
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
File: fzUqdpVtdwL8d69g_MEp5h_b6jI.mft (raw, json)
Hash identifier: WV0ztyaHcdaf+M+3+bQ69T458h2Jay6q3bak6L5woCk=
Subject key identifier: C5:E5:3F:B7:B3:F6:FD:26:ED:A3:B2:47:34:5D:41:77:C6:0E:A0:CC
Authority key identifier: 7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32
Certificate issuer: /CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
Certificate serial: 0203
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
Manifest number: 01CB
Signing time: Wed 25 Mar 2026 03:08:25 +0000
Manifest this update: Wed 25 Mar 2026 03:08:24 +0000
Manifest next update: Wed 01 Apr 2026 03:08:24 +0000
Files and hashes: 1: fzUqdpVtdwL8d69g_MEp5h_b6jI.crl (hash: zPr46j5AX6BkGrKvI8lHKSOqTvOERtrc/p72kmBVeuA=)
2: 3C2B0A98259911EFB9393E2EC4F9AE02.roa (hash: 5gWMY2ABlQc7NzKLI4CrxZ0mtja8StGBiRjgg1qjDGg=)
3: 2A26D2607E1311EEAF8FD93EC4F9AE02.roa (hash: 2pNCzrFLeuNwJ+o+omJeHhkXCESRdRl7rsiGuuIXYT0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl
rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 515 (0x203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E15AD, serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
Validity
Not Before: Mar 25 03:08:24 2026 GMT
Not After : Apr 1 03:08:24 2026 GMT
Subject: CN=69c351a9-d0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:70:33:27:65:e7:dd:fd:7f:09:14:99:7c:34:
e5:51:05:a2:66:83:41:39:de:a0:11:bd:7b:9c:76:
6d:2e:20:ed:1b:81:da:09:7a:0a:d4:42:b6:33:c2:
29:17:a1:e8:a4:11:ea:36:96:57:c6:2c:64:be:b9:
8a:46:aa:31:84:ac:5c:f9:28:71:e0:41:c0:ab:da:
6f:a8:1f:01:fb:8b:a3:b8:b0:ac:4c:88:bc:c5:00:
74:e0:45:1a:d7:b7:93:18:9e:f6:74:b7:50:68:5b:
1c:99:26:fb:9f:05:92:24:e5:d1:86:04:34:24:44:
d7:ca:34:9e:6b:70:16:01:b3:5f:d5:a7:55:8f:75:
61:04:16:0d:1b:f4:5e:1d:58:80:73:ac:94:89:ef:
7d:6f:4a:bd:03:f1:3c:e1:dd:e1:25:16:13:25:3b:
76:91:49:3f:51:20:52:bc:4e:92:5a:ca:d7:0a:9a:
d3:ed:da:c2:8e:16:21:3d:47:42:3c:45:63:56:62:
e7:99:85:8e:e9:88:7e:dd:09:4f:7a:ab:64:0a:f7:
32:10:c9:c3:bd:4b:04:7a:bf:86:a9:21:a7:cc:09:
fa:a5:f9:ce:0a:1f:39:dd:54:a3:ac:40:de:4b:5d:
82:38:82:79:5c:ce:db:17:e0:a1:cd:8b:1e:43:f7:
6f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E5:3F:B7:B3:F6:FD:26:ED:A3:B2:47:34:5D:41:77:C6:0E:A0:CC
X509v3 Authority Key Identifier:
keyid:7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a5:31:71:42:0d:04:14:30:1c:32:14:c2:37:f3:69:09:0c:
19:32:7c:c4:ae:ae:32:08:5c:9a:5f:24:28:ee:35:01:10:9a:
7d:4b:2c:05:9e:00:8f:04:12:c7:2a:4a:ad:0a:f4:74:ab:a1:
eb:32:90:ee:0f:1e:05:4c:1c:2f:d5:f6:ac:4a:2a:65:1f:e6:
d8:b7:80:23:c4:4f:1e:18:b9:9b:87:ec:db:bc:04:d4:9a:20:
f6:ee:1c:0e:ec:2f:0c:e7:98:07:76:ef:71:a8:0a:96:e4:8f:
55:ae:f8:4f:cf:44:d0:b1:1e:a7:fb:26:c8:54:6a:f0:d0:02:
a3:6e:29:7a:ce:c2:13:66:f4:fd:b2:3a:03:23:86:d3:34:ad:
dd:19:b7:bf:f0:2c:1d:51:b1:c6:1a:62:cb:9a:9d:31:13:28:
26:85:35:63:94:cf:9c:eb:52:a4:0b:d9:b1:82:05:df:0d:fe:
85:9e:af:5a:ef:86:9b:66:a8:00:2f:d3:5b:39:bd:90:c8:66:
13:81:a1:42:fc:66:69:db:09:85:37:a9:62:ec:7a:c0:63:4b:
ec:fc:9b:6d:d8:40:18:00:3f:8f:eb:7a:ae:00:0a:b4:09:56:
41:4e:6b:2d:35:c5:fa:1e:e2:db:af:40:e2:2c:1d:20:0b:ad:
28:2a:7d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:28 2026 by rpki-client