
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
File: FeAstOfcuwrM4igRnP-ANDhil78.mft (raw, json)
Hash identifier: hf9tvn7exTgSk+uyeFi7+s35RO0W2i+B+kbu7rQkOr0=
Subject key identifier: 84:10:90:B6:ED:0B:C1:23:FE:9B:95:03:F7:B5:2F:4A:7C:90:CA:72
Authority key identifier: 15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF
Certificate issuer: /CN=A91BC15C/serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF
Certificate serial: 3526
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
Manifest number: 3521
Signing time: Tue 24 Mar 2026 15:04:08 +0000
Manifest this update: Tue 24 Mar 2026 15:04:07 +0000
Manifest next update: Tue 31 Mar 2026 15:04:07 +0000
Files and hashes: 1: FeAstOfcuwrM4igRnP-ANDhil78.crl (hash: U4CCV5KEJp2Gk6R6XuyFXUlkJDztD0wpXinHtaWwzkM=)
2: A88B0898EC9911EE9627923CC4F9AE02.roa (hash: Md4TX499kG6Z3N25ExlcNJXGAzV59nM+xoDsohYAAQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl
rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13606 (0x3526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC15C, serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF
Validity
Not Before: Mar 24 15:04:07 2026 GMT
Not After : Mar 31 15:04:07 2026 GMT
Subject: CN=69c2a7e7-3897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:db:54:7e:db:62:a9:4e:64:0f:73:3e:e3:
92:4a:44:d0:43:aa:e9:56:9d:a1:84:81:7b:a4:8c:
03:24:ee:73:cc:2f:bd:85:ab:5f:37:fa:b7:ba:dc:
16:84:92:c5:6b:f2:f6:88:54:80:1c:45:3e:86:34:
9c:04:5c:41:f1:0e:9e:8c:3a:02:38:c4:1e:da:8e:
09:e0:4c:c8:a6:68:c4:eb:06:f5:99:04:4d:45:3a:
2f:60:49:ee:60:32:72:34:21:b5:5e:27:52:ef:73:
16:95:e7:70:dd:2e:16:9e:1d:fe:c1:29:4a:46:f0:
0d:02:cb:a9:f1:ed:7e:7e:8f:8e:e1:7a:8e:7b:4f:
9f:b6:7d:75:84:99:2a:99:80:96:51:92:20:b8:28:
cd:b0:b8:4a:0d:2e:9c:0b:81:3b:f3:29:1b:7c:06:
61:9c:ad:45:a2:ed:c1:3c:91:e0:d7:31:76:9f:2d:
0d:59:f3:b4:46:fa:a9:1a:b8:b6:e9:61:79:45:6e:
4d:c5:31:da:12:53:ed:46:b2:ab:14:f4:60:57:64:
d8:d7:d8:09:b6:fc:e5:ca:3a:ca:f3:d8:12:83:1e:
ba:f4:5d:05:d7:43:15:af:95:6b:37:78:0e:79:92:
ad:5a:a9:93:2c:25:9b:96:4d:82:e0:77:dc:d3:b0:
69:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:10:90:B6:ED:0B:C1:23:FE:9B:95:03:F7:B5:2F:4A:7C:90:CA:72
X509v3 Authority Key Identifier:
keyid:15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:17:11:64:2c:69:4f:6d:45:04:b1:63:a2:d1:1a:7b:9c:73:
f9:7f:1b:8a:e5:39:9a:e0:b2:37:3e:21:28:db:30:24:fc:e2:
b1:44:ed:c2:70:bf:a2:8a:db:90:58:0c:e3:1d:56:6f:0e:31:
c5:a6:14:cf:c8:77:c5:47:7c:aa:9f:15:57:88:a6:d7:5c:ed:
fe:e8:5d:22:57:1e:11:25:3d:b9:f1:cd:d5:b0:db:99:90:db:
43:5a:a2:2f:3c:b4:cc:c3:98:44:ba:f8:9a:61:0a:3a:7c:55:
fb:dd:00:c8:31:90:f5:74:87:18:8f:ab:43:dc:26:d6:6a:d1:
17:07:92:00:eb:70:74:4c:d6:b2:78:29:61:de:35:08:93:c1:
c3:89:c0:54:93:38:ab:57:b8:64:f0:b2:7b:7b:21:9c:19:25:
6d:a7:60:95:18:b2:ea:29:4c:65:bb:c0:83:d2:80:e5:85:e3:
1b:11:8e:74:26:cd:eb:65:1c:cf:23:e7:3c:ae:42:14:3d:51:
0c:a4:8d:e2:4a:cf:51:bd:2b:b1:b1:1e:ad:5c:0f:ce:d5:f6:
f1:a5:1c:2a:28:dd:a8:89:00:0e:c5:b6:8f:e0:6b:b2:04:1b:
9f:7c:d9:5f:13:85:2e:91:25:01:d9:31:66:10:33:c5:9b:77:
24:e6:c9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:53 2026 by rpki-client