
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft
File: FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft (raw, json)
Hash identifier: p2RNJklV/oBFXgu3VfqL6CK5wnONeB1mXWsnGojKBYQ=
Subject key identifier: 79:8E:2F:1D:A3:2C:FC:00:90:14:EC:8D:71:85:CA:04:80:7F:E0:43
Authority key identifier: 14:07:E3:1C:87:E1:16:24:59:D8:3C:3A:EB:48:8C:97:5A:9C:23:F1
Certificate issuer: /CN=A91B2131/serialNumber=1407E31C87E1162459D83C3AEB488C975A9C23F1
Certificate serial: 070F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft
Manifest number: 0707
Signing time: Tue 24 Mar 2026 21:39:50 +0000
Manifest this update: Tue 24 Mar 2026 21:39:50 +0000
Manifest next update: Tue 31 Mar 2026 21:39:50 +0000
Files and hashes: 1: FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl (hash: SMh6pJexRigujsHwToMoKKqe4FPPnYOxCLOJ4+NoATQ=)
2: D240E2EE814D11EBB1CE367FC4F9AE02.roa (hash: 15pEXJcucsCIR0M5bRuAonPQfsR2kZ7v/pBuDfGaiCk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl
rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:39:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1807 (0x70f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2131, serialNumber=1407E31C87E1162459D83C3AEB488C975A9C23F1
Validity
Not Before: Mar 24 21:39:50 2026 GMT
Not After : Mar 31 21:39:50 2026 GMT
Subject: CN=69c304a6-4193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:a6:dd:c9:03:0f:14:9d:0f:8a:02:d8:c9:
58:25:98:e6:ab:ea:dd:cb:59:37:21:ae:19:47:aa:
2b:bc:07:aa:5c:b9:a7:b4:cc:5f:2f:0c:9e:ff:43:
2a:b9:f1:90:c6:dd:7c:03:20:49:9a:22:c5:61:bd:
34:d5:5c:ee:c6:1d:29:c2:3b:fc:9a:5a:b9:b4:79:
95:de:06:ae:11:8b:46:61:81:a5:92:08:c0:5b:f8:
68:cd:9c:26:b1:e8:04:4c:11:54:a1:5f:f9:7a:6a:
19:70:19:04:70:94:26:1d:a4:cc:18:e5:33:d0:3b:
8b:0f:5d:b7:0d:e2:b2:60:79:58:ba:46:ee:95:3b:
54:11:db:c5:a3:a4:64:cc:dd:7c:09:b1:c6:ee:3e:
00:86:46:39:85:1a:24:f5:98:86:1f:b0:0a:bd:5b:
d0:c5:df:01:f2:96:e0:1d:c5:39:16:1b:fb:e2:66:
f1:6b:b3:1b:f9:ac:95:fc:7c:3f:db:45:6d:e4:4e:
7d:38:6b:a7:ad:7d:c3:da:39:99:89:98:7f:2a:ee:
22:74:f3:89:93:23:65:f9:c0:dd:bb:1c:98:70:1e:
e7:49:a9:94:22:ad:95:9f:c7:22:43:8d:4e:e1:af:
b7:33:b4:6f:70:e5:9d:4c:f9:62:94:f5:35:38:dc:
2b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8E:2F:1D:A3:2C:FC:00:90:14:EC:8D:71:85:CA:04:80:7F:E0:43
X509v3 Authority Key Identifier:
keyid:14:07:E3:1C:87:E1:16:24:59:D8:3C:3A:EB:48:8C:97:5A:9C:23:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b1:65:0b:f0:28:a4:26:c6:29:4d:7e:b9:51:ea:2b:4d:33:
3c:57:b0:4a:f0:4f:fe:02:64:cf:c0:38:6a:4a:81:0a:37:1d:
59:c8:58:06:16:de:90:f8:10:e8:7e:69:66:3b:98:15:12:8f:
65:74:83:38:da:e4:ee:ce:1e:71:a2:28:0c:01:b9:66:fe:bb:
11:8c:1f:3d:84:66:4e:fd:44:92:cc:a3:f2:e8:2f:7c:b2:4f:
12:7d:ab:60:af:94:92:f7:28:44:10:b7:d7:71:04:21:d5:83:
a3:ea:a1:04:67:a5:7f:cc:b0:c1:69:7d:ba:95:79:b1:bd:b4:
56:50:b6:62:05:5e:a1:c1:75:03:55:42:fe:78:0a:53:41:3b:
31:35:5e:62:e9:cf:09:14:3d:b5:c9:64:70:d9:5c:61:2b:3e:
3b:67:a4:2c:73:2b:2d:08:aa:52:2d:90:79:96:6b:9b:63:7b:
d4:ea:f2:4a:74:57:cc:fb:5b:22:b4:9c:10:01:8f:9e:98:95:
80:e9:82:6c:e9:3a:84:f1:3a:cb:56:78:e9:45:0f:d3:6f:86:
40:35:0a:58:99:af:51:35:43:2e:bf:0d:9a:b3:10:67:af:cb:
74:e9:60:60:ca:8d:aa:b5:08:3d:4b:aa:d3:1f:25:e5:bf:d2:
b7:6b:80:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:17:46 2026 by rpki-client