
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.mft
File: fTg2zUKn77NatGSlAOJiVxXVzqM.mft (raw, json)
Hash identifier: veA3e0+oLwZrqjkj989Zw7yFi8raAWsJPZFaEyVnLUQ=
Subject key identifier: 49:22:2E:71:F2:07:66:EA:CD:2A:49:8D:02:08:4C:64:55:23:E9:D7
Authority key identifier: 7D:38:36:CD:42:A7:EF:B3:5A:B4:64:A5:00:E2:62:57:15:D5:CE:A3
Certificate issuer: /CN=A91F8949/serialNumber=7D3836CD42A7EFB35AB464A500E2625715D5CEA3
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fTg2zUKn77NatGSlAOJiVxXVzqM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.mft
Manifest number: 06
Signing time: Wed 25 Mar 2026 08:24:39 +0000
Manifest this update: Wed 25 Mar 2026 08:24:39 +0000
Manifest next update: Wed 01 Apr 2026 08:24:39 +0000
Files and hashes: 1: fTg2zUKn77NatGSlAOJiVxXVzqM.crl (hash: BZlmQU8cdViPsHvEKhPK0t9lR39RiGDaTveDohBccbk=)
2: 71A9485224D311F1BAC6A199AA833773.roa (hash: YplJkElj+wTMuvLaT6qEqUoRVs6FwFRdfKKxyCyC/nM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.crl
rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fTg2zUKn77NatGSlAOJiVxXVzqM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:24:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8949, serialNumber=7D3836CD42A7EFB35AB464A500E2625715D5CEA3
Validity
Not Before: Mar 25 08:24:39 2026 GMT
Not After : Apr 1 08:24:39 2026 GMT
Subject: CN=69c39bc7-0883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:67:3e:90:da:08:e4:b0:4f:a0:39:03:dc:7b:
20:0e:5d:09:92:aa:1f:29:15:9f:72:27:cc:8e:ef:
6c:af:c2:22:cb:43:57:58:2e:30:df:85:69:f9:d0:
2e:2f:a0:39:dc:cb:66:77:b8:3a:84:6d:14:bc:c4:
b3:cc:63:48:0d:59:e0:9d:6c:bd:b4:99:dd:d7:70:
e9:8e:ba:af:f0:7f:90:67:f3:94:22:59:db:43:3a:
eb:08:db:58:35:0f:d6:18:17:79:9d:5d:6c:b9:af:
78:6b:b7:75:f2:bb:5e:de:d6:53:57:bc:c1:8d:af:
52:74:7f:a1:ba:7e:84:95:8e:4b:76:a2:2f:0a:d0:
fb:f6:28:b2:4f:f1:5b:c1:88:50:3c:5c:2e:7a:9f:
05:dd:14:f3:a5:4b:dd:63:5d:f3:e8:f8:25:bb:fa:
e6:59:0a:c2:30:d1:99:73:b3:f4:2d:71:6f:bf:b4:
5c:a7:03:aa:b8:c1:14:6d:94:6c:24:b6:ef:c6:06:
16:00:b2:f9:f0:66:4e:8f:ec:ca:db:c7:00:bf:4a:
30:99:cc:e4:d0:75:58:05:5b:0e:a1:60:9b:06:a8:
9c:53:80:b8:ea:98:8f:63:40:be:87:73:b5:9c:ee:
a1:10:64:79:e3:f0:5c:d7:e9:7e:82:7a:30:30:4c:
42:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:22:2E:71:F2:07:66:EA:CD:2A:49:8D:02:08:4C:64:55:23:E9:D7
X509v3 Authority Key Identifier:
keyid:7D:38:36:CD:42:A7:EF:B3:5A:B4:64:A5:00:E2:62:57:15:D5:CE:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fTg2zUKn77NatGSlAOJiVxXVzqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c6:5d:8f:23:cb:c3:36:79:75:94:ae:36:76:03:3d:73:76:
1e:99:47:bb:1c:e1:1c:e7:15:c5:40:4e:67:56:33:81:bd:2f:
5e:6c:3d:1b:60:c4:31:f5:60:ba:51:57:1a:fb:05:cb:9b:39:
0f:85:85:13:03:d6:3b:e9:ed:d1:b2:38:77:8c:a8:e5:67:31:
81:f3:d3:ec:da:95:3e:8e:c0:7f:bb:cd:90:d0:57:07:96:14:
da:96:75:23:e1:4c:06:8a:85:49:bc:e4:ab:54:64:37:93:0c:
3d:49:47:dc:c0:50:fb:7b:9f:e3:d4:b0:f1:96:0a:89:76:99:
66:77:a8:35:e4:aa:cc:23:26:3c:1f:c3:17:30:c2:bd:ff:44:
f1:6b:ab:4a:b3:fe:c9:c0:8d:07:01:93:6d:2c:d1:ef:60:be:
3b:a8:0c:82:e2:05:b8:8a:d2:a7:85:72:bc:5a:4c:13:aa:20:
92:63:ff:10:27:65:30:8f:5e:01:09:8c:33:c8:74:87:01:b4:
b1:6d:89:a6:99:29:52:9d:86:5c:6f:8d:bc:58:13:8c:3a:3b:
4f:39:98:92:8e:90:2a:fa:fd:69:a9:53:a8:04:4a:2d:49:13:
4d:d9:1f:b6:82:cd:3f:3a:fe:c1:86:74:49:35:75:a0:a5:fb:
a3:83:a0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:41:10 2026 by rpki-client