
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
File: fmfojMQDeKlwRj3y0LBgiOZdubA.mft (raw, json)
Hash identifier: hWXg1Q+m/1FEeu1FGweK4WFBc00lD7Cu5mLcvXVjlCA=
Subject key identifier: DF:15:41:0C:F2:72:B8:48:0E:45:2A:3F:79:23:0A:25:F7:67:18:27
Authority key identifier: 7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0
Certificate issuer: /CN=A91C9D04/serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0
Certificate serial: 09B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
Manifest number: 201B
Signing time: Tue 24 Mar 2026 16:36:51 +0000
Manifest this update: Tue 24 Mar 2026 16:36:50 +0000
Manifest next update: Tue 31 Mar 2026 16:36:50 +0000
Files and hashes: 1: fmfojMQDeKlwRj3y0LBgiOZdubA.crl (hash: N+9+gS1UUn9HO/siTqr0h1axHKvbV8a5Mo1H9u6Bu+g=)
2: A1DFD796A65511EABDAED713C4F9AE02.roa (hash: m4DYqNviRswbFR7fGEs+RlqfCBi1sLTXNU77Vhy5SsE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl
rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:36:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2486 (0x9b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9D04, serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0
Validity
Not Before: Mar 24 16:36:50 2026 GMT
Not After : Mar 31 16:36:50 2026 GMT
Subject: CN=69c2bda3-4122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:88:bb:8b:80:fd:e9:7c:aa:b4:0e:80:aa:51:
03:b3:3c:be:2f:00:a7:d7:c1:7f:f9:c0:8f:c4:56:
bc:85:89:3c:86:47:60:91:95:1b:f5:a5:2c:91:76:
e8:47:e0:bd:f5:0a:44:dc:35:4d:f7:9c:f2:cb:0e:
f0:9e:04:02:5d:18:7c:c9:0b:ff:5a:7c:aa:68:55:
c4:01:f4:51:19:4f:39:a4:a7:ef:02:5a:80:8c:df:
85:a3:b2:ae:76:d0:88:d1:35:75:35:e9:69:e2:1b:
6e:d5:66:d4:c5:97:f1:3b:f4:38:ba:d1:f9:f3:e7:
e6:3c:46:01:34:5d:28:28:f0:a8:25:5a:97:85:dd:
70:6b:06:ca:f1:74:0f:c4:35:6a:21:05:c5:e6:21:
f9:8d:69:7b:28:82:54:42:39:5d:1e:e8:4a:d5:ef:
2b:aa:96:58:77:12:a8:0a:5d:6a:41:3b:a0:71:cc:
1c:dd:f7:08:7e:6b:24:68:65:26:12:f5:a0:30:44:
c2:e7:7f:0d:4a:85:2b:79:a0:5c:e3:b5:d4:9a:b8:
98:5c:3b:e1:72:b2:70:ea:20:cd:ce:84:fa:27:fa:
f6:df:79:08:9b:9b:c5:1a:24:5e:8a:50:20:d1:68:
e4:af:8b:7e:77:cf:42:14:c5:c7:00:65:ce:46:ae:
66:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:15:41:0C:F2:72:B8:48:0E:45:2A:3F:79:23:0A:25:F7:67:18:27
X509v3 Authority Key Identifier:
keyid:7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:d4:ad:5d:2a:10:a7:15:19:5a:5c:81:41:66:d3:dd:0a:59:
20:e2:d9:7d:39:07:ec:21:72:16:f4:17:0f:05:a2:6a:96:a5:
7f:66:bc:43:d9:3f:47:09:45:a0:cf:b7:e5:ff:86:9c:6e:19:
e8:b7:2d:30:b8:0b:00:49:a4:38:c9:e3:ec:ce:3d:50:43:45:
2d:84:0f:d2:fc:7b:d1:08:71:1a:7d:c6:72:2d:53:f9:3d:4a:
1b:d4:f8:e0:a4:18:31:3e:5d:b7:9f:f8:11:2b:42:8c:42:68:
dc:d0:42:8c:38:3b:4a:f1:74:6f:b9:c6:5c:6a:4a:cb:03:fa:
8a:1a:a1:fe:a0:b6:94:81:d6:de:72:8d:87:77:ef:74:6d:ad:
3e:38:9f:1a:bc:19:6a:b0:a1:39:ca:7e:1b:2b:64:80:d1:e4:
24:11:a5:cd:83:5f:04:0d:fc:b3:82:b5:d1:fd:e5:11:4f:94:
20:12:cc:1e:63:41:e3:b2:ec:ba:a3:63:b2:07:38:2b:22:02:
80:c9:0d:4c:62:fe:b0:b0:2c:42:33:f8:74:40:16:53:5c:ed:
57:92:c6:68:a9:08:d9:70:6f:8d:03:11:d3:eb:15:86:1f:d3:
02:c1:3c:55:d7:ef:bd:94:a9:33:e3:c7:fa:54:20:a6:83:a2:
e1:f8:e4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:35:09 2026 by rpki-client