
$ rpki-client -vvf rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
File: Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft (raw, json)
Hash identifier: BkEzrEAuX6yEur53MBVPz/NJJkoxdZBUqL38eBcCfgQ=
Subject key identifier: 0D:4D:33:96:CA:B1:99:2B:B1:AA:D5:37:46:FE:2F:87:24:27:2D:7F
Authority key identifier: 16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18
Certificate issuer: /CN=A91295B6/serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718
Certificate serial: 020B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
Manifest number: 0202
Signing time: Wed 25 Mar 2026 02:30:12 +0000
Manifest this update: Wed 25 Mar 2026 02:30:11 +0000
Manifest next update: Wed 01 Apr 2026 02:30:11 +0000
Files and hashes: 1: Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl (hash: WdkWQbGzPUn5VpnEpQ91NmXYmwjgl/DDRRshf+1cCtQ=)
2: 35C8F50C218A11EE959B7037C4F9AE02.roa (hash: 1pvzyLV21JPKIBe4+vpM9SsFH5SGt6T5Irf10NoZGcc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl
rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91295B6, serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718
Validity
Not Before: Mar 25 02:30:11 2026 GMT
Not After : Apr 1 02:30:11 2026 GMT
Subject: CN=69c348b3-1e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:fa:74:43:5d:d7:06:aa:8a:b8:c5:33:72:
a1:86:f9:41:0e:24:d0:de:41:e1:30:cc:7c:60:78:
7a:f4:6e:48:8f:20:bb:4e:55:c2:72:3b:fa:89:80:
09:f9:24:46:fc:44:7b:e1:4f:9d:76:e6:c3:1c:e8:
b7:ee:81:19:76:5c:bb:67:cc:a2:5d:58:11:a6:78:
9b:6b:83:03:52:d2:0d:48:99:31:ce:37:aa:d2:21:
79:c6:4b:6e:43:de:3b:96:49:4b:ac:7a:9c:9d:07:
3c:5f:9c:42:19:3d:e1:02:49:3f:c7:ee:4c:e9:c9:
0b:a1:1d:ed:cd:6a:6d:7b:12:d9:93:6a:ac:f8:b2:
c5:cb:a9:39:37:92:15:32:f4:dc:de:3f:82:9b:c7:
8d:cc:92:37:c3:c5:7c:62:81:05:e6:98:f0:01:02:
7b:f0:70:77:a8:31:01:67:7c:79:d8:93:27:da:9f:
ac:fe:ff:8a:41:29:99:b5:2a:ae:7e:97:bf:fd:1d:
c2:bc:05:0e:11:96:db:73:8d:f3:6c:fc:e6:0c:78:
7e:db:c1:40:dc:fd:6e:a9:4f:c4:01:bd:51:44:e4:
99:d6:dd:49:ce:5d:68:59:6a:4b:a7:2d:ff:38:b4:
a2:bd:87:52:47:0d:0c:a9:bd:06:27:bd:d1:17:76:
3a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4D:33:96:CA:B1:99:2B:B1:AA:D5:37:46:FE:2F:87:24:27:2D:7F
X509v3 Authority Key Identifier:
keyid:16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:67:44:8d:42:b9:18:50:c1:1c:ea:b6:65:cc:33:f6:55:6a:
e0:33:9e:71:64:ee:1d:18:f0:de:80:a3:fa:8b:3c:76:54:a3:
2a:12:b5:a7:c6:8c:2e:c0:4f:b5:5f:48:85:28:75:d6:1e:93:
6e:ec:e3:24:c5:3d:88:51:9e:d2:f8:9d:72:30:56:5e:94:ff:
58:49:38:5e:bd:56:42:0d:bf:e7:24:72:03:da:a3:54:73:1d:
94:d5:46:3a:f2:6e:7a:03:f9:67:e7:03:9b:c0:9f:49:49:c2:
87:8d:16:b1:ac:1c:25:a3:e6:c7:a6:da:95:5c:2c:cf:2e:92:
3b:95:35:b9:0f:83:44:2b:6f:f1:57:a0:cb:3f:41:99:97:a6:
df:a5:d7:8a:43:3d:ee:3f:81:5e:04:d1:25:dd:df:91:b5:51:
71:5d:f1:5c:6f:a3:82:ca:75:37:7f:66:57:93:b4:8b:96:24:
12:2d:c1:fd:6a:43:53:ac:68:d2:71:43:e2:28:fd:34:6b:47:
95:9d:7b:95:60:08:42:95:e3:2f:62:14:54:44:5e:da:f6:28:
a2:7e:c9:37:e0:8d:a8:fd:1c:b9:ba:a1:18:b8:54:b2:d8:4d:
07:85:4f:1e:19:49:b4:d5:bc:01:68:93:3f:46:e7:6c:e1:5e:
0a:ab:4f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:42:15 2026 by rpki-client