
$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
File: FKbKvDAuwePc503pi_VYoEK-rFY.mft (raw, json)
Hash identifier: HgO8nD5kRyzHX/m3OB39RaKvV+JNnHu+zxJYD0dXADM=
Subject key identifier: 7F:29:03:A7:83:22:19:B2:F7:D2:42:78:C8:ED:56:22:AB:B3:2D:BA
Authority key identifier: 14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56
Certificate issuer: /CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56
Certificate serial: 0900
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
Manifest number: 15AE
Signing time: Tue 24 Mar 2026 18:12:45 +0000
Manifest this update: Tue 24 Mar 2026 18:12:44 +0000
Manifest next update: Tue 31 Mar 2026 18:12:44 +0000
Files and hashes: 1: FKbKvDAuwePc503pi_VYoEK-rFY.crl (hash: EpKLcJEypwH0FMpIB2XyziANR5rBMGWe9XmVURFuZHk=)
2: DB78B2684BCD11EE8F976B7EC4F9AE02.roa (hash: h0iyfxPuSc/36ldot8gGmUE+Lcy/qPDMQIsY5pWRses=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl
rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2304 (0x900)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91409DC, serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56
Validity
Not Before: Mar 24 18:12:44 2026 GMT
Not After : Mar 31 18:12:44 2026 GMT
Subject: CN=69c2d41d-119e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6e:0f:31:b8:37:77:33:96:48:63:b4:a4:8a:
fb:e6:7f:cb:92:21:d8:b5:31:73:de:ce:76:1b:39:
52:25:7e:7a:7f:1f:ce:80:67:ff:94:c3:fb:35:f3:
9d:dc:91:97:53:58:d3:36:22:92:94:e1:e0:41:fb:
61:28:3f:d5:e2:e7:28:b1:9c:df:92:2a:9b:79:88:
04:0a:cd:d7:0a:f0:a5:48:17:f8:4a:1a:54:2d:44:
b6:ba:13:8f:07:e0:99:59:e4:79:b3:00:87:ef:48:
ba:f7:39:9a:cd:7b:6b:49:bd:5f:71:5e:47:0a:28:
5e:62:4d:30:c6:b0:bb:9b:e7:30:aa:72:70:d1:66:
58:6b:01:f6:5c:91:5d:13:1e:5e:0f:67:5d:e7:bd:
b0:3d:f0:3f:ca:77:2a:10:27:e6:ac:86:a8:8e:0c:
7f:1c:6b:e7:87:d3:00:bc:51:2b:f2:5b:a5:cb:d2:
33:2e:bd:90:65:fb:97:07:6a:de:92:3d:46:66:90:
21:dd:46:2e:a5:9c:ec:65:97:85:b3:d6:c0:af:76:
11:42:91:cf:d1:d9:5f:dd:41:87:05:fa:9b:65:a4:
6a:d2:28:28:bb:b2:c2:19:d9:5d:07:5f:39:b4:a3:
f1:73:80:2e:e2:70:8c:cc:d0:67:bf:54:2d:3f:8f:
8c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:29:03:A7:83:22:19:B2:F7:D2:42:78:C8:ED:56:22:AB:B3:2D:BA
X509v3 Authority Key Identifier:
keyid:14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:b0:f8:99:4c:81:8e:19:a3:ca:0e:91:da:29:0f:af:b3:7b:
73:b0:df:79:fb:12:c1:3c:77:4a:1e:95:0c:38:5f:87:b8:41:
47:b1:50:ff:f1:4b:fa:1c:0a:68:8d:39:bf:3d:f7:43:ec:a9:
bb:90:70:00:84:9f:a3:a4:aa:07:5e:26:98:2f:2a:62:10:98:
9d:01:9d:60:18:3d:41:2d:9e:1b:e6:c0:ea:91:19:69:04:5e:
03:a0:6e:12:3f:bf:92:3e:17:f5:63:57:6b:4b:cc:68:4e:a2:
c5:29:c8:1b:1d:2d:6a:a1:f6:48:e1:76:6f:63:7a:71:11:de:
4f:6b:99:17:ad:33:25:29:04:12:88:ec:8f:a6:c4:84:11:b4:
fe:d5:d6:70:93:9d:09:60:2d:68:b9:f0:45:e5:89:62:70:f6:
ad:7a:f9:1b:04:c5:4e:c8:23:f3:a7:35:39:01:64:13:67:b7:
50:33:0d:52:c9:ba:18:22:db:ef:dd:12:c1:af:65:be:5b:ba:
0e:91:38:a1:8e:f5:66:13:66:7e:57:cc:c7:8f:8c:bb:29:65:
29:b9:7d:4c:f9:e0:73:89:a0:8c:07:73:64:c9:3d:7f:da:ba:
2a:92:12:76:9c:9b:47:7f:09:11:8b:60:76:dd:8b:ff:8f:98:
9e:4c:1c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:26 2026 by rpki-client