
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
File: FWbBYbuz41NHqXrE1YFtjt5UIY4.mft (raw, json)
Hash identifier: ArgXUThGmFGWLhsfEwzcCFbybKCK6ulKoTaJID5bJVY=
Subject key identifier: 08:AE:45:08:F6:02:04:1B:56:3B:F0:63:9D:0B:BD:DA:E4:43:97:82
Authority key identifier: 15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E
Certificate issuer: /CN=A9134FAF/serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
Manifest number: D7
Signing time: Thu 23 Jul 2026 08:28:24 +0000
Manifest this update: Thu 23 Jul 2026 08:28:23 +0000
Manifest next update: Thu 30 Jul 2026 08:28:23 +0000
Files and hashes: 1: FWbBYbuz41NHqXrE1YFtjt5UIY4.crl (hash: yQX7HTaOdRYG+a3P70gMqXDrJfgdNOQ9rHcPCeLEwGA=)
2: 4CB714B644AA11F0B7FB6E72C4F9AE02.roa (hash: CDDizrxHdCVQBvWNHH5kJ+Klq5BvJObvDJfzp1lpWpE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl
rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:28:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134FAF, serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E
Validity
Not Before: Jul 23 08:28:23 2026 GMT
Not After : Jul 30 08:28:23 2026 GMT
Subject: CN=6a61d0a7-52d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7a:98:0b:48:d4:aa:ea:7a:bb:a6:2f:29:71:
1b:33:f4:a4:38:cd:a1:2f:cb:d5:81:ab:d7:47:9f:
5c:ac:1e:63:c1:1e:4e:8f:73:4d:f8:6d:85:22:bf:
a2:69:a8:4d:3b:52:9e:e3:35:89:d9:a3:c3:16:3e:
0d:ab:6b:35:55:96:5e:49:5f:48:df:75:7f:b9:cc:
da:fa:1c:be:91:93:d6:96:b2:32:35:18:43:b5:a9:
01:a4:a5:42:2f:80:21:91:49:82:27:1e:d9:61:b5:
d1:06:ec:21:87:b6:29:68:7a:fb:6f:5c:29:ed:7c:
c4:68:df:26:a0:a0:39:44:a6:e0:67:c9:a6:26:70:
5b:5c:72:5e:7e:03:cb:c7:6d:9d:93:3d:ff:27:e4:
8a:ab:5a:c7:cb:fa:a9:3b:c0:df:4c:d5:dd:f0:4b:
05:c5:7f:d8:09:ba:52:73:f9:75:2e:4f:cb:5a:3d:
24:ab:b9:51:10:59:e7:05:64:b1:2a:d2:c9:4f:9c:
5c:40:c1:a5:3a:76:36:80:b5:8c:2a:f7:60:58:ff:
81:3a:d4:1e:0e:47:55:09:ab:14:56:3c:7d:b7:b7:
14:ac:7e:bc:65:83:dc:fd:08:cd:4e:d7:47:80:de:
e0:a9:58:3a:f2:64:b4:ac:7c:85:2b:56:78:7e:ef:
2e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AE:45:08:F6:02:04:1B:56:3B:F0:63:9D:0B:BD:DA:E4:43:97:82
X509v3 Authority Key Identifier:
keyid:15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:4b:f5:58:cb:94:aa:2a:11:87:20:26:b8:f1:94:82:90:9e:
8e:e4:a7:73:ee:9b:85:5f:1c:76:82:0e:37:18:6a:e7:21:f6:
bc:bc:5c:bd:45:1b:a9:a7:76:78:49:cf:a8:de:be:77:c2:4b:
55:37:40:3d:9b:a7:f7:63:e9:1c:40:e0:1a:81:f0:6e:fc:93:
51:d7:c4:79:3c:be:f0:1c:69:99:08:9c:9e:78:26:80:22:77:
99:f0:71:eb:c4:13:12:2f:15:aa:64:8c:77:d9:27:40:1f:8d:
1c:d7:fe:b3:19:33:33:8f:60:33:4a:37:d3:a7:e4:d8:23:76:
48:47:23:b5:d3:f5:35:e6:9e:3b:b1:d1:8e:87:8e:44:d8:82:
d7:fe:61:53:45:77:ff:39:92:82:ca:a2:a2:d6:64:91:6a:d6:
54:82:88:89:0f:19:71:a9:a2:2b:5d:e9:31:96:09:0d:f9:04:
3c:d9:83:0d:0b:75:41:64:49:1f:9b:dd:f5:82:9c:24:65:0c:
f2:b2:9b:71:34:90:ca:9f:b8:61:49:a4:17:ed:69:48:bd:8c:
54:69:34:48:ca:f5:f3:89:d2:dc:e0:d8:48:a8:53:66:9a:c0:
e9:bb:37:1e:8e:ae:c2:e3:6f:6a:5b:e6:43:53:d5:61:f0:03:
c6:ca:81:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:58:20 2026 by rpki-client