
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
File: faWJztV_HlzEhgPROEIjk24WAn4.mft (raw, json)
Hash identifier: L8+ypLx74JuNJO3N7tBY9GGC9wUFzLfwdQQUm4Wkiwo=
Subject key identifier: 2F:94:44:02:E8:AC:43:32:2A:21:FF:BF:47:98:EE:1D:5D:A7:F5:F9
Authority key identifier: 7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E
Certificate issuer: /CN=A91E9721/serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E
Certificate serial: 10E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
Manifest number: 10D2
Signing time: Thu 26 Mar 2026 17:16:44 +0000
Manifest this update: Thu 26 Mar 2026 17:16:44 +0000
Manifest next update: Thu 02 Apr 2026 17:16:44 +0000
Files and hashes: 1: faWJztV_HlzEhgPROEIjk24WAn4.crl (hash: pfXIoYiFkhtf1SFAk9+HS0mDrh5t0+nH9qVVgO+s4is=)
2: 16EA264C3FC611E9A0E68A30C4F9AE02.roa (hash: I3JDh6StMg4zJOMs9mkcVFkIKkoCAlh87CB+OtMgiuI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl
rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 17:16:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4323 (0x10e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9721, serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E
Validity
Not Before: Mar 26 17:16:44 2026 GMT
Not After : Apr 2 17:16:44 2026 GMT
Subject: CN=69c569fc-dc35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b8:03:27:e7:a3:aa:5b:be:54:d4:03:28:e1:
d8:52:fd:c1:7b:e0:8c:ec:99:b9:f2:4a:f3:b4:11:
29:6c:31:1b:8f:c7:11:cc:6f:f9:9c:4f:32:64:7a:
8f:55:6b:28:f2:f1:f3:fc:54:8b:20:9a:19:4a:0b:
61:44:1f:0f:61:f1:4c:1b:b6:3d:80:58:9d:e5:91:
ea:d1:17:ec:70:cc:54:65:9d:b7:3c:d4:b3:71:19:
ff:fc:c4:fe:05:68:2c:5b:ff:aa:ee:2e:90:ef:b6:
d3:df:8a:6a:72:40:e3:4a:32:dc:1b:8c:40:2d:3e:
ea:2e:f4:3e:b4:ad:e6:9b:4d:64:6e:f8:71:37:1e:
a5:0a:ee:5c:43:54:d3:d5:d6:81:6f:08:2f:c8:6f:
b9:b4:e9:d6:f3:0f:bc:f6:4a:8c:b9:28:1a:94:b1:
8f:75:d2:1f:42:b0:e2:68:d0:21:04:b5:ba:fd:86:
14:32:03:0a:d7:6a:44:2d:45:51:e0:37:7c:72:fd:
1c:1a:0d:98:57:36:51:1f:8c:46:d8:6a:a8:9e:87:
9d:6c:a4:14:a6:54:e3:65:df:94:d3:7c:59:8d:24:
ec:67:04:11:28:81:b8:a6:c0:5a:5f:86:be:ab:87:
c4:1e:0f:7b:cc:ba:76:e3:41:cf:fe:c0:c2:d3:9c:
36:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:94:44:02:E8:AC:43:32:2A:21:FF:BF:47:98:EE:1D:5D:A7:F5:F9
X509v3 Authority Key Identifier:
keyid:7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:f6:31:8f:72:03:52:81:8e:6f:46:4d:44:b7:5c:e3:36:3c:
94:36:b1:a0:90:ac:28:be:ed:6c:fe:d7:86:46:5c:aa:01:2e:
49:8e:97:ab:15:c0:ab:ad:ea:d9:a2:b2:40:ff:b7:09:44:51:
6a:93:14:89:a8:0a:cb:ef:19:2b:1b:eb:2e:4b:fa:8b:fa:ec:
e5:00:c1:5b:aa:74:58:c0:37:05:2a:38:99:d3:55:34:1a:17:
05:02:1f:0b:0d:30:1f:77:78:37:a2:49:bd:27:e4:37:cf:22:
62:53:1f:14:80:3a:48:5d:d6:63:e1:bf:2f:23:de:8e:b8:f9:
c1:89:3c:78:38:d1:43:80:f1:b2:40:27:c6:c4:a7:d8:6d:ae:
8f:89:09:17:67:f6:ed:b8:dd:72:46:b1:b0:3c:33:13:59:f8:
dd:01:76:0a:70:26:6a:f4:5b:00:77:3a:3b:40:9b:42:aa:c9:
d2:ab:97:ea:f8:59:81:18:44:6a:e1:5c:3e:b7:11:65:a7:23:
0f:87:64:e5:91:46:51:bf:b0:86:2c:2e:be:f0:0a:97:84:e2:
a1:cb:3b:31:25:3f:a1:57:42:c6:95:59:69:ad:af:be:0d:73:
d2:44:6d:c0:09:77:2f:b0:b3:97:38:af:40:2b:d3:f6:1a:11:
38:7c:71:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTk3MjExMTAvBgNVBAUTKDdEQTU4OUNFRDU3RjFFNUNDNDg2MDNEMTM4NDIyMzkz
NkUxNjAyN0UwHhcNMjYwMzI2MTcxNjQ0WhcNMjYwNDAyMTcxNjQ0WjAYMRYwFAYD
VQQDEw02OWM1NjlmYy1kYzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlLgDJ+ejqlu+VNQDKOHYUv3Be+CM7Jm58krztBEpbDEbj8cRzG/5nE8yZHqP
VWso8vHz/FSLIJoZSgthRB8PYfFMG7Y9gFid5ZHq0RfscMxUZZ23PNSzcRn//MT+
BWgsW/+q7i6Q77bT34pqckDjSjLcG4xALT7qLvQ+tK3mm01kbvhxNx6lCu5cQ1TT
1daBbwgvyG+5tOnW8w+89kqMuSgalLGPddIfQrDiaNAhBLW6/YYUMgMK12pELUVR
4Dd8cv0cGg2YVzZRH4xG2GqonoedbKQUplTjZd+U03xZjSTsZwQRKIG4psBaX4a+
q4fEHg97zLp240HP/sDC05w2MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC+URALo
rEMyKiH/v0eY7h1dp/X5MB8GA1UdIwQYMBaAFH2lic7Vfx5cxIYD0ThCI5NuFgJ+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTcyMS84QUVDMkFDNDNG
QzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hsekVoZ1BST0VJamsyNFdB
bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZhV0p6dFZfSGx6RWhnUFJPRUlqazI0V0FuNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OTcyMS84QUVDMkFDNDNGQzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hs
ekVoZ1BST0VJamsyNFdBbjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOfYxj3IDUoGOb0ZNRLdc4zY8lDaxoJCsKL7tbP7XhkZcqgEuSY6XqxXAq63q
2aKyQP+3CURRapMUiagKy+8ZKxvrLkv6i/rs5QDBW6p0WMA3BSo4mdNVNBoXBQIf
Cw0wH3d4N6JJvSfkN88iYlMfFIA6SF3WY+G/LyPejrj5wYk8eDjRQ4DxskAnxsSn
2G2uj4kJF2f27bjdckaxsDwzE1n43QF2CnAmavRbAHc6O0CbQqrJ0quX6vhZgRhE
auFcPrcRZacjD4dk5ZFGUb+whiwuvvAKl4Tiocs7MSU/oVdCxpVZaa2vvg1z0kRt
wAl3L7CzlzivQCvT9hoROHxxRA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:36 2026 by rpki-client