
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
File: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft (raw, json)
Hash identifier: uuiTQYZcOmvYeDAa7FGY6G7KraZWFYMbkF7Y+4/qY5E=
Subject key identifier: 55:2B:FB:31:3C:0B:ED:F6:92:AE:C9:8B:3F:4F:96:93:CB:6A:80:34
Authority key identifier: FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC
Certificate issuer: /CN=A91C93EE/serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC
Certificate serial: 0D35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
Manifest number: 0CF6
Signing time: Thu 26 Mar 2026 18:23:09 +0000
Manifest this update: Thu 26 Mar 2026 18:23:08 +0000
Manifest next update: Thu 02 Apr 2026 18:23:08 +0000
Files and hashes: 1: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl (hash: 6JGcc8UB7XOTnbWHlOohUZvKTSW8LHSVbYX4CsfF8AM=)
2: B256D8FC479711F09A25BE59C4F9AE02.roa (hash: GxHO9vhkZZ6yMHc2121mln0db/uLLdFiDdhvsMD2Mh4=)
3: 34E6B680511A11F0B256FA65C4F9AE02.roa (hash: STPsoHykGH883jZd7PHWkCRzW28Vwl2tuDcKNWuClEM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl
rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 18:23:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3381 (0xd35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C93EE, serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC
Validity
Not Before: Mar 26 18:23:08 2026 GMT
Not After : Apr 2 18:23:08 2026 GMT
Subject: CN=69c5798d-3fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5d:16:90:18:da:7d:74:0b:f6:06:d2:0d:66:
31:1e:53:9b:03:77:97:1a:ba:6e:93:67:7f:41:a9:
ed:d7:68:db:b6:99:e2:b6:4b:2d:80:4c:3e:3e:e8:
12:73:52:d9:b5:8f:7a:57:06:ce:74:16:77:de:17:
b7:9a:17:20:79:0d:ad:9f:c9:81:95:6c:79:28:28:
8c:f5:cc:bb:90:7f:60:6e:c5:e9:07:64:f1:ba:66:
58:13:0a:83:fb:19:38:d0:f3:db:2e:bf:0a:23:50:
62:0a:3d:bd:49:f9:29:c2:79:ec:82:78:bc:66:f4:
31:b7:b1:4b:2d:29:26:00:85:a8:34:98:41:3d:37:
ad:46:84:a4:f6:55:14:34:73:1b:fc:5c:6f:b8:e8:
01:ef:ab:e0:c1:f3:9b:29:20:97:3c:f2:f4:5f:81:
d3:f8:6a:1c:ac:81:6f:f6:a1:0b:13:f7:86:71:87:
a7:23:68:fe:b6:f1:fc:0c:72:d9:a1:52:75:e1:ba:
2c:dc:60:3d:11:8b:fa:c1:29:70:60:06:6a:ec:1f:
bd:d7:75:47:14:c4:47:4e:29:76:08:cb:af:76:f8:
c7:ec:54:28:f9:7e:e0:d5:9e:19:62:bf:21:d6:a4:
ed:b1:64:b3:c1:fb:fa:c0:fe:ed:62:bf:b7:05:92:
de:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2B:FB:31:3C:0B:ED:F6:92:AE:C9:8B:3F:4F:96:93:CB:6A:80:34
X509v3 Authority Key Identifier:
keyid:FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:23:a2:aa:de:45:ab:6d:14:66:2f:ab:a0:a7:f8:ae:14:c3:
4f:5f:eb:c3:55:03:2d:2e:30:4b:dc:08:92:b5:a9:82:d5:63:
a3:0d:d3:fc:b6:f1:a2:44:6e:53:79:b0:52:a2:64:82:cf:fe:
0c:ed:a7:a0:55:f4:2e:fb:ab:da:45:2a:6e:61:c7:a0:5e:a6:
14:74:64:d5:90:d9:1c:79:75:07:d2:80:4e:95:ef:4e:32:ab:
7f:e4:1e:a9:0a:84:67:83:bf:69:6a:fa:42:c6:da:14:ec:38:
0e:47:ee:42:a6:5b:d6:df:b2:12:a8:98:66:b1:34:9d:38:3b:
02:ed:50:88:fd:be:0f:fd:62:ee:f1:48:37:ad:ce:74:67:9c:
d0:a3:10:8f:de:6b:5b:f5:d2:cd:e5:d8:51:0c:fd:8b:ff:78:
50:84:98:41:86:22:0d:c5:e9:40:eb:da:48:24:c4:69:f7:e1:
62:b4:42:36:4f:56:a8:74:1b:99:c1:64:a9:f6:e6:77:b2:22:
bc:4b:ba:b5:c0:39:10:28:fd:3f:60:db:39:bf:b2:f3:70:6a:
4d:cc:a7:9b:fb:33:80:ba:54:b4:b4:59:6c:df:67:a3:c1:3b:
1e:2b:96:d5:01:0d:39:f3:7a:98:b7:e5:32:71:8e:ee:41:3b:
68:b5:0f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:36 2026 by rpki-client