
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
File: ftF6_XNwpqkI2CYrhtq8fu09YUA.mft (raw, json)
Hash identifier: o23lqGIEfD2e7c8bvNFJuEdtVeq6vFwA006nhCKIyCw=
Subject key identifier: 9B:2D:63:97:AC:EE:D6:32:97:2E:A0:DF:07:3E:6B:3B:CA:D8:22:1A
Authority key identifier: 7E:D1:7A:FD:73:70:A6:A9:08:D8:26:2B:86:DA:BC:7E:ED:3D:61:40
Certificate issuer: /CN=A91B6F87/serialNumber=7ED17AFD7370A6A908D8262B86DABC7EED3D6140
Certificate serial: 07F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
Manifest number: 07EE
Signing time: Tue 24 Mar 2026 20:59:28 +0000
Manifest this update: Tue 24 Mar 2026 20:59:27 +0000
Manifest next update: Tue 31 Mar 2026 20:59:27 +0000
Files and hashes: 1: ftF6_XNwpqkI2CYrhtq8fu09YUA.crl (hash: N6QA4TikQSq7GwZd/5T7CqvqgdvBuSM9v4Hx85VoAQI=)
2: 69BA51482C9C11EBB49A3A32C4F9AE02.roa (hash: KB/3XbvQPZSl1G18GLHJC22j/mSJrkrh6CsXpmCgJuE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.crl
rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2041 (0x7f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6F87, serialNumber=7ED17AFD7370A6A908D8262B86DABC7EED3D6140
Validity
Not Before: Mar 24 20:59:27 2026 GMT
Not After : Mar 31 20:59:27 2026 GMT
Subject: CN=69c2fb30-3a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:41:40:47:5f:e1:f6:cb:92:61:74:fa:a9:2f:
8e:46:a3:d0:ab:68:7b:c0:82:ac:d9:84:ab:3f:20:
f5:9e:9f:e5:48:86:48:51:b5:d4:82:54:0b:f3:70:
09:b1:67:2b:ad:ea:8f:2a:79:ac:e0:bf:a2:18:0b:
2e:70:23:ca:c2:c5:2e:1b:32:29:73:4e:7b:64:30:
47:2c:ea:e8:3e:13:3b:2e:ed:f3:aa:b0:8c:ca:3f:
79:51:92:ee:e3:4e:a6:dd:d5:35:13:2b:33:59:a0:
f8:65:20:aa:93:34:ce:d2:38:61:a7:41:90:1e:f7:
96:30:76:80:3c:e8:b8:72:30:b7:4e:ff:24:38:4a:
4d:2e:99:bf:09:e8:06:f0:a9:ff:4a:3d:79:e0:24:
0b:79:d7:a3:e6:0e:d1:84:5c:d7:29:08:88:5c:79:
9d:ec:a9:8a:10:67:89:8c:0b:37:b2:75:97:5b:34:
fc:d0:d6:d7:41:77:a5:32:1b:77:b7:91:a5:01:df:
61:66:ba:0d:71:92:d0:70:fa:0e:1a:26:c1:a8:38:
6d:40:71:ff:78:fb:8e:04:5b:ad:7d:f9:6a:a4:00:
8c:72:f6:2a:a3:69:0d:ae:88:8e:4a:4a:ab:03:ab:
0c:cc:77:10:92:08:ab:ab:72:93:86:6a:c8:50:82:
58:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2D:63:97:AC:EE:D6:32:97:2E:A0:DF:07:3E:6B:3B:CA:D8:22:1A
X509v3 Authority Key Identifier:
keyid:7E:D1:7A:FD:73:70:A6:A9:08:D8:26:2B:86:DA:BC:7E:ED:3D:61:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:cd:1d:31:58:db:6f:ad:72:4a:07:83:d9:ae:a1:13:99:ab:
93:86:c3:e2:cf:65:50:0a:3e:fe:8e:5e:b6:61:41:6e:83:78:
a2:3d:da:4a:78:f1:a2:18:68:f3:62:e4:8b:d8:6d:1d:aa:31:
9a:1c:e7:44:77:62:7e:a1:c2:b4:39:2d:54:58:5a:15:b1:d9:
b3:f5:d6:ee:29:68:90:67:d1:44:f2:65:e1:12:e6:e7:70:6f:
5d:3a:34:cf:d9:15:ca:e7:d2:fe:ff:87:f9:fe:ed:58:f4:81:
12:39:66:bf:e7:f6:b2:48:9c:fd:6f:3c:01:5d:0f:15:9b:50:
6c:44:66:bc:5e:b7:a5:13:5d:e3:97:7d:b9:1e:38:35:0b:bc:
72:7e:3d:4d:a6:a8:64:c3:4b:1f:4e:be:dd:20:5d:a4:c2:fa:
ee:f3:cd:10:91:73:40:73:91:a8:be:82:9c:1a:5f:50:17:e5:
be:44:76:fa:f7:41:96:3e:c3:49:da:25:be:8b:0c:b1:a3:1e:
d2:02:af:72:b2:9b:fd:d9:59:cd:4d:38:56:5d:20:97:fb:b0:
d3:8e:54:17:e9:63:4f:a4:5e:15:d3:83:8f:e2:72:1d:67:78:
49:0f:63:27:f8:fe:21:95:a9:e8:02:dd:41:6b:38:94:6b:72:
71:b0:2c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:45:13 2026 by rpki-client