
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
File: _fbWlYIK89Dw56dNs0RTLFfa7kA.mft (raw, json)
Hash identifier: R6z1wU4ROpRr9owfiUI5wf15L8zbfzsBqxG/nigXnfo=
Subject key identifier: 44:0A:17:6A:7E:97:F3:E2:C5:47:AA:D3:D3:D5:06:74:C3:54:25:E7
Authority key identifier: FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40
Certificate issuer: /CN=A9125864/serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
Certificate serial: 2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
Manifest number: 2B
Signing time: Wed 25 Mar 2026 07:54:53 +0000
Manifest this update: Wed 25 Mar 2026 07:54:53 +0000
Manifest next update: Wed 01 Apr 2026 07:54:53 +0000
Files and hashes: 1: _fbWlYIK89Dw56dNs0RTLFfa7kA.crl (hash: f+3UYvw2zoR8w9vKmfMRfEQ1ZxmcYu2kemfp2eNIoAw=)
2: 7B57CA16ED1C11F09DBA53AB416F56BC.roa (hash: zWp6TDXFrmD5/NSfTk8YdIj2drPaBuTNuJsIqnk6a6U=)
3: 0BE73752ED1C11F0A0F1907B416F56BC.roa (hash: wnHDSrJ1lNjniUVeFmGkrnIaI5zcmuj8d7YV4WvUiMk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl
rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:54:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125864, serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
Validity
Not Before: Mar 25 07:54:53 2026 GMT
Not After : Apr 1 07:54:53 2026 GMT
Subject: CN=69c394cd-4d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:2f:73:cf:f3:a7:73:e3:4d:df:3b:fb:71:
70:c1:dd:5f:33:42:fb:2e:6b:35:e8:1f:0a:bd:68:
07:a5:39:ed:42:84:26:b9:52:a5:de:7e:c0:dc:c1:
1a:37:25:c2:71:ec:6b:f3:92:ff:57:42:ad:36:52:
96:9f:e8:c5:a5:a9:81:a0:72:29:25:37:6e:77:73:
45:60:a9:eb:89:45:b7:95:c3:0f:22:e6:17:17:94:
78:58:6c:b0:35:b2:5f:4c:7f:4b:25:81:fe:51:3a:
fb:8f:80:8f:fb:a7:c5:2d:3f:23:02:c0:22:0d:40:
30:21:84:4f:cc:8d:52:e2:d5:7a:d9:fe:58:b7:9c:
fb:ae:95:53:aa:de:13:e8:29:38:16:af:af:4f:3c:
36:27:ba:b3:83:d7:47:52:dd:51:72:02:40:a4:50:
a8:70:28:e9:6e:aa:8b:41:bc:8e:46:49:76:a5:7e:
2c:8e:c1:48:99:20:7b:03:32:a0:9e:45:ac:93:ef:
e2:35:46:db:75:ef:6b:47:cf:1e:88:c9:b1:9b:09:
4b:3b:c3:36:e7:9a:8b:a8:ac:a6:f4:dc:5e:66:59:
31:3c:d9:5a:e6:ac:15:67:bb:c4:60:40:95:b7:a4:
41:e5:51:49:d6:4a:e7:d9:97:b1:bb:c4:22:aa:26:
ff:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0A:17:6A:7E:97:F3:E2:C5:47:AA:D3:D3:D5:06:74:C3:54:25:E7
X509v3 Authority Key Identifier:
keyid:FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:e5:c7:ce:13:18:2e:6d:c7:ab:f4:9a:f0:01:2a:d1:ca:cb:
c7:14:b6:a0:5c:eb:93:69:82:74:a8:74:da:2a:1e:b0:b4:51:
45:11:24:f0:02:0b:18:c4:df:08:1b:ab:36:b7:aa:58:d2:cc:
ba:82:7a:32:a4:2d:73:61:94:46:b3:1e:2f:82:0b:d8:54:36:
63:dd:fa:a7:89:d7:81:f7:73:f0:f9:a1:81:b2:aa:a7:d6:53:
38:e3:69:40:e8:a4:3f:43:a1:45:02:d5:4c:ec:43:00:49:65:
a8:46:28:d1:6c:9a:3b:19:e3:e7:ba:28:00:31:79:ce:d2:c8:
02:e1:5e:1f:4c:70:f1:0b:19:ee:77:51:bb:40:e0:14:86:13:
1c:ab:8e:e5:50:fe:b7:02:eb:a8:d0:19:f1:89:3e:f6:41:91:
fb:7a:ea:08:15:d8:61:a2:7e:b3:19:9e:ed:43:f8:b0:70:5f:
78:7c:fc:06:31:e6:56:bc:80:fa:b8:40:d9:86:35:7b:cf:c2:
1a:6c:a4:d1:59:c4:59:70:ff:43:35:98:88:06:70:25:b9:16:
08:b5:e9:d6:0f:33:f6:88:98:ae:a3:79:07:f8:e4:be:3d:85:
70:41:6a:74:6a:6c:b4:d3:2c:18:ff:13:fc:95:6f:c2:47:99:
92:77:e8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:19 2026 by rpki-client