
$ rpki-client -vvf rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
File: fTWFKD3zPrULnDiNWc14bLudw54.mft (raw, json)
Hash identifier: Cc6tBK4cVM11XHxPaLnPOkVBFY9j+7xDdedRjhAXF8E=
Subject key identifier: DC:6B:77:A2:B1:7C:2B:C6:ED:25:0A:8D:A9:E8:B7:C4:8A:22:3A:8F
Authority key identifier: 7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E
Certificate issuer: /CN=A91352D1/serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
Manifest number: 4A
Signing time: Wed 25 Mar 2026 07:31:35 +0000
Manifest this update: Wed 25 Mar 2026 07:31:35 +0000
Manifest next update: Wed 01 Apr 2026 07:31:35 +0000
Files and hashes: 1: fTWFKD3zPrULnDiNWc14bLudw54.crl (hash: pKaRfOBeSWX4ulkjFMq9ZnnFqdiHFKkiReRMZZ+TfFE=)
2: F0F521DEC10B11F0B1AC197FC4F9AE02.roa (hash: GOuUl8j+KrJKN/gcw/cqwqcTvAUg8ALJCq8KS5t0JeI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.crl
rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91352D1, serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E
Validity
Not Before: Mar 25 07:31:35 2026 GMT
Not After : Apr 1 07:31:35 2026 GMT
Subject: CN=69c38f57-4406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:24:d1:09:b0:c2:86:e1:cc:3c:25:c0:a8:2a:
6d:77:73:ed:1b:5c:91:b0:c2:58:2d:ea:cc:f7:3e:
cf:a7:6c:15:ae:10:d8:b7:3f:7c:d1:b0:4d:d5:f0:
ed:7e:4f:db:fb:28:f6:90:d2:63:31:32:e9:43:0c:
a5:74:f4:fd:e1:d3:04:68:63:53:0b:53:d3:8c:c8:
27:2d:ce:bd:c0:ec:eb:6f:84:db:ad:eb:67:55:4c:
b2:48:90:bf:db:12:c0:98:38:e6:f3:f4:fb:16:df:
63:8a:eb:93:f9:17:a2:f0:fb:f9:8f:d9:b2:e8:e1:
96:84:44:93:68:f7:77:45:01:e6:aa:ec:cd:c4:13:
9f:63:4a:53:ad:03:d5:37:7a:dd:e7:f5:90:69:bb:
28:1f:31:23:f9:94:d1:fe:bc:85:4d:37:7a:57:6d:
22:57:ec:36:b5:d7:c0:c1:cb:c1:6b:aa:7b:cd:14:
46:e4:93:c0:25:28:bf:2b:5b:0c:c7:76:2f:e3:56:
10:f6:d5:da:c0:b1:2e:87:d3:04:41:f3:88:32:e9:
02:ac:01:17:6d:56:af:0e:1a:5b:8f:16:17:86:30:
92:df:74:cb:c9:9a:5a:5e:87:f0:3d:85:f0:79:2a:
3c:e5:17:6c:c5:d3:43:96:da:59:70:84:46:cf:8e:
a5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6B:77:A2:B1:7C:2B:C6:ED:25:0A:8D:A9:E8:B7:C4:8A:22:3A:8F
X509v3 Authority Key Identifier:
keyid:7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:ad:27:9c:87:cc:47:e5:56:25:df:36:c2:23:d7:86:4a:ee:
eb:55:57:ec:45:ee:2d:dc:99:81:e3:f8:46:6e:23:cf:72:51:
e9:a1:63:22:c2:e0:4e:96:b8:19:1c:9b:c4:86:53:5b:b1:99:
48:9d:70:da:d3:3a:d8:e4:87:11:e7:28:b2:eb:20:1a:21:19:
9c:d0:ef:30:14:2e:1e:cd:5a:73:3c:87:8e:59:30:20:10:89:
38:81:22:e7:40:34:da:44:e4:9e:2a:ce:7c:82:01:e9:37:ab:
13:97:77:89:c0:dd:a2:e1:37:a3:bd:16:88:7d:37:d0:b1:6a:
9b:28:2d:d8:af:3c:f4:52:3a:79:c3:68:77:0c:6c:c0:e5:98:
b1:9f:f0:84:9b:8c:90:33:73:d5:a0:d8:3a:4b:ee:ce:72:ad:
cd:a3:73:fc:c5:49:3b:5d:c1:d1:a4:8a:92:14:85:3e:9b:27:
26:69:39:be:b2:5c:d5:61:e6:e6:42:67:9d:13:28:70:99:49:
e9:64:78:1b:d1:ef:55:fb:c5:16:c0:e6:85:5d:8e:b7:82:65:
73:34:07:6c:55:39:21:e1:d1:44:84:ac:89:fc:90:dc:70:aa:
82:42:e6:d7:61:74:c7:6d:94:13:84:27:62:7a:e8:fe:12:47:
21:9c:b6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:29 2026 by rpki-client