
$ rpki-client -vvf rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
File: FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft (raw, json)
Hash identifier: fzAWE3ZMXfjpi50t2GO2Q+Ep21Lch+2l50eGCK8E/pc=
Subject key identifier: 1E:A2:D1:3E:4F:1F:22:42:F8:E2:47:53:DE:28:BC:C7:6D:0C:0E:FE
Authority key identifier: 15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3
Certificate issuer: /CN=A91468A1/serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3
Certificate serial: 0B80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
Manifest number: 0B6A
Signing time: Thu 26 Mar 2026 19:05:41 +0000
Manifest this update: Thu 26 Mar 2026 19:05:41 +0000
Manifest next update: Thu 02 Apr 2026 19:05:41 +0000
Files and hashes: 1: FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl (hash: AzCZcjgZpKIizFj1bdBfHNzAKrxCbDqoGti22kc6eAk=)
2: F0520A385DD611EAA4AD4767C4F9AE02.roa (hash: 9P/caarcdfE5fgEntnYZ7v6bJcDbToqOd+JV3OwQEFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl
rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 19:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2944 (0xb80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91468A1, serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3
Validity
Not Before: Mar 26 19:05:41 2026 GMT
Not After : Apr 2 19:05:41 2026 GMT
Subject: CN=69c58385-7a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b0:01:72:c4:38:e6:a9:f2:6d:cc:42:ad:fc:
0c:ec:78:fd:33:c2:b6:65:7a:b2:94:e3:a2:9c:e5:
c1:c6:0c:2f:3a:e1:bd:b6:6b:a3:c9:ad:67:6c:39:
8e:14:48:25:c2:75:2f:21:9d:71:b2:e7:6f:57:6c:
87:2e:56:e0:95:4d:37:d1:44:cf:b8:ff:13:50:c4:
78:5e:7d:da:6b:53:95:f3:66:18:00:e2:15:7a:ce:
e1:c9:96:bf:c4:82:3b:a4:f8:ed:52:e3:96:88:ed:
bc:18:b6:01:f3:45:57:51:4f:37:40:a5:44:e1:65:
c1:5e:cf:27:7b:32:32:7a:f6:93:71:b1:71:69:e7:
78:ae:ba:8b:3b:74:41:fb:bc:72:fe:6d:ba:dc:4a:
27:df:bb:a4:ca:4c:73:e6:24:5d:7c:34:88:87:21:
6a:4b:3d:4a:25:df:4f:94:ab:f3:02:bd:4b:f9:ae:
a1:fb:2e:65:ab:82:a7:10:6a:c5:44:e3:da:86:02:
3c:33:8a:db:bb:be:1c:42:68:02:53:af:a3:f8:58:
c8:26:86:65:36:29:03:01:c5:9d:44:8a:45:bf:35:
db:9b:aa:89:16:2f:9c:9d:1c:5c:8c:b2:45:be:8a:
d3:50:59:4c:63:84:e8:ea:33:6d:c8:33:0f:02:22:
08:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A2:D1:3E:4F:1F:22:42:F8:E2:47:53:DE:28:BC:C7:6D:0C:0E:FE
X509v3 Authority Key Identifier:
keyid:15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d4:cb:81:32:7c:fd:8a:cb:32:70:37:a5:37:21:5d:3b:92:
68:40:37:bc:5c:f7:d7:e7:fc:7d:b0:aa:54:65:96:49:27:f9:
5a:5d:3e:79:07:88:72:d2:ae:f3:aa:50:0a:86:d7:af:77:17:
2b:41:fd:06:0f:1f:5c:89:df:e9:56:7b:4e:51:e5:1c:e6:83:
43:8b:21:40:69:4b:e1:2a:de:29:39:04:8b:64:54:cc:56:3c:
e4:75:05:b5:a4:64:c1:ea:14:7b:ce:45:a2:52:92:6f:69:36:
7c:7e:fc:1f:0a:d6:57:6f:91:7e:b3:a5:de:4b:d5:34:1c:18:
3e:e3:80:ce:16:1b:5c:ad:15:79:db:b9:e2:c7:77:31:31:49:
09:55:e3:00:dc:26:ad:34:61:c2:97:98:7d:ae:a0:16:ca:13:
94:89:5c:68:0e:b7:32:dd:86:95:b1:5f:cb:b6:9e:0f:43:bb:
7c:3b:38:fa:33:70:46:3e:e3:94:eb:98:bc:b9:6b:77:1f:ea:
ab:69:9b:d0:d6:59:7c:b5:c7:41:fd:f0:31:ce:29:28:5a:fd:
a9:9b:5b:bc:3c:64:76:82:73:6c:12:49:0c:7a:71:ce:0a:8a:
4c:0b:2d:84:0f:c3:b8:17:f5:c5:fd:73:c8:7a:32:6c:e1:bf:
b8:d4:c3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:17:51 2026 by rpki-client