
$ rpki-client -vvf rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft
File: fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft (raw, json)
Hash identifier: ROeV+RCe2a+dxouIVGlbxSLywqfGtJ210YBFSVipFqY=
Subject key identifier: 3A:5C:6A:84:09:6A:86:D4:AF:63:00:F7:55:61:CF:38:8D:F7:32:02
Authority key identifier: 7D:BF:83:AE:52:82:C8:4E:B0:EF:F5:5D:5C:1C:67:80:1C:B6:45:C4
Certificate issuer: /CN=A916601E/serialNumber=7DBF83AE5282C84EB0EFF55D5C1C67801CB645C4
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft
Manifest number: CE
Signing time: Wed 25 Mar 2026 06:01:42 +0000
Manifest this update: Wed 25 Mar 2026 06:01:42 +0000
Manifest next update: Wed 01 Apr 2026 06:01:42 +0000
Files and hashes: 1: fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl (hash: kgOyEZNQCv8+hR7Hpg/GV7n+BgoWUY2DZzKopDB70Ug=)
2: 46497846F56111EFA41A451BC4F9AE02.roa (hash: VaBA1XUDwHbEiryzP/LXOGwE+McgzGSWAbO3Tz2VIlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl
rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916601E, serialNumber=7DBF83AE5282C84EB0EFF55D5C1C67801CB645C4
Validity
Not Before: Mar 25 06:01:42 2026 GMT
Not After : Apr 1 06:01:42 2026 GMT
Subject: CN=69c37a46-3d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ac:0b:02:a6:3f:22:ac:66:db:21:27:fc:c5:
f5:2f:ea:c2:8a:bc:c3:fc:cf:b7:69:ac:15:ad:97:
fd:8f:93:11:b8:7a:02:64:3c:d2:3a:ae:61:46:22:
95:24:9b:38:5b:51:d2:0d:16:91:13:46:e6:a9:f8:
5b:fd:59:94:25:13:28:eb:7c:3f:6a:a0:2e:28:af:
a1:a1:b8:c2:ea:72:bb:21:91:57:3f:5b:04:1a:71:
8f:c6:c6:14:8e:04:6f:c1:de:36:aa:3a:32:43:61:
ef:bb:9c:08:e2:fe:bc:fe:4f:fb:75:72:ca:e7:54:
02:76:26:e1:0a:f4:3f:e2:c6:c4:25:1f:ba:a1:47:
fd:7d:0f:93:a6:92:cf:83:2f:c0:c7:05:f0:db:ba:
8b:c8:10:78:72:e2:e3:c8:44:cc:84:9d:73:60:ac:
29:50:f8:e3:19:d9:56:07:98:f4:fe:b9:53:c9:77:
39:ca:e0:f8:e1:f5:fe:e9:f3:07:0a:7c:55:39:d6:
1c:7a:f0:69:b9:e3:a8:47:5d:86:80:be:b2:00:b4:
14:4c:c5:b5:aa:e9:1a:3e:2f:19:13:ab:01:dd:ad:
5a:e5:d6:b8:da:6c:24:99:dc:d4:ea:1b:26:67:7d:
2c:3d:a0:7b:33:59:76:ff:a9:bb:fd:ae:9d:c0:e9:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5C:6A:84:09:6A:86:D4:AF:63:00:F7:55:61:CF:38:8D:F7:32:02
X509v3 Authority Key Identifier:
keyid:7D:BF:83:AE:52:82:C8:4E:B0:EF:F5:5D:5C:1C:67:80:1C:B6:45:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:b2:85:61:1d:d7:28:08:af:d9:37:11:06:61:82:3b:07:81:
d5:75:aa:09:ad:00:94:86:f4:c8:95:96:d2:96:71:6c:11:ab:
33:e8:58:a6:0c:00:ce:2e:f5:77:2c:77:bc:2c:5a:de:7e:7c:
98:0b:12:b8:09:22:c0:b5:3e:a0:8c:0c:74:38:06:e4:cf:8f:
51:06:6b:9b:ff:3a:cc:9c:fe:73:60:87:36:3d:3a:c3:b1:e4:
89:74:87:0a:39:7c:7c:eb:3e:29:9c:ab:08:c0:69:ce:02:9f:
91:58:d7:f8:50:f2:b1:0f:19:e5:ac:60:69:26:f0:39:86:d7:
2f:91:5c:9c:2f:24:86:3a:1f:b5:82:07:d0:5b:39:c5:55:a3:
2c:08:72:a5:ce:f0:99:26:3b:99:2a:45:fc:5a:80:ab:dc:eb:
77:a6:81:dd:66:ff:a7:64:d1:95:30:32:86:85:53:7a:13:88:
e6:4d:f6:54:72:9b:af:90:13:92:98:27:4a:28:63:90:f9:27:
d4:01:b9:94:47:dd:f2:42:2b:06:d0:14:cf:64:50:20:24:cc:
f9:7d:e5:6c:29:fc:4e:b9:24:22:2f:9a:b1:61:ab:ac:ee:ed:
d8:a2:d0:50:92:3a:2a:c9:17:2e:55:24:92:a9:2b:e8:d9:a4:
e7:3d:61:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:01 2026 by rpki-client