
$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft
File: F2vOFchi1HunYKH2ZTj4HVxJO4E.mft (raw, json)
Hash identifier: Szh54r3X5plRo5DvkNqOzw8HrfCbOtthLqdvkYE5z1Y=
Subject key identifier: 00:73:26:A9:D9:65:25:6B:32:4F:CF:93:8A:C9:C6:15:F7:7A:5A:4E
Authority key identifier: 17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81
Certificate issuer: /CN=A91706E4/serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81
Certificate serial: 0103
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft
Manifest number: FF
Signing time: Wed 25 Mar 2026 05:23:28 +0000
Manifest this update: Wed 25 Mar 2026 05:23:27 +0000
Manifest next update: Wed 01 Apr 2026 05:23:27 +0000
Files and hashes: 1: F2vOFchi1HunYKH2ZTj4HVxJO4E.crl (hash: caUJa3F5jr4e2raHlWnsExgA3nqX71NZrZ0RYKw/mIY=)
2: 2CE10886A68511EFB0CF9981C4F9AE02.roa (hash: 3O6VgxIYZQg0/gXdPfFmHtQWn2JCLPxmlmgCbxUiuck=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl
rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:23:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259 (0x103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91706E4, serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81
Validity
Not Before: Mar 25 05:23:27 2026 GMT
Not After : Apr 1 05:23:27 2026 GMT
Subject: CN=69c3714f-322a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:d6:29:99:38:97:bc:6a:53:d6:26:7d:05:49:
8b:a8:31:85:22:b8:c1:ca:d0:10:ab:7a:75:60:6f:
98:c9:45:df:3f:db:48:3d:38:9f:f9:ac:37:a9:4c:
aa:99:56:e0:32:52:a4:0c:e1:26:fe:63:b8:50:94:
bb:c5:b2:7a:e4:68:f5:f4:96:6c:ef:0d:f9:4d:1a:
4b:5c:22:da:07:02:b6:f1:a7:f0:17:2c:0c:4c:c4:
4a:9a:e7:02:60:68:d6:f1:ef:83:3e:ec:9a:26:1d:
a1:69:87:7d:e9:e3:9c:67:e2:81:a7:7f:4a:80:b9:
12:4d:a7:1b:36:dd:2a:46:75:9c:ca:c3:ec:85:e1:
1f:e0:ca:e1:af:6a:c8:48:1e:70:7d:51:3d:5b:d8:
f1:6c:43:46:6d:72:fb:c5:49:a0:19:09:a7:d3:53:
0f:22:19:77:77:c6:48:0b:09:b4:8f:5e:3f:d4:a6:
df:6a:f1:b9:d9:6d:6a:74:27:ec:9a:64:2b:a4:50:
7a:28:e0:f3:90:10:36:56:e6:f1:25:16:72:8e:fb:
75:4c:e8:36:cc:4c:9f:99:56:07:c5:7d:28:65:70:
88:91:44:8b:db:cf:4f:ea:97:0d:9c:98:67:d9:d8:
e5:21:d2:a8:55:23:96:2f:c8:c3:c2:04:2b:10:3f:
88:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:73:26:A9:D9:65:25:6B:32:4F:CF:93:8A:C9:C6:15:F7:7A:5A:4E
X509v3 Authority Key Identifier:
keyid:17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:45:82:85:f5:63:1a:9c:4d:2d:91:60:e3:e8:93:25:a4:7f:
56:fc:4a:87:4b:30:f8:18:bd:12:c6:32:54:86:8f:75:32:46:
60:66:6d:34:22:cc:9a:7d:16:3a:dd:f8:79:fe:a3:50:aa:a4:
4f:7a:2c:97:38:db:da:dd:12:4e:4e:f8:73:a8:2c:d3:9e:3d:
66:a2:9e:cc:d0:af:a6:39:d6:41:ca:16:ba:6a:80:0a:c9:47:
1a:3d:b0:7b:c5:2c:7a:30:a9:8b:bf:38:45:4c:17:89:b8:77:
76:e8:25:25:b1:4c:8e:57:25:a6:6c:05:f5:0a:12:5c:7d:a0:
55:15:6e:24:55:0d:5a:0e:32:a0:00:20:06:3e:4a:31:28:06:
5e:58:b1:bd:e5:85:ec:fc:47:a8:a1:61:28:e4:7b:ca:19:48:
5b:d5:c0:6a:12:b3:05:75:33:20:6f:e3:74:ad:6b:b3:0e:65:
d2:64:00:87:7d:74:74:96:c4:04:fb:52:6e:1e:c3:d2:2f:c4:
14:2b:de:e8:1c:2c:40:c3:31:bf:71:f3:49:78:c8:d3:9c:2a:
2f:ed:78:16:f1:27:58:39:de:99:0c:0a:f1:70:7f:5b:60:ab:
de:b0:ba:c3:ab:aa:1b:0d:60:1b:60:75:7a:11:e4:ff:aa:4b:
c5:69:10:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:33 2026 by rpki-client