
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft
File: FdYNYNak9QCRCZpy4NBe7z6vduk.mft (raw, json)
Hash identifier: Ni6S61J1xXjgnoPaTqu36mwB45RbhXYpSZ4KIuJuBzM=
Subject key identifier: 21:3E:12:9A:23:0C:72:6F:10:FE:6B:56:2C:4B:6F:EE:36:A6:FC:43
Authority key identifier: 15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9
Certificate issuer: /CN=A91F61DD/serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9
Certificate serial: 0559
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft
Manifest number: 054E
Signing time: Thu 26 Mar 2026 23:13:49 +0000
Manifest this update: Thu 26 Mar 2026 23:13:49 +0000
Manifest next update: Thu 02 Apr 2026 23:13:49 +0000
Files and hashes: 1: FdYNYNak9QCRCZpy4NBe7z6vduk.crl (hash: zpO0bzve1vcJyDHa71wLZFAZ54zkMu3vBbOzHYm0hbs=)
2: BFEEB5E4309D11ECABBBBF25C4F9AE02.roa (hash: uwBd+LUs0WLRGeth+RhrSQgjQ8eS60NPtQG9hRifa0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl
rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 23:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1369 (0x559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F61DD, serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9
Validity
Not Before: Mar 26 23:13:49 2026 GMT
Not After : Apr 2 23:13:49 2026 GMT
Subject: CN=69c5bdad-309b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:e2:23:99:45:7e:6f:6b:ac:4a:af:5f:a8:
71:10:da:a7:fb:0c:45:31:f8:ae:58:d0:37:ca:12:
7d:5b:b5:9d:c0:5c:23:79:e8:a8:46:71:b5:df:45:
6d:43:bb:1d:84:61:5f:db:91:1f:97:c6:53:37:d6:
41:54:9a:37:3d:e1:3c:52:7d:2a:43:39:ef:59:af:
20:62:ad:62:3f:f6:69:ff:e3:fb:66:d4:a3:dd:8e:
bc:cc:7c:b1:96:8e:b4:c2:d8:cf:58:e4:80:8b:c0:
1e:ab:37:39:6f:b0:1b:ab:fd:de:63:56:c4:1c:76:
c1:c3:6f:e5:90:ce:d7:e5:79:d9:b7:dc:f8:6d:e8:
5b:f3:30:b6:d8:05:42:8d:59:6d:0f:04:d2:10:11:
af:a5:8d:a3:2e:f6:01:bc:7e:0e:ee:61:58:6a:aa:
8f:fc:96:6c:12:4c:ee:e2:53:6c:5f:7f:6b:48:42:
5b:c5:37:03:a1:67:82:27:ff:f9:6f:f4:3e:77:23:
06:bf:a4:25:71:e6:ad:35:a1:78:a2:93:3a:cf:eb:
92:f3:49:b1:f0:cb:ef:a5:5e:ea:f9:14:ac:43:98:
69:48:34:7d:9c:e8:82:98:e2:bb:50:00:87:7a:b9:
60:a9:32:e9:b6:77:7b:7c:d8:ea:a1:1b:b2:63:30:
e1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3E:12:9A:23:0C:72:6F:10:FE:6B:56:2C:4B:6F:EE:36:A6:FC:43
X509v3 Authority Key Identifier:
keyid:15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:a6:4e:c6:8b:e1:9e:db:cc:dd:90:f0:1e:4c:38:e6:4e:5c:
76:de:d2:09:51:ab:64:ee:94:08:1c:4b:71:c7:9a:05:c6:4a:
8e:ab:cb:3f:c8:46:c1:6e:a1:eb:ba:f6:00:f8:3c:5a:21:4b:
01:38:d9:f2:ff:58:a6:41:04:7f:87:05:0b:e9:7e:c1:86:19:
d9:fb:fa:09:8f:22:b4:28:6f:14:72:7f:74:a9:67:32:cd:47:
97:ae:c8:39:98:81:dc:65:0c:1e:ae:98:f3:a7:ad:64:65:d6:
9e:d7:96:9a:36:06:f3:f4:5d:2d:49:d9:d1:71:67:33:a2:69:
b5:a3:db:51:51:03:71:b0:b4:a2:53:e5:d7:52:39:38:20:a6:
20:a0:11:29:14:04:57:1e:10:f8:6b:ef:e6:04:c1:d7:8c:15:
99:96:f0:c6:7c:05:5c:85:0a:29:d4:ed:78:07:46:0d:a0:c5:
29:f5:95:6b:79:55:20:00:6c:90:af:d0:4a:79:91:ec:af:9b:
be:48:db:c2:03:70:5a:62:d9:ad:2a:ab:2a:c8:ba:04:0a:63:
03:74:41:7f:c5:b2:18:00:4c:98:44:21:8b:b2:e2:92:cb:be:
fb:07:6f:70:0b:c6:2e:db:d6:aa:c5:34:af:20:bd:21:db:d7:
40:b6:90:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:04 2026 by rpki-client