
$ rpki-client -vvf rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
File: FxesrAU_Ex4iYUUnNlE-To9ibNs.mft (raw, json)
Hash identifier: kgncx4kSvpmu0M82IYsbpXk4jK+czoV6z0N3/DgA/B8=
Subject key identifier: 57:17:9E:2A:AA:74:14:F6:C3:60:B4:D7:19:BF:3F:F4:C5:EF:01:EF
Authority key identifier: 17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB
Certificate issuer: /CN=A912986D/serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB
Certificate serial: 0B73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
Manifest number: 0B54
Signing time: Tue 24 Mar 2026 19:01:50 +0000
Manifest this update: Tue 24 Mar 2026 19:01:49 +0000
Manifest next update: Tue 31 Mar 2026 19:01:49 +0000
Files and hashes: 1: FxesrAU_Ex4iYUUnNlE-To9ibNs.crl (hash: WKhbnCVXAChJeFP5a0Y5JGRRZBLl6wKC3S0nhdcl1eg=)
2: 618A7D781F7111F09D1AC487C4F9AE02.roa (hash: IZyg4Fas/9IWukov6Dektnm2jiaHOXiUtTOZZUt7+3M=)
3: 0878844205F511EEBB8E1062C4F9AE02.roa (hash: BLYZvDvXZ+sEHXrXt0eXjQfJ4rst6tvWT4jPAMslICE=)
4: 13321D24572211EA88CE445FC4F9AE02.roa (hash: f0+uXUpvz6qGLjUJETTMJZ/hrRFSp5AhLboGVNTpZlU=)
5: 090D807E05F511EEBB8E1062C4F9AE02.roa (hash: Dbi+hv4YjHmxE51XT4Cwwk12GMJPFd/aSXYqPVpbTJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl
rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2931 (0xb73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912986D, serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB
Validity
Not Before: Mar 24 19:01:49 2026 GMT
Not After : Mar 31 19:01:49 2026 GMT
Subject: CN=69c2df9d-29c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:fe:ed:80:c5:f2:d0:50:fd:ea:7f:2f:9f:
c5:72:8f:05:db:22:91:73:3f:39:07:e5:c9:1b:f7:
be:ce:a8:7a:97:f8:06:35:80:e7:ac:ff:da:68:77:
be:c6:8a:c6:70:52:87:02:49:d5:99:35:50:61:7c:
01:65:b2:7d:3a:62:4f:2b:bc:4e:87:fa:15:6c:ea:
ee:e0:e8:e9:f8:78:5d:f3:72:c6:31:4e:6b:b1:12:
af:fe:db:85:d2:34:fd:13:f1:b7:05:fb:d8:82:1c:
cd:9c:3e:87:4a:b4:08:8c:3a:67:27:a8:da:9d:cc:
ee:3c:c8:52:55:8d:34:76:99:76:fe:bd:62:22:1b:
04:03:78:38:52:46:96:3d:cc:88:06:b7:c3:42:27:
b5:0c:c8:b5:59:dc:a7:f2:d3:40:9d:c6:b7:d7:de:
a9:9d:f0:a0:e9:e8:98:71:89:78:2b:72:2f:93:79:
52:31:10:35:fb:fe:82:92:fc:71:a5:9d:34:db:9d:
dc:7b:a8:ce:f3:53:06:eb:7b:d3:e8:0d:92:99:d9:
9f:1d:9a:34:91:07:d0:01:68:8a:c5:95:39:44:5e:
6f:7c:47:6b:55:3f:ff:3f:48:35:8b:c2:85:cd:ad:
7a:45:7e:41:d8:aa:04:e2:1f:dc:16:0f:06:93:14:
40:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:17:9E:2A:AA:74:14:F6:C3:60:B4:D7:19:BF:3F:F4:C5:EF:01:EF
X509v3 Authority Key Identifier:
keyid:17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ec:83:fb:69:f8:c8:3f:56:61:ae:60:27:1e:23:85:7b:d2:
fb:4d:9c:ec:5f:d3:16:ff:b1:c4:87:6e:d4:40:9b:a8:76:f5:
9d:72:e9:ac:63:26:4b:ca:ee:b8:cb:73:f7:d3:0c:59:67:f9:
17:3e:54:b0:30:76:90:de:5c:d3:21:55:cf:3a:39:7c:f8:92:
0f:52:60:5e:14:14:a7:da:78:23:ed:8d:00:50:44:8f:e7:b8:
8a:7e:6f:a7:86:83:48:0c:c9:9c:96:21:e8:87:ea:0e:c3:e7:
13:2c:a6:ae:c2:33:c6:4b:48:ae:87:57:71:9e:d3:91:38:97:
05:02:90:85:69:cc:e8:cb:49:23:13:39:3a:5a:fe:d8:ac:47:
ae:b0:f8:a3:d4:3e:04:99:98:a9:7a:04:6a:30:db:ec:c6:55:
d6:ab:88:e5:80:21:c3:0c:7c:cd:32:7e:65:e2:25:ab:bb:95:
4a:ff:45:98:83:f2:31:98:79:a4:34:70:df:86:1d:d0:f8:39:
e4:23:0c:46:57:82:db:39:9f:21:92:af:3a:ca:50:df:f7:f8:
79:d6:bc:ad:10:08:96:8e:0b:64:7e:53:95:85:60:eb:83:a6:
91:40:f8:10:cf:c6:0d:f9:c4:63:f3:3b:0a:fc:ff:79:da:fc:
21:56:08:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk4NkQxMTAvBgNVBAUTKDE3MTdBQ0FDMDUzRjEzMUUyMjYxNDUyNzM2NTEzRTRF
OEY2MjZDREIwHhcNMjYwMzI0MTkwMTQ5WhcNMjYwMzMxMTkwMTQ5WjAYMRYwFAYD
VQQDEw02OWMyZGY5ZC0yOWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwQ3+7YDF8tBQ/ep/L5/Fco8F2yKRcz85B+XJG/e+zqh6l/gGNYDnrP/aaHe+
xorGcFKHAknVmTVQYXwBZbJ9OmJPK7xOh/oVbOru4Ojp+Hhd83LGMU5rsRKv/tuF
0jT9E/G3BfvYghzNnD6HSrQIjDpnJ6janczuPMhSVY00dpl2/r1iIhsEA3g4UkaW
PcyIBrfDQie1DMi1Wdyn8tNAnca3196pnfCg6eiYcYl4K3Ivk3lSMRA1+/6Ckvxx
pZ00253ce6jO81MG63vT6A2SmdmfHZo0kQfQAWiKxZU5RF5vfEdrVT//P0g1i8KF
za16RX5B2KoE4h/cFg8GkxRAywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFcXniqq
dBT2w2C01xm/P/TF7wHvMB8GA1UdIwQYMBaAFBcXrKwFPxMeImFFJzZRPk6PYmzb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTg2RC9BMDA3NEQxODUz
M0IxMUVBQkFBNzVCM0FDNEY5QUUwMi9GeGVzckFVX0V4NGlZVVVuTmxFLVRvOWli
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Z4ZXNyQVVfRXg0aVlVVW5ObEUtVG85aWJOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTg2RC9BMDA3NEQxODUzM0IxMUVBQkFBNzVCM0FDNEY5QUUwMi9GeGVzckFVX0V4
NGlZVVVuTmxFLVRvOWliTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAseyD+2n4yD9WYa5gJx4jhXvS+02c7F/TFv+xxIdu1ECbqHb1nXLprGMmS8ru
uMtz99MMWWf5Fz5UsDB2kN5c0yFVzzo5fPiSD1JgXhQUp9p4I+2NAFBEj+e4in5v
p4aDSAzJnJYh6IfqDsPnEyymrsIzxktIrodXcZ7TkTiXBQKQhWnM6MtJIxM5Olr+
2KxHrrD4o9Q+BJmYqXoEajDb7MZV1quI5YAhwwx8zTJ+ZeIlq7uVSv9FmIPyMZh5
pDRw34Yd0Pg55CMMRleC2zmfIZKvOspQ3/f4eda8rRAIlo4LZH5TlYVg64OmkUD4
EM/GDfnEY/M7Cvz/edr8IVYIdw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:01 2026 by rpki-client