
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft
File: Fh4CKuiXURLudYnUmzFmDKkKBBA.mft (raw, json)
Hash identifier: KdmmT2xquPkdrIfPc0keVmTeBTEyrVCy/mJ5OASMIXA=
Subject key identifier: 37:2E:67:58:35:01:5A:14:FA:E9:AF:E2:87:0A:26:7C:95:43:83:1C
Authority key identifier: 16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10
Certificate issuer: /CN=A91A865F/serialNumber=161E022AE8975112EE7589D49B31660CA90A0410
Certificate serial: 0C8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft
Manifest number: 0C7B
Signing time: Tue 12 May 2026 18:39:50 +0000
Manifest this update: Tue 12 May 2026 18:39:50 +0000
Manifest next update: Tue 19 May 2026 18:39:50 +0000
Files and hashes: 1: Fh4CKuiXURLudYnUmzFmDKkKBBA.crl (hash: Ue9LIDn3l9U+28QJU0IsrU/ezlW2VuIffRvftXiOutI=)
2: 8BB1EB9E1C8A11EABAA73A62C4F9AE02.roa (hash: aBLu12X/KjBQz6+vTYYYPJq2RB5e32VzOLCjoKt8rHA=)
3: 8AAF803A1C8A11EABAA73A62C4F9AE02.roa (hash: OyMpzW+KeT1/VlF8h4v55nU9WTVj14mDgJ/Hy/mEDTE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl
rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:39:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3213 (0xc8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A865F, serialNumber=161E022AE8975112EE7589D49B31660CA90A0410
Validity
Not Before: May 12 18:39:50 2026 GMT
Not After : May 19 18:39:50 2026 GMT
Subject: CN=6a0373f6-ba9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:88:d7:52:92:99:7e:4c:f0:57:32:aa:a7:68:
d0:9c:e4:16:42:05:dd:0a:9f:7d:45:30:4c:2f:61:
b3:f2:ff:b1:d2:d7:29:73:1d:2b:a6:0e:11:28:ee:
af:22:5d:e9:2a:c0:cc:32:e6:ed:36:e6:b2:ff:c2:
54:68:6e:58:05:09:ed:5f:11:08:12:4c:e4:b9:a7:
67:23:28:6d:db:d2:dc:ae:de:5a:b1:fa:ab:ce:27:
cc:5f:9a:f4:36:fa:45:00:aa:87:88:bb:3c:62:ac:
0d:c2:e6:98:2f:2e:58:bf:49:75:83:4b:0a:7b:03:
43:93:12:74:2a:19:ee:db:a2:e3:ee:68:9c:6f:de:
9d:70:da:b0:19:66:37:d9:e8:25:3c:ce:16:75:d0:
cb:bc:be:67:6d:a4:3b:3a:de:8b:21:d1:dd:a2:c6:
00:1d:e3:fa:54:81:f1:f1:d1:b4:13:88:90:c8:f8:
f3:96:1e:a5:0f:72:1f:dc:37:71:37:95:33:1f:ff:
19:00:48:99:3b:75:bc:dc:68:e4:09:8b:f4:26:d5:
b4:42:d0:f9:51:ed:da:77:93:18:87:28:f3:ac:4c:
91:41:27:ff:92:c8:46:aa:78:a9:37:60:f5:be:34:
76:b0:26:c9:af:53:ac:5a:81:e8:01:c6:d0:ef:e9:
dd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2E:67:58:35:01:5A:14:FA:E9:AF:E2:87:0A:26:7C:95:43:83:1C
X509v3 Authority Key Identifier:
keyid:16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6c:23:ea:1b:79:ea:59:12:df:97:31:2c:0d:af:34:64:87:
15:54:b6:18:70:9a:cd:1b:9a:dc:34:55:9f:19:fb:e2:b4:f0:
b1:fa:32:b3:11:70:2a:45:89:97:ac:66:4a:b8:f5:32:1f:20:
13:25:9d:01:a3:6b:33:8f:00:44:5c:35:21:fa:59:4a:96:10:
f5:20:b4:b6:1f:62:cf:f1:24:43:a8:66:84:a3:05:a4:41:80:
29:77:cb:24:4d:8a:11:fc:85:6a:44:cf:7e:ae:54:6a:10:38:
a9:ad:36:eb:00:35:f1:99:84:03:26:42:ad:6b:55:3c:73:6f:
ba:4b:61:52:a5:eb:04:af:09:87:24:c2:ac:81:fa:ff:d2:fb:
cd:e3:21:e4:ee:b9:e9:a0:44:d1:81:ed:6c:42:99:b1:3b:db:
b9:a2:18:d7:10:20:9a:83:b8:32:d1:51:4b:8b:16:7b:ff:c8:
0b:5b:58:72:8c:0d:29:3f:59:5b:29:e1:e5:ee:c1:69:ca:9f:
a4:51:cd:e1:f9:3d:3b:71:8f:e9:d3:9b:f7:47:22:aa:bc:f8:
88:56:d8:18:37:29:a2:e1:17:46:6f:09:eb:37:00:6e:ae:ea:
4a:76:ec:2e:b6:f2:ad:2c:22:e6:a6:79:f7:d0:af:02:5d:21:
a9:1c:00:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:42 2026 by rpki-client