
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
File: FizOhuKjaX6Ri3y11W2goALHk3E.mft (raw, json)
Hash identifier: uDBeQdau+jP7sEQBm5urmPjK2QtENmvQjBTkqnywfd4=
Subject key identifier: 06:90:5C:5A:D6:1B:B3:5E:7B:97:71:43:A2:F1:45:F1:0C:8E:59:0E
Authority key identifier: 16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71
Certificate issuer: /CN=A91D17E6/serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371
Certificate serial: B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
Manifest number: AE
Signing time: Wed 25 Mar 2026 06:21:34 +0000
Manifest this update: Wed 25 Mar 2026 06:21:34 +0000
Manifest next update: Wed 01 Apr 2026 06:21:34 +0000
Files and hashes: 1: FizOhuKjaX6Ri3y11W2goALHk3E.crl (hash: U2V+G3JpEjVWY2rZ89Rgaq4eV6IdHu19OvXOo1wLci8=)
2: AF69D6BA4C0311F08D3CD93AC4F9AE02.roa (hash: PTHb8KOhzoM5eTge4HROU2y+Kqm/UI2CnopwB3CICmY=)
3: BA5D351C4C0311F0ABCEF33AC4F9AE02.roa (hash: VcrcI1T64xcQTIX2sf42tBKpj/RfLPTrglEhS/U0jDM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl
rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:21:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D17E6, serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371
Validity
Not Before: Mar 25 06:21:34 2026 GMT
Not After : Apr 1 06:21:34 2026 GMT
Subject: CN=69c37eee-3a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ef:eb:f3:11:b3:62:9a:6e:b3:b7:ef:85:29:
26:10:8c:e7:9d:a0:98:75:c5:94:43:47:d3:03:3e:
1e:9b:07:67:0c:c9:10:8f:1a:eb:76:cd:87:6b:f2:
27:ff:8e:d0:d8:3a:87:ac:94:a7:eb:0c:93:ae:52:
39:d5:1c:19:78:96:6b:b6:ee:8c:69:49:3d:79:d6:
e3:c1:59:05:7b:1c:e1:76:04:66:30:2e:8f:1f:7e:
d0:04:d1:d5:f9:5e:e3:18:47:f3:e0:03:32:fc:5e:
20:ff:ba:2c:4a:b1:88:17:37:12:08:5e:7e:55:f7:
71:b7:e0:01:26:fe:bf:60:fe:9b:4e:a3:c8:87:9c:
5b:25:df:5d:29:73:dc:18:d0:9f:7f:94:de:52:c7:
7f:53:da:97:1a:cd:af:75:65:74:76:7e:ef:50:4e:
47:61:b8:52:77:fd:ac:30:71:4c:93:df:70:87:f4:
04:24:29:e6:e1:cd:43:85:f0:9d:3d:80:28:e0:f2:
87:a9:ab:7d:1b:20:6b:28:15:a3:11:f6:9b:16:ae:
35:e2:20:88:1e:aa:12:e9:9c:a5:45:54:2c:7c:22:
6f:91:ae:86:0a:56:c8:40:0d:12:d5:19:1a:bf:0c:
64:76:0f:73:b5:ab:a3:ab:38:53:1a:b7:10:56:59:
28:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:90:5C:5A:D6:1B:B3:5E:7B:97:71:43:A2:F1:45:F1:0C:8E:59:0E
X509v3 Authority Key Identifier:
keyid:16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:d9:bf:28:9c:6d:3b:d3:1a:95:29:60:32:06:66:aa:8a:ce:
71:be:77:9c:4b:d7:c9:63:f5:4f:a7:86:a9:e6:07:fa:1e:64:
4d:aa:78:55:f3:fa:ec:be:24:12:f4:5d:6d:83:ac:2b:a7:b5:
d7:ab:01:00:bd:89:86:cc:da:08:92:0c:7f:50:3f:01:8b:c6:
e7:88:0b:37:99:46:f7:65:ab:cc:7b:21:c2:3f:be:fb:b6:fa:
25:b9:d9:30:3f:01:0a:f5:b6:f9:2e:8a:a5:b1:40:9f:84:06:
7b:41:a7:b7:f1:78:a1:f3:8f:ac:a6:d2:4a:f0:0a:09:4a:ec:
ab:26:1d:7f:c3:22:00:f5:7d:58:3a:a0:4f:fe:5d:ae:e4:a9:
60:f3:68:3c:e7:34:74:f3:35:88:63:13:ee:25:49:ca:da:72:
fe:9b:28:9f:ba:15:9f:0b:5e:ed:ba:30:eb:1a:eb:3d:6a:c4:
e7:7f:94:3a:52:a7:85:0a:ef:d5:c9:3c:4f:26:b3:c0:72:ef:
6c:e1:7c:f0:38:07:d1:d5:fe:2e:a8:35:30:17:bb:17:06:f4:
34:f3:c9:de:e3:c1:c7:98:ee:3a:d3:7b:5b:d7:81:8a:5e:13:
f7:3c:8a:64:87:58:4a:3c:30:0e:e9:49:9a:0b:3f:f9:01:78:
d8:cb:3f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:19:21 2026 by rpki-client