
$ rpki-client -vvf rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft
File: fBMe4KgLg01I0X1pZVpbx75mi2o.mft (raw, json)
Hash identifier: +U8pYXrJvSBeTNzvWb/ifbht+VIlwl9EeKv0VNQNjCE=
Subject key identifier: CB:6B:F4:F7:28:27:23:D4:83:E5:94:93:81:A0:40:E8:B5:B4:42:BB
Authority key identifier: 7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A
Certificate issuer: /CN=A91637DD/serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A
Certificate serial: 04F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft
Manifest number: 04E1
Signing time: Tue 24 Mar 2026 23:31:40 +0000
Manifest this update: Tue 24 Mar 2026 23:31:39 +0000
Manifest next update: Tue 31 Mar 2026 23:31:39 +0000
Files and hashes: 1: fBMe4KgLg01I0X1pZVpbx75mi2o.crl (hash: Ftkb3Vrbsp47NcvJWb8seiQjGJJzfFV57FQGgz+FO6Q=)
2: CA95FB0EA1E611EDABFD7D7FC4F9AE02.roa (hash: HsF8gy96J2wsoICfYmcwznwixkV1OQ/RoRjC/SmAq8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl
rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1264 (0x4f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91637DD, serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A
Validity
Not Before: Mar 24 23:31:39 2026 GMT
Not After : Mar 31 23:31:39 2026 GMT
Subject: CN=69c31edb-d77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:53:63:22:6c:51:34:1b:a4:bf:e6:c9:87:
36:cf:c9:bf:81:5f:fe:e7:97:75:b5:4e:7c:87:69:
fc:83:e4:6b:d1:91:19:22:6b:fa:6c:24:e1:dc:1b:
15:51:6e:f2:5d:f8:ff:9e:53:b2:fe:0e:ef:7d:39:
b1:bd:97:75:d5:17:43:3b:63:80:92:33:1f:62:00:
8d:b2:41:7c:c3:f9:ed:42:4d:ef:51:36:f3:83:c4:
30:01:12:50:dc:65:a1:a9:f9:d8:0a:2a:72:f8:7d:
17:91:b4:a4:35:3b:09:d1:8d:69:5d:ab:cb:0b:72:
c7:be:ee:c2:68:fc:2a:73:cd:f7:97:a8:c7:6f:ab:
d6:95:2d:41:66:6b:73:9d:cc:fc:95:80:da:7f:93:
6c:f4:43:5b:14:96:6d:f3:71:0c:d1:cd:79:32:f7:
73:86:32:8f:6e:f3:3c:8b:b9:8a:84:80:84:28:6a:
11:f4:93:fd:52:b9:05:bc:02:51:8d:db:b8:dd:b8:
47:41:33:4e:62:f5:84:83:31:24:12:76:b1:13:ca:
2a:21:32:43:d3:2e:bb:e9:61:9b:bb:39:7c:5b:b7:
7d:9b:05:20:d3:0c:62:79:89:db:99:2a:af:52:d8:
ac:38:ca:d5:6f:b0:88:f3:d6:78:81:40:fe:a8:f6:
5e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6B:F4:F7:28:27:23:D4:83:E5:94:93:81:A0:40:E8:B5:B4:42:BB
X509v3 Authority Key Identifier:
keyid:7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:f3:91:ff:40:fa:fd:e9:68:e3:d3:5d:77:ae:33:7b:c8:7e:
4b:71:06:a7:ec:18:98:84:9d:a3:3c:1f:4d:ac:0f:fe:47:cb:
95:e8:02:43:b7:78:27:cd:ce:97:32:18:82:da:43:f3:3d:31:
1a:88:8f:be:f7:56:fc:33:36:f5:09:0b:75:2f:6f:13:ba:a0:
44:33:81:61:e5:4e:42:81:1c:09:22:9d:95:36:48:5e:fd:d8:
3f:b9:2b:de:a3:48:71:4f:57:20:6e:45:f8:fc:08:36:e0:2a:
03:ba:d8:20:62:7c:18:9c:03:5f:7b:1e:8a:ba:c9:8c:a6:d9:
b2:1e:82:21:5d:82:0f:7d:2f:12:28:4a:3d:b9:63:64:1c:61:
4e:41:16:6b:8f:1a:fb:c4:f4:1d:05:99:12:60:7e:13:b8:d6:
9b:4e:cc:81:40:3f:5b:ad:6c:f8:12:f6:ac:73:57:0d:f0:5a:
07:ee:0c:3b:90:e6:5b:d3:e7:0f:22:8f:ab:db:1f:4f:d0:d6:
a5:62:e6:37:3e:c9:79:7c:37:bd:2e:f7:3d:be:d3:39:42:65:
7e:57:41:83:ac:39:d4:97:72:4c:90:2b:3c:48:26:14:a7:39:
60:9c:7e:85:d9:ff:9f:fd:27:e1:26:01:26:51:62:59:ea:28:
f7:a4:4f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:38:09 2026 by rpki-client