
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
File: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft (raw, json)
Hash identifier: zlcf3HArQ8uQJqdvepv/XVTFq3C8lhcnOhC4VxtFRUo=
Subject key identifier: D1:74:43:7A:46:A1:C5:FC:AD:C2:0E:03:D8:38:37:A3:98:3E:CB:6C
Authority key identifier: 15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C
Certificate issuer: /CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
Certificate serial: 0209
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
Manifest number: 0202
Signing time: Wed 25 Mar 2026 02:28:07 +0000
Manifest this update: Wed 25 Mar 2026 02:28:07 +0000
Manifest next update: Wed 01 Apr 2026 02:28:07 +0000
Files and hashes: 1: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl (hash: TIwWKefLaLAVpT4xjhM9D1JbLYvYz/xVWS6NJeT0jN0=)
2: 1D52E8E860D711EEA524AE64C4F9AE02.roa (hash: d4FaNu31p/uaswzVtkfn+Uus7pKd0fHTyCObgFxrvWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl
rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 521 (0x209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D61DF, serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
Validity
Not Before: Mar 25 02:28:07 2026 GMT
Not After : Apr 1 02:28:07 2026 GMT
Subject: CN=69c34837-4562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:62:d9:5a:a8:10:ec:08:8d:e8:9c:c0:ce:7e:
67:d4:5b:32:49:37:ee:e3:d9:28:e3:45:9b:ed:d4:
76:6b:7e:73:03:3e:37:ae:39:ab:4a:7a:5c:6b:e7:
72:d7:8f:96:83:be:76:2c:0e:3a:86:82:09:c8:e6:
d7:79:44:9e:4b:c4:e4:f3:8c:d1:8d:e6:6d:59:67:
e2:2f:4d:6e:59:e1:41:9e:3a:ca:57:80:f9:c8:83:
ec:a2:48:02:d4:eb:91:a0:14:df:b8:a9:84:30:32:
68:8d:93:35:84:90:e1:dc:0e:d7:2e:5a:ac:18:90:
15:cb:41:3b:10:fd:14:90:94:20:03:d3:29:88:75:
2e:9a:fc:5e:45:87:1a:a6:f2:9e:de:e1:b7:8c:5a:
4e:98:91:3a:83:43:4e:0b:8a:da:da:fe:c0:8a:00:
dc:ab:68:e7:42:10:fc:54:41:13:c6:42:cc:41:4c:
fb:24:c0:33:47:5d:fc:39:fa:92:dd:1b:93:30:53:
57:88:6a:b9:6e:23:99:75:7d:47:1d:7b:ec:ce:2d:
cc:46:55:66:5f:d7:87:99:ca:0a:34:27:c2:10:cc:
fb:32:a7:17:be:f2:04:6c:52:f8:2c:bf:0a:5b:e4:
0a:6f:4a:3c:d2:5e:84:e5:09:7e:b0:2f:f8:bc:08:
8f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:43:7A:46:A1:C5:FC:AD:C2:0E:03:D8:38:37:A3:98:3E:CB:6C
X509v3 Authority Key Identifier:
keyid:15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:bd:b4:91:4b:c1:89:64:7f:66:e3:7f:a9:b7:ca:8c:40:b7:
99:e0:da:da:8c:d7:19:d2:f9:45:92:a2:8a:5e:05:12:ca:72:
db:1c:04:ed:f3:31:ed:d1:80:90:93:4a:03:9e:9e:5a:51:11:
ad:0c:49:9c:31:63:b1:8f:b4:11:67:d9:2c:dd:5c:73:66:2a:
77:b0:fc:69:00:bd:b4:e8:1f:82:a3:73:fa:0a:6c:63:f4:f5:
14:fe:c2:c4:ca:82:89:2d:de:cd:3c:6b:4b:d3:e5:49:0b:d4:
c0:bb:f2:6b:7e:49:75:95:26:ac:5d:34:c9:44:00:d4:d6:f9:
7d:29:f7:d5:38:b5:86:a3:f2:32:b2:75:7d:a3:50:10:05:d4:
d0:3f:d4:b0:9c:27:c7:ea:80:65:f3:5b:37:45:93:86:36:cd:
e3:02:1d:77:5f:ea:5c:70:04:45:dd:1a:90:23:ca:74:2b:c1:
fc:28:a1:5d:46:48:3c:a2:c3:63:54:fb:f9:82:c7:06:91:34:
94:c4:9c:95:73:e2:63:50:ba:35:1f:c3:a3:c6:a2:f2:02:0d:
31:6a:50:bf:aa:2a:e3:52:9c:d8:e2:71:bc:69:c4:73:64:dd:
a3:f4:87:f5:72:23:8c:a3:1c:2f:4c:5f:df:75:12:71:58:59:
71:7d:0a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:17:43 2026 by rpki-client