
$ rpki-client -vvf rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft
File: _f0WbMUdnjq3SWQHS25klGdOL24.mft (raw, json)
Hash identifier: 4LwkmBJwbA3OZ/nGax6YOgyDLQk9YqmagGW0dq4L0gA=
Subject key identifier: 3C:25:22:01:B8:28:33:8B:BB:1A:6A:EA:7E:25:01:D0:DB:32:45:9B
Authority key identifier: FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E
Certificate issuer: /CN=A91884F8/serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E
Certificate serial: 1F57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft
Manifest number: 1F3E
Signing time: Tue 24 Mar 2026 15:56:22 +0000
Manifest this update: Tue 24 Mar 2026 15:56:22 +0000
Manifest next update: Tue 31 Mar 2026 15:56:22 +0000
Files and hashes: 1: _f0WbMUdnjq3SWQHS25klGdOL24.crl (hash: A5m6usnNDrFciUVUxuzqIQ+pBZLtLhnHCcC/Sf7mFTo=)
2: 888B4AC26B3611E6A149F871C4F9AE02.roa (hash: AkHZVFpWpRiqPyM58pXt8XWBhgL1/61b1bh+bdJb7XA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl
rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:56:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8023 (0x1f57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91884F8, serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E
Validity
Not Before: Mar 24 15:56:22 2026 GMT
Not After : Mar 31 15:56:22 2026 GMT
Subject: CN=69c2b426-6426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:05:98:51:a6:44:cb:61:58:67:c1:3b:e0:f4:
2b:e6:a1:6f:d5:2d:c2:2c:2b:ca:81:20:2a:ce:6a:
29:fe:92:eb:85:38:c2:87:55:d9:40:0d:a8:82:b8:
0e:e1:31:b0:93:7e:2d:77:c0:bb:a2:b2:f7:ce:ad:
9f:34:bb:5d:67:d3:28:ce:13:61:15:9e:77:bb:8c:
fb:4f:78:58:c2:43:25:ea:9f:4e:38:a5:e2:8a:c6:
bb:15:50:9d:d5:ff:57:6d:a2:12:81:3c:e6:2f:a5:
24:80:1e:c1:ea:c2:4b:73:f2:27:1d:f3:07:ab:d1:
b7:04:4b:5f:bf:83:6a:08:3c:5d:cd:2e:62:c5:b9:
88:83:ac:09:88:6a:4e:fc:0d:76:8d:91:d1:1c:fc:
d3:22:00:08:42:8f:ca:a5:8a:aa:67:74:22:a0:12:
e9:e0:f6:85:90:06:4d:b0:08:2a:ab:19:82:7b:2c:
cd:bf:41:a0:9d:fb:0d:f6:ed:d3:6c:78:84:6b:93:
99:26:27:dc:5c:64:38:a2:f0:20:e9:e5:37:66:6c:
f2:90:0a:82:df:fb:9c:6f:2d:40:3b:2f:6a:c1:6d:
df:6e:8d:7d:a9:ec:d8:17:c2:a7:bd:71:c4:9e:c0:
19:51:f6:ff:45:52:2d:13:a7:7e:0c:a6:bf:4a:c6:
6d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:25:22:01:B8:28:33:8B:BB:1A:6A:EA:7E:25:01:D0:DB:32:45:9B
X509v3 Authority Key Identifier:
keyid:FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:65:bb:b0:5f:36:22:b7:a9:5c:7c:d1:03:19:fe:97:5b:0f:
36:2a:bf:7c:ae:63:21:11:aa:82:4c:46:7b:6c:9f:e9:d6:51:
67:8c:18:df:e1:4c:e5:dd:3d:92:47:d1:a2:8f:01:cb:fc:43:
35:04:b7:15:7a:2c:ee:37:3a:71:40:7e:91:a5:fa:7f:c4:90:
0c:90:03:85:84:46:b4:73:63:16:17:b6:dd:39:27:82:b3:33:
19:3f:8a:29:cd:51:31:2a:4b:27:53:74:49:64:ee:82:55:88:
78:e8:8f:a5:6b:bb:82:e3:6a:3a:9c:b4:47:91:ee:9d:8e:1d:
be:f4:5a:7a:c7:5f:fb:41:95:a5:2d:38:b9:58:77:c7:32:a7:
9e:37:32:c2:22:14:de:74:e7:34:98:a2:f8:1c:1b:bf:b4:a8:
cd:06:a2:95:6f:27:2a:2e:46:91:b7:78:28:2c:8d:14:0b:2e:
99:2b:ca:ac:51:29:49:c9:ea:36:37:6b:b2:e7:e4:fa:1e:05:
40:77:5e:18:c7:30:d4:57:3d:52:f0:60:a3:2d:de:42:c9:32:
51:72:ba:79:cf:67:74:24:e8:fb:5b:f8:e0:21:a8:0c:4f:2e:
71:2f:4f:9d:48:c2:3d:38:5d:14:c1:f2:c1:52:4a:83:84:74:
03:87:88:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:12:12 2026 by rpki-client