:7f:5a:b4:3c:d5:
b9:ee:42:08:2f:d9:21:c9:26:07:8a:8a:18:ed:62:
c6:a6:14:2a:3b:cd:8a:42:dd:67:2b:3b:50:42:cf:
72:02:95:cc:ca:a5:ac:c7:62:0c:8e:ef:36:c4:1d:
30:04:ec:95:58:1f:b5:30:80:e4:20:5b:ac:9b:4b:
28:13:ea:c8:23:d1:28:53:dc:39:4d:71:c6:0e:7c:
01:75:1d:59:3f:88:05:41:5a:16:a0:2a:ff:ec:4e:
6f:9d:5c:15:54:35:01:08:fd:b8:45:76:f1:fd:30:
b2:c1:7e:d5:8b:0a:23:52:5c:f0:bf:06:5c:c4:e6:
37:ed:3c:45:32:11:96:b4:09:2a:1e:fe:e8:fe:42:
64:78:08:3e:3b:ac:89:9f:e9:ae:61:80:3c:58:4c:
ea:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7A:1A:A2:E7:6C:6F:9D:C7:76:A3:00:D4:7F:90:64:7B:4C:57:D7
X509v3 Authority Key Identifier:
keyid:16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:fb:43:65:e3:a5:d7:14:b8:74:d9:c0:07:c9:86:3d:11:81:
74:41:e6:1a:30:2d:30:ca:77:87:6a:18:c4:be:d3:49:60:13:
02:5e:fc:8a:26:7d:db:e5:67:74:16:c3:e4:c3:25:aa:a0:fe:
d6:cf:85:e4:1a:45:b1:bb:dc:b6:d4:4f:74:73:2a:6a:df:cc:
02:ea:75:7e:41:83:9f:30:d4:0b:76:58:b9:2d:59:90:d9:73:
6a:b5:43:74:96:af:ce:11:2c:9f:62:71:c4:cc:71:00:aa:6e:
f6:db:11:d6:c4:cb:f3:49:29:62:83:d7:7b:8a:e6:62:3a:49:
4c:2e:b5:58:60:cd:3f:8e:c0:5e:9f:82:66:2b:1f:8b:ec:5f:
39:47:97:85:cb:4c:5d:53:48:5e:54:85:c1:1f:2d:41:2c:74:
c6:c8:9d:92:57:fb:26:18:90:a3:0c:e3:05:28:27:da:60:4f:
fb:b4:72:6b:d8:84:e2:6a:80:ec:bc:85:e4:97:72:6b:b4:85:
ff:7a:ff:70:5f:ad:c3:cc:c1:d2:e4:33:23:32:90:ac:d0:77:
05:f9:8c:8e:13:71:38:51:4f:fe:51:9d:5d:02:2b:ca:c6:cc:
1d:4d:de:fb:7d:33:f4:36:4c:2c:b2:e5:b1:c6:2b:1b:ca:91:
22:ae:ea:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:21:56 2026 by rpki-client