
$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
File: FEVIn91QqkSsHSo8OhZuBsZir9U.mft (raw, json)
Hash identifier: OzMxvo3obQ2vYzO/eGBaqtgux0VQ4tB6SjThOyklkP0=
Subject key identifier: 74:31:E4:99:BC:EC:76:47:D4:73:E9:32:C6:9F:CD:92:E7:93:2D:7F
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Certificate issuer: /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial: 065E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
Manifest number: 0603
Signing time: Tue 24 Mar 2026 22:52:21 +0000
Manifest this update: Tue 24 Mar 2026 22:52:20 +0000
Manifest next update: Tue 31 Mar 2026 22:52:20 +0000
Files and hashes: 1: FEVIn91QqkSsHSo8OhZuBsZir9U.crl (hash: wfzSv6+HYfSI8PZaYBxyGFfdhPbF10HfG13l9AySC/Q=)
2: 4A120466FC5F11EF9B1B9787C4F9AE02.roa (hash: TmnCz4svkXeFZCWbvgUiA1zjjOZv2YaqvM6tFAU7tic=)
3: E481FBD6F2A611EF8F8C0C51C4F9AE02.roa (hash: PAkIYZBg3WfFvlSAb1XDNPnjMRPmbNTXA0dJlYGNXu0=)
4: F8769F9AA4B111EF8F61B261C4F9AE02.roa (hash: WWoSAUMqi1pfNdPU0PAFZbhg/xN3/ydn2IO/3Y3q7Xo=)
5: AE11F30C2F2E11F09F70883CC4F9AE02.roa (hash: shThEphg1zT8MwIcS48dEg3GXpZIFIQyqrKxqn7uNhc=)
6: 9D834ED4E48F11F086089575466F56BC.roa (hash: cawn4yhO8WZa1I2Ob/aWE7RXAnVQqAZfiCinpK+xtsM=)
7: 56E0B60AFC1F11EF8049634BC4F9AE02.roa (hash: +FMd8zZc8YO+7IaM4MnItzvo9Zm598fcDOsfXPW7OgU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:52:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1630 (0x65e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917419E, serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Validity
Not Before: Mar 24 22:52:20 2026 GMT
Not After : Mar 31 22:52:20 2026 GMT
Subject: CN=69c315a5-4a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:53:2a:27:c8:b7:cc:34:a7:f2:42:4c:4b:26:
25:21:d8:d8:47:f2:a7:f7:3d:33:ee:80:a9:33:21:
e9:f7:e6:cb:10:5e:ce:54:c1:f4:d8:83:8f:fd:cd:
25:49:59:e1:6e:08:d0:fd:99:85:57:ea:88:0b:3a:
89:8c:f0:d8:9e:8f:0a:a5:5e:a4:49:ab:32:c1:2e:
55:0e:3d:2c:25:ba:9c:2b:7d:66:1b:0f:b7:45:e0:
22:c9:eb:81:55:ad:ce:46:da:ff:05:af:d3:0b:e6:
aa:7a:9e:54:4c:2d:39:7e:ee:36:6d:44:b8:2e:81:
a1:69:20:88:d3:b4:e1:71:54:e6:24:fa:9e:78:09:
41:f7:38:a1:d0:98:5a:5d:5e:b3:93:d8:ae:6f:81:
03:c7:31:ae:5d:3d:f1:77:16:d4:67:1d:70:d2:f8:
53:ef:f9:f6:f7:85:3d:d8:15:62:c7:84:b5:3d:19:
ec:50:3f:78:e5:49:8e:3c:18:74:69:20:60:6b:40:
85:20:91:97:2d:02:2d:e2:87:7e:56:17:ae:3c:33:
26:fb:93:c3:80:90:cd:a2:71:8d:13:59:61:58:00:
66:b4:38:73:57:d1:bc:29:1d:c9:32:b0:dd:05:d0:
8d:ef:fb:fe:06:2b:91:f1:9c:86:34:dd:17:d9:d3:
41:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:31:E4:99:BC:EC:76:47:D4:73:E9:32:C6:9F:CD:92:E7:93:2D:7F
X509v3 Authority Key Identifier:
keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:a4:27:15:7a:ba:bf:9e:b2:f9:df:ce:34:f0:2b:2b:da:f0:
13:b6:de:70:29:38:bf:16:4f:71:69:07:d7:3a:31:11:fc:df:
9a:36:27:3a:73:c8:79:bc:c7:c7:cd:15:16:97:cf:06:1d:32:
30:f9:66:40:43:f7:02:88:04:06:07:d7:14:17:dc:01:15:c3:
7b:87:ff:a6:7d:f2:01:9d:0a:b8:8d:f6:b9:14:fb:a5:a3:69:
e2:3a:42:1d:dd:fc:65:ea:40:c0:20:d3:1a:be:9c:43:8b:6d:
05:b8:79:e2:27:f9:e3:e4:75:cc:fc:63:2f:36:1c:05:3c:5a:
bd:2c:b4:c2:84:52:32:2f:61:7b:21:84:9e:6c:6f:01:12:dc:
db:85:05:47:93:5f:d3:f1:cc:02:0c:c6:08:fc:07:2f:3d:13:
8a:cf:fb:9e:e5:dc:e3:cf:2b:f4:09:22:86:fd:bb:f7:ac:1c:
f6:a4:de:8b:ea:98:03:86:41:be:15:89:e2:32:9b:08:05:27:
62:25:f7:2e:2b:25:28:52:91:06:32:ec:f2:57:f9:80:2f:00:
ea:1f:32:c8:0d:a7:97:eb:d1:e0:60:49:28:f7:80:d8:95:77:
2b:39:39:82:04:f0:67:c2:c0:70:6f:d0:27:51:d3:0b:96:fb:
3f:b4:38:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:29:41 2026 by rpki-client