
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
File: ftCxNhmz84MH3uG0Dn8neTItvm4.mft (raw, json)
Hash identifier: I/8UPLG43CBEUeutAHkRoDP16XvdHEwHzwdPbB2CoYc=
Subject key identifier: 50:41:3C:08:35:17:6E:1F:A9:C3:5D:B6:EA:E0:87:F4:26:E7:96:F0
Authority key identifier: 7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E
Certificate issuer: /CN=A91A7EA5/serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E
Certificate serial: 0D1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
Manifest number: 0D02
Signing time: Tue 24 Mar 2026 18:02:38 +0000
Manifest this update: Tue 24 Mar 2026 18:02:37 +0000
Manifest next update: Tue 31 Mar 2026 18:02:37 +0000
Files and hashes: 1: ftCxNhmz84MH3uG0Dn8neTItvm4.crl (hash: bAVUkmTKo9IJonMcR4au+YMXDY0qdeRBBE30/eYDnEs=)
2: 93E73ABE833811ECA0A7120DC4F9AE02.roa (hash: fNaidmYlOzWHjrBiA/U1bBlqdgJlWr5NlKnTyGVkvtg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl
rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3356 (0xd1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7EA5, serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E
Validity
Not Before: Mar 24 18:02:37 2026 GMT
Not After : Mar 31 18:02:37 2026 GMT
Subject: CN=69c2d1be-730f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:37:a0:57:16:65:bb:ac:d1:2d:c6:51:a2:
49:38:8e:dc:e5:8c:bc:f7:4c:93:8b:8b:60:13:d0:
4e:5a:c6:74:1c:86:32:21:f0:6f:b6:c6:04:2c:ff:
7f:90:61:ae:28:3d:2b:fe:9b:19:c4:9c:ed:35:4a:
bf:fb:1d:b0:64:ce:3d:f4:bc:46:9e:6a:94:c2:c1:
fc:9f:53:73:89:6d:a4:9f:a8:26:23:0d:28:d8:b3:
88:ba:12:a2:49:bf:50:c8:98:8f:da:88:4c:f6:c1:
97:b2:9e:c1:11:f1:66:98:3b:de:2b:38:e7:4a:5c:
14:54:e3:0e:ae:ec:2c:ce:22:22:7e:b8:a5:71:a4:
e7:18:2f:60:76:e6:05:e0:1c:ab:96:ad:13:c3:8c:
23:dd:fd:a7:91:55:db:1f:cf:6b:25:c2:c7:bf:e8:
16:b9:76:56:9f:0d:bf:3d:27:ba:be:9b:a5:c9:3d:
f2:b6:1a:58:dc:80:6b:d4:51:43:b0:85:b9:3e:80:
cf:2e:56:6a:e3:5a:de:f5:82:e9:28:d1:23:37:26:
88:21:af:a3:52:b4:44:aa:6e:29:45:46:5a:3e:9a:
5f:8f:11:00:ad:90:5d:79:9d:9f:69:ee:89:4d:5b:
67:9b:0c:67:dc:f7:87:e0:7b:29:be:b6:30:50:ed:
92:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:41:3C:08:35:17:6E:1F:A9:C3:5D:B6:EA:E0:87:F4:26:E7:96:F0
X509v3 Authority Key Identifier:
keyid:7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:15:79:57:f8:5f:13:3d:86:cf:06:66:f4:71:5d:28:84:2e:
19:b2:34:90:4e:1f:b4:18:d6:9e:db:06:b5:97:e3:63:9d:5b:
51:f2:a3:0b:95:ed:09:60:6b:e7:4d:6c:2d:aa:b1:fe:c8:b6:
22:47:54:89:a5:ce:de:d9:26:c8:66:4d:e2:75:48:f2:08:43:
f1:ad:4a:c1:65:1e:e0:c7:3a:87:96:51:c2:c5:33:f7:84:96:
d9:c9:be:f4:6d:a0:8e:86:75:5b:e4:3e:46:b7:d1:1e:7e:0f:
5d:ec:02:c9:4f:81:55:0c:95:54:a6:fe:d7:c1:16:37:68:9a:
96:d4:f6:c5:90:10:8d:b5:0d:96:13:27:42:47:d6:02:eb:22:
21:ca:50:3d:b8:df:5a:46:69:44:1b:ad:cd:cf:84:f9:b2:fb:
26:29:43:c0:d3:75:06:15:d6:9f:46:aa:2c:59:35:6c:d3:26:
39:1c:83:bc:2e:8f:d0:11:37:23:ac:b3:f6:6c:1f:90:94:71:
1e:76:98:cb:f4:72:9b:20:70:1f:6a:9a:7c:6c:0c:d3:c0:73:
37:16:5e:ee:4a:a0:f7:06:b2:e1:69:e2:c3:48:8c:66:d7:9d:
3d:8b:74:dc:ff:1b:95:d3:02:1a:c5:29:20:bf:fa:db:d3:e0:
77:88:75:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:06 2026 by rpki-client