
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
File: _fbWlYIK89Dw56dNs0RTLFfa7kA.mft (raw, json)
Hash identifier: 4T5+07PLNeLuGAKV0CbgcoO4bXrqE4S/TJIPoo8rG0A=
Subject key identifier: B0:46:33:EC:B3:4C:57:84:05:5F:04:EC:61:1F:84:3E:BF:D2:42:FE
Authority key identifier: FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40
Certificate issuer: /CN=A9125864/serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
Certificate serial: 47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
Manifest number: 43
Signing time: Mon 11 May 2026 08:35:43 +0000
Manifest this update: Mon 11 May 2026 08:35:43 +0000
Manifest next update: Mon 18 May 2026 08:35:43 +0000
Files and hashes: 1: _fbWlYIK89Dw56dNs0RTLFfa7kA.crl (hash: L60DJIPtZ00uqxuHpGqY/yTxW1IB75K35XKS2PeiKKk=)
2: 0BE73752ED1C11F0A0F1907B416F56BC.roa (hash: wnHDSrJ1lNjniUVeFmGkrnIaI5zcmuj8d7YV4WvUiMk=)
3: 7B57CA16ED1C11F09DBA53AB416F56BC.roa (hash: zWp6TDXFrmD5/NSfTk8YdIj2drPaBuTNuJsIqnk6a6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl
rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125864, serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
Validity
Not Before: May 11 08:35:43 2026 GMT
Not After : May 18 08:35:43 2026 GMT
Subject: CN=6a0194df-24c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a2:f9:56:11:c5:df:3c:99:0f:98:9d:01:52:
9b:d6:06:d9:c6:94:09:69:dd:cd:73:97:c0:3b:9f:
61:28:8c:c5:37:02:97:6c:5b:5f:4d:7f:45:2b:5c:
bc:64:09:93:44:6f:e6:12:30:f8:82:e0:e4:af:b9:
74:0d:2d:7a:80:bb:b4:c1:5b:f2:7e:69:a5:b3:6d:
47:9e:37:72:18:53:41:8a:4d:da:dd:62:91:33:e8:
1d:29:38:59:d0:5b:12:76:fc:ba:53:a1:87:3b:d8:
a1:8a:47:e3:2a:2b:e6:ec:21:87:d8:e8:f9:0d:41:
57:87:86:a2:8c:eb:64:99:40:d9:96:90:86:ab:07:
2d:29:2c:ba:d9:02:74:a6:50:3f:68:2e:ce:0c:53:
60:95:9a:75:38:f3:53:ff:6d:cd:f3:db:2d:96:f6:
6c:38:a3:40:5e:98:fd:22:0d:6f:83:1e:f7:50:03:
10:9b:2b:e5:1f:07:b7:62:78:07:76:95:74:a1:c9:
8f:a9:41:18:26:12:20:11:29:6e:c0:27:24:73:42:
f8:26:95:c5:f9:af:bc:93:40:bd:d9:7d:ba:3b:43:
92:94:87:07:d0:85:2d:bc:7d:10:7b:cf:ca:28:69:
44:07:6c:62:0e:aa:04:b7:38:fb:ed:7d:66:06:5a:
e2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:46:33:EC:B3:4C:57:84:05:5F:04:EC:61:1F:84:3E:BF:D2:42:FE
X509v3 Authority Key Identifier:
keyid:FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:74:ce:25:74:e9:e7:3f:8d:85:b5:c7:30:22:12:4a:78:0b:
02:7d:40:f7:5e:67:d9:0e:d3:3f:53:30:02:24:b1:51:01:60:
2e:e8:2f:93:35:5e:50:c2:51:e9:66:ec:f3:60:4b:c6:c2:23:
83:d0:7d:3c:a2:2f:03:a2:e4:e3:0c:a6:26:48:a8:9b:d1:93:
93:2d:a9:58:a1:bf:ce:35:2c:92:80:4e:21:02:a8:5e:73:9e:
a4:73:54:37:ee:33:95:3c:c1:15:39:09:dd:bb:77:02:a2:e2:
e6:b2:c5:bc:85:8e:38:a0:1a:83:85:71:06:2c:0b:13:ba:39:
80:5a:cf:ed:a3:79:79:00:f8:2d:d1:46:63:46:8b:3b:5c:db:
8c:08:b0:d1:b6:29:c7:7a:3c:9c:53:8f:c0:c6:bf:81:9b:7c:
48:26:32:3a:9d:a4:a1:10:bf:50:02:7e:04:7d:da:a6:63:e8:
73:0f:85:f0:26:51:5d:16:42:b2:56:7d:85:0a:0a:7b:a0:6a:
67:8e:e8:71:f3:5f:26:42:db:0a:8c:78:fa:ad:f7:18:24:29:
5d:00:b7:cb:27:cb:b1:2d:1b:17:e1:30:55:1e:0b:a6:8f:0e:
2d:d9:dd:74:58:09:c1:97:24:83:bd:dd:52:fd:76:56:d5:04:
6b:ac:99:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:23:06 2026 by rpki-client