
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft
File: fSf9xw_NGLbdWwQmla_djBc1wTA.mft (raw, json)
Hash identifier: LdzIOINj3TxLwlNTjP87ODrr9I5XDySZ/0XCbe+FUfQ=
Subject key identifier: 61:B6:E4:89:92:8A:B9:CC:12:9E:9A:D3:E8:49:26:06:89:EE:34:E7
Authority key identifier: 7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30
Certificate issuer: /CN=A9122041/serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft
Manifest number: 0196
Signing time: Mon 11 May 2026 04:19:56 +0000
Manifest this update: Mon 11 May 2026 04:19:55 +0000
Manifest next update: Mon 18 May 2026 04:19:55 +0000
Files and hashes: 1: fSf9xw_NGLbdWwQmla_djBc1wTA.crl (hash: xEdir6Y/IRUtIi22ZCM4UeDW4ZjI9E18lQIfN8XpvL8=)
2: E46B7DACDC3611EEBE5CDD37C4F9AE02.roa (hash: jCjUHPVQsJaqVu7vufX+mmPVYe7rI/psWHiQFh1SNOI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl
rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122041, serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130
Validity
Not Before: May 11 04:19:55 2026 GMT
Not After : May 18 04:19:55 2026 GMT
Subject: CN=6a0158ec-14f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:dc:a2:f5:12:75:80:84:02:b6:04:aa:b3:
93:ea:0f:f3:98:b1:1d:66:6f:64:99:74:84:da:c8:
a1:62:6c:59:41:bd:6a:02:29:3d:4f:4b:06:bb:72:
da:e2:b8:1c:93:4b:ab:96:e2:2d:e1:97:12:f5:9a:
a1:d6:82:de:cc:03:34:f3:c0:e0:b6:c7:8b:49:04:
74:64:d5:59:c0:3f:d3:59:43:8c:73:bb:10:da:77:
3a:e1:8e:0e:ea:ba:9e:03:eb:b4:36:c2:b7:6f:23:
3e:93:10:d8:12:45:e9:2f:f6:d0:0f:05:f7:52:20:
ad:b7:57:8a:14:93:b6:22:e8:ff:6a:fa:55:1d:17:
5a:0a:21:27:df:28:35:ef:c5:fb:c0:28:23:7d:71:
48:6e:8f:46:bb:a1:39:ba:65:da:12:08:72:04:c4:
01:c2:f6:3f:61:d7:ba:66:57:14:0f:86:6d:b8:dc:
e8:12:90:40:70:f0:6d:6e:b0:cc:7a:0e:86:9c:c4:
6d:6b:0e:ad:fa:53:44:44:35:65:65:2e:c8:c1:53:
48:09:84:a6:13:9e:4d:2a:94:6a:06:47:41:07:ab:
b5:98:38:ca:0c:36:f5:06:3d:96:19:e7:9f:82:aa:
c8:54:2c:0b:55:53:d8:75:22:7e:3c:42:d6:c7:88:
bd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B6:E4:89:92:8A:B9:CC:12:9E:9A:D3:E8:49:26:06:89:EE:34:E7
X509v3 Authority Key Identifier:
keyid:7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c1:7e:96:d5:30:dc:0c:f8:d2:f8:00:ee:2a:6c:01:68:59:
51:12:17:1e:fb:a0:4d:22:12:4c:c8:83:9a:a4:c3:cd:a3:89:
87:1a:70:ca:24:58:0d:19:53:d2:fe:fd:a3:60:ae:b5:cd:15:
b1:d6:87:ad:24:ea:c8:d9:9f:c2:e7:f9:56:0e:fb:9f:38:0e:
4c:1d:01:8b:0f:82:04:70:9d:58:5d:34:ba:da:43:85:59:b8:
12:b0:c1:ad:9f:f5:db:93:20:da:81:51:ae:03:f0:be:fe:1d:
97:5b:3e:1a:ec:ad:c3:f2:80:e5:a3:45:4d:17:ec:51:cf:01:
73:ba:d9:80:64:7f:c4:99:4b:ae:18:7a:36:98:f2:2c:b8:cc:
04:da:f7:d8:13:3e:88:09:f5:3d:38:49:60:a5:01:98:aa:d3:
e8:e8:b4:ef:d6:94:35:9d:8c:ac:0f:f7:43:e0:51:b7:fe:8c:
30:b4:e8:b3:16:ba:c8:8a:af:c4:66:1f:1a:3d:3f:c6:ba:fb:
7a:65:35:a4:ec:a9:69:c9:5c:8f:54:14:34:08:33:ee:04:f9:
18:f9:54:66:f4:e4:97:4e:93:26:b4:3a:38:e5:41:69:3c:22:
54:05:fc:26:78:3d:a7:a0:86:5c:10:69:7e:cd:d1:be:0d:10:
e5:66:73:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:09:47 2026 by rpki-client