
$ rpki-client -vvf rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft
File: FGXcLLcCU-31FM1DdyZi_zu49uA.mft (raw, json)
Hash identifier: HEMxmnYrgaj28yDAFvqVw9egmPlJx29OonbzvqMy/QI=
Subject key identifier: 9B:08:6B:EB:1B:0C:D8:B1:CE:C6:88:12:D2:CE:F3:7B:C0:B1:9E:8D
Authority key identifier: 14:65:DC:2C:B7:02:53:ED:F5:14:CD:43:77:26:62:FF:3B:B8:F6:E0
Certificate issuer: /CN=A915280B/serialNumber=1465DC2CB70253EDF514CD43772662FF3BB8F6E0
Certificate serial: 0378
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft
Manifest number: 036C
Signing time: Wed 25 Mar 2026 00:33:09 +0000
Manifest this update: Wed 25 Mar 2026 00:33:08 +0000
Manifest next update: Wed 01 Apr 2026 00:33:08 +0000
Files and hashes: 1: FGXcLLcCU-31FM1DdyZi_zu49uA.crl (hash: botbIcr5GwR/o/3+n/i2bH/WeuLxo7B00Hozcuk4yPk=)
2: 27EECF18EDF811ECBCAF5567C4F9AE02.roa (hash: Fk7iHIaG48O8mtZYpCgeKF8alXuhTbLRNAi8XI+pBJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.crl
rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 888 (0x378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915280B, serialNumber=1465DC2CB70253EDF514CD43772662FF3BB8F6E0
Validity
Not Before: Mar 25 00:33:08 2026 GMT
Not After : Apr 1 00:33:08 2026 GMT
Subject: CN=69c32d44-c65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:34:b7:6c:f9:2b:53:20:f8:48:36:77:01:
e3:e2:2f:d5:d7:9e:b4:ae:40:44:ba:cd:0c:d3:c7:
e1:5a:38:c0:00:1f:74:89:9e:c4:19:3d:1c:41:5c:
48:be:cb:b7:92:26:1a:c0:f5:6c:3e:06:0d:53:8d:
da:6b:54:5a:2f:01:7a:3f:af:d8:aa:cf:06:09:3b:
62:77:10:1e:a9:61:7e:9e:62:22:12:14:01:cf:82:
c6:68:ad:ef:6c:c0:62:28:e9:b0:92:9f:9e:bc:e0:
24:fc:ad:c1:2a:86:7b:a9:7e:6a:a4:90:56:e7:b5:
47:aa:2d:9e:90:1c:a6:72:bf:5d:59:ed:ce:e0:5a:
50:d9:96:18:69:5f:da:41:c5:42:c3:bd:8a:7b:4a:
13:0a:85:31:22:11:8a:d8:56:12:b7:ba:08:72:2c:
06:b7:49:98:61:cd:5f:5e:40:85:19:22:c8:ea:4b:
e1:85:c5:38:99:76:b8:6f:03:dd:23:7f:91:d6:4d:
7e:b2:aa:4a:cf:98:e5:98:86:e2:a7:97:b8:14:b2:
73:83:d9:34:a6:c4:b4:25:ca:6b:ba:7d:4e:29:e9:
15:a4:86:0e:06:60:af:b9:ff:e2:e7:6c:18:1c:ff:
d4:e5:ad:81:db:c4:37:c4:9d:3b:9d:98:32:d2:90:
33:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:08:6B:EB:1B:0C:D8:B1:CE:C6:88:12:D2:CE:F3:7B:C0:B1:9E:8D
X509v3 Authority Key Identifier:
keyid:14:65:DC:2C:B7:02:53:ED:F5:14:CD:43:77:26:62:FF:3B:B8:F6:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:6d:32:79:7b:40:6a:aa:07:fe:ae:8d:a2:d4:c4:3d:00:0a:
8e:2f:d6:df:87:90:0c:ad:ed:dc:b7:69:b7:8b:72:72:6e:3e:
64:01:e1:2d:cb:b2:68:02:a6:ab:60:18:78:a7:29:11:cb:54:
8c:85:79:29:09:98:07:86:cb:fd:69:1a:1b:08:ce:64:8b:77:
fb:95:a7:de:9c:7a:17:5c:2e:63:65:96:71:df:f1:c0:cb:3b:
66:ab:45:17:93:95:e8:2a:e7:59:95:fd:d2:2c:23:5e:57:d6:
ca:05:f5:57:88:c8:14:20:81:58:c0:4e:3f:3d:96:e6:ce:b0:
8f:77:c8:f9:94:0d:94:d5:cb:0d:f2:3e:85:c1:f0:2d:1f:f6:
85:6c:44:b8:bb:37:f6:6e:c5:20:3f:39:5c:df:b6:4b:19:f8:
6e:aa:3b:c6:1b:11:40:1b:49:67:24:3b:15:1f:d1:d8:3d:c6:
8d:5d:ad:2f:a6:3b:c4:06:bd:b2:ec:55:90:7c:7d:23:81:12:
71:48:28:d1:7d:cc:62:51:6c:ba:31:14:96:bb:58:3d:3d:19:
0d:98:92:3a:94:f6:b0:14:63:44:ec:23:f1:86:c9:fe:52:71:
f5:71:22:70:62:e3:1a:ee:e3:e2:9a:e9:ed:b5:94:8c:23:cc:
88:3f:d5:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTI4MEIxMTAvBgNVBAUTKDE0NjVEQzJDQjcwMjUzRURGNTE0Q0Q0Mzc3MjY2MkZG
M0JCOEY2RTAwHhcNMjYwMzI1MDAzMzA4WhcNMjYwNDAxMDAzMzA4WjAYMRYwFAYD
VQQDEw02OWMzMmQ0NC1jNjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsK40t2z5K1Mg+Eg2dwHj4i/V1560rkBEus0M08fhWjjAAB90iZ7EGT0cQVxI
vsu3kiYawPVsPgYNU43aa1RaLwF6P6/Yqs8GCTtidxAeqWF+nmIiEhQBz4LGaK3v
bMBiKOmwkp+evOAk/K3BKoZ7qX5qpJBW57VHqi2ekBymcr9dWe3O4FpQ2ZYYaV/a
QcVCw72Ke0oTCoUxIhGK2FYSt7oIciwGt0mYYc1fXkCFGSLI6kvhhcU4mXa4bwPd
I3+R1k1+sqpKz5jlmIbip5e4FLJzg9k0psS0Jcprun1OKekVpIYOBmCvuf/i52wY
HP/U5a2B28Q3xJ07nZgy0pAzIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJsIa+sb
DNixzsaIEtLO83vAsZ6NMB8GA1UdIwQYMBaAFBRl3Cy3AlPt9RTNQ3cmYv87uPbg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjgwQi85N0JDMURCOEVE
RUYxMUVDODk2QUU3NDBDNEY5QUUwMi9GR1hjTExjQ1UtMzFGTTFEZHlaaV96dTQ5
dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZHWGNMTGNDVS0zMUZNMURkeVppX3p1NDl1QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MjgwQi85N0JDMURCOEVERUYxMUVDODk2QUU3NDBDNEY5QUUwMi9GR1hjTExjQ1Ut
MzFGTTFEZHlaaV96dTQ5dUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlW0yeXtAaqoH/q6NotTEPQAKji/W34eQDK3t3Ldpt4tycm4+ZAHhLcuyaAKm
q2AYeKcpEctUjIV5KQmYB4bL/WkaGwjOZIt3+5Wn3px6F1wuY2WWcd/xwMs7ZqtF
F5OV6CrnWZX90iwjXlfWygX1V4jIFCCBWMBOPz2W5s6wj3fI+ZQNlNXLDfI+hcHw
LR/2hWxEuLs39m7FID85XN+2Sxn4bqo7xhsRQBtJZyQ7FR/R2D3GjV2tL6Y7xAa9
suxVkHx9I4EScUgo0X3MYlFsujEUlrtYPT0ZDZiSOpT2sBRjROwj8YbJ/lJx9XEi
cGLjGu7j4prp7bWUjCPMiD/VlQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:05:12 2026 by rpki-client