
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
File: FqgerO8cn8MyDElats0MZ2Oqg2M.mft (raw, json)
Hash identifier: VYMigwX4xamUrFs90KTgnZkAWEM5dLu+ibv9lFKShy4=
Subject key identifier: 49:DF:4B:85:1D:92:56:0C:9F:D6:7E:0C:1F:04:43:AD:9F:72:F2:6D
Authority key identifier: 16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63
Certificate issuer: /CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363
Certificate serial: 01EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
Manifest number: 01E6
Signing time: Wed 25 Mar 2026 02:42:42 +0000
Manifest this update: Wed 25 Mar 2026 02:42:41 +0000
Manifest next update: Wed 01 Apr 2026 02:42:41 +0000
Files and hashes: 1: FqgerO8cn8MyDElats0MZ2Oqg2M.crl (hash: H4Fj7CL9kXAJZzoWO0/awyLF/hbR7LJFRYaHQjN87nk=)
2: 0AE7E0B6421711EE97070469C4F9AE02.roa (hash: TXtiBvAtvh9LWngWR1FwgUq0im7yX5O+il3zkWJ0318=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl
rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:42:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490 (0x1ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFC92, serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363
Validity
Not Before: Mar 25 02:42:41 2026 GMT
Not After : Apr 1 02:42:41 2026 GMT
Subject: CN=69c34ba2-577f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:0a:4c:97:b8:e4:31:b7:ac:c8:64:cd:f2:
23:7f:b6:a6:5a:fd:dd:a6:77:ac:27:92:ea:73:1b:
d2:66:e0:f0:0d:5b:b8:9f:a8:f1:b0:19:4f:e0:00:
c0:22:59:1a:6c:62:38:b9:67:c7:8e:51:ec:0d:5d:
05:e9:47:c6:d1:71:23:23:65:eb:1a:e6:e2:21:24:
38:b0:2e:34:75:e7:eb:f9:b3:5e:7f:53:ad:19:af:
67:7d:24:bb:6d:25:67:5d:88:46:97:49:e3:5b:9c:
a7:c7:e6:f6:da:4a:d9:05:5e:90:47:e7:93:93:20:
f3:30:73:43:c4:57:40:96:d0:9b:dd:b7:c9:99:1a:
1c:6a:c0:df:75:18:1d:85:de:07:05:5e:ec:81:7a:
90:f5:7b:d5:88:c1:5c:6c:40:ff:83:21:f5:be:69:
20:92:88:6d:a7:95:dd:84:25:2c:c8:c3:35:48:19:
69:76:63:14:8a:a4:ab:67:ab:7c:89:d9:3d:b7:2a:
80:6b:26:78:f5:5c:6e:f7:bf:d4:d8:36:8e:4f:99:
43:5e:aa:98:af:38:c3:b1:63:38:eb:1d:de:05:09:
e9:4f:ee:20:b4:c8:9c:a2:75:72:ee:2e:39:b1:b3:
fb:59:e6:86:a6:d1:d4:d3:f1:5f:86:79:b4:f6:ed:
64:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DF:4B:85:1D:92:56:0C:9F:D6:7E:0C:1F:04:43:AD:9F:72:F2:6D
X509v3 Authority Key Identifier:
keyid:16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:57:8a:a7:90:d2:af:10:1d:20:6d:02:71:b7:74:85:6c:90:
ca:d9:c5:84:84:9c:ef:ac:88:dc:fc:ce:b7:37:c7:5b:53:9d:
b0:b1:de:9c:44:31:3f:0a:b6:e3:f6:44:6a:48:b2:7f:d7:91:
e5:61:df:27:90:f0:aa:60:2d:4e:b4:b4:88:52:1a:5e:b1:08:
e4:3a:18:db:4e:ad:ec:d6:f4:2d:b0:c8:4a:96:c7:1e:5a:3f:
56:09:80:a5:6e:f2:d0:02:1c:16:a0:12:fa:b8:bc:db:63:7d:
3a:90:19:ee:45:9a:51:3d:47:fc:71:0a:41:6f:71:63:3e:4e:
ba:c1:ee:8b:22:e5:59:fd:d4:5b:28:2e:f1:80:e6:22:be:76:
66:85:49:8a:26:1f:8b:42:c5:c9:ba:a6:4d:7e:cb:99:37:a1:
66:12:6e:7b:83:bc:4d:cc:fd:34:52:a9:03:3a:81:80:b1:77:
97:f6:cc:6b:06:90:d3:10:4e:cf:a6:3e:bf:65:7c:99:f8:da:
ef:87:6a:20:f0:33:be:da:c4:bb:18:1f:38:59:18:7b:ee:9b:
39:77:d8:b1:7c:4d:08:ca:f7:d1:39:12:86:df:fe:ef:f6:c2:
d8:f6:66:29:16:c2:6c:af:60:66:4f:1f:0b:89:bd:43:8b:7f:
f8:1a:1c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:18:09 2026 by rpki-client