
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
File: FSDys0q93K6U-pIu9HV802FA8lQ.mft (raw, json)
Hash identifier: GrTXJ9giR7v5Fz7sVzS0PfyMM5g/kR0zXgyhpFrhStY=
Subject key identifier: 39:5C:4C:93:2D:78:43:4F:76:65:47:8D:67:7A:F6:30:15:32:C7:AE
Authority key identifier: 15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54
Certificate issuer: /CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254
Certificate serial: 07B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
Manifest number: 07A2
Signing time: Tue 24 Mar 2026 21:15:00 +0000
Manifest this update: Tue 24 Mar 2026 21:14:59 +0000
Manifest next update: Tue 31 Mar 2026 21:14:59 +0000
Files and hashes: 1: FSDys0q93K6U-pIu9HV802FA8lQ.crl (hash: Tg2dL09DEanM2geFYW8eE+NOyAKIUUPG2mWW9RZK2oc=)
2: A6864ACE7BA911EDB41A851EC4F9AE02.roa (hash: +mWQDhR0SQRE9fYy6utyEy97LqtAqWWlca4RF6I7GEw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl
rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1970 (0x7b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143FE9, serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254
Validity
Not Before: Mar 24 21:14:59 2026 GMT
Not After : Mar 31 21:14:59 2026 GMT
Subject: CN=69c2fed4-b01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c0:d8:ed:68:d3:a7:84:f4:a1:c5:c9:08:8f:
19:78:55:a4:b0:76:8a:54:6e:8e:ce:04:75:a2:62:
eb:bd:26:61:14:25:22:fc:51:9b:bd:d7:65:6b:01:
09:74:13:fd:f3:9e:ba:53:80:ed:aa:d5:5b:99:7a:
43:fa:ce:ee:b0:50:37:d0:f0:61:8b:f2:dc:5d:32:
1a:70:a6:a3:78:46:47:77:7d:8a:1b:b2:9e:a3:d3:
6c:65:9c:8d:4b:1c:e7:af:7d:9e:5a:c0:15:07:77:
3d:6c:2f:d2:54:92:b5:9c:92:90:a8:41:ec:4b:00:
d6:1c:a7:c7:35:0c:95:f1:09:fe:04:88:51:7f:0a:
78:f2:4f:d2:24:93:5d:b4:8c:5a:46:cc:2a:6b:fe:
a4:93:05:74:62:22:c1:c6:56:69:ab:61:e6:a0:a5:
c0:6e:f3:2e:0d:c8:21:ef:e7:46:65:e2:73:6e:bd:
97:39:84:bb:43:2d:5f:9e:db:ea:29:e6:f3:72:ad:
58:ef:64:29:65:16:bc:b1:bd:12:9a:dc:d7:0c:df:
19:70:f1:77:a3:f0:64:0d:cc:c1:4b:7c:3c:66:5c:
bc:3e:1f:07:d3:c4:df:65:fe:4e:70:42:37:b2:04:
a6:57:a9:53:1c:3e:e8:53:f2:aa:40:0f:40:22:b7:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5C:4C:93:2D:78:43:4F:76:65:47:8D:67:7A:F6:30:15:32:C7:AE
X509v3 Authority Key Identifier:
keyid:15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:0b:66:1b:2a:6b:af:23:53:c1:7e:6c:7b:7c:65:ea:37:f8:
0c:be:e6:ee:30:c2:65:93:2d:91:8b:8b:21:fb:cc:94:77:5f:
04:f5:ba:92:76:3e:6a:59:80:75:94:bc:4e:ed:d0:fd:5c:5c:
3c:2d:50:fb:35:3a:be:94:f8:e8:2d:0a:03:77:9d:fa:c1:35:
49:dd:a9:67:8a:6c:5a:79:77:d5:d6:30:0b:6d:fc:26:a7:2a:
26:21:45:08:35:cd:30:44:5b:ad:b6:15:5b:d4:40:e3:bd:24:
dd:ec:a8:b3:98:5a:2e:fe:29:b1:b9:69:b8:d9:dc:6e:43:97:
f9:ed:e3:f2:73:92:43:ac:d6:3c:8d:72:4e:10:cf:44:d5:b7:
92:6d:54:0c:23:2f:e5:9f:8c:36:54:c1:22:5c:16:00:f6:7a:
87:e8:df:b7:4e:5d:72:26:ad:f5:09:e0:0c:02:db:d1:54:b1:
5e:1b:6d:b0:6a:ad:d4:74:95:aa:71:87:17:ab:ea:aa:35:e5:
97:37:f2:ce:c2:12:1d:3a:6a:6c:42:c5:df:94:30:63:f0:ad:
68:da:07:b4:78:70:2f:a4:5e:8f:10:51:77:c9:5d:17:a7:be:
2b:b5:c6:65:32:0c:b5:3d:2e:85:3d:f6:3a:00:11:c7:aa:e8:
ff:61:d0:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDNGRTkxMTAvBgNVBAUTKDE1MjBGMkIzNEFCRERDQUU5NEZBOTIyRUY0NzU3Q0Qz
NjE0MEYyNTQwHhcNMjYwMzI0MjExNDU5WhcNMjYwMzMxMjExNDU5WjAYMRYwFAYD
VQQDEw02OWMyZmVkNC1iMDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk8DY7WjTp4T0ocXJCI8ZeFWksHaKVG6OzgR1omLrvSZhFCUi/FGbvddlawEJ
dBP98566U4DtqtVbmXpD+s7usFA30PBhi/LcXTIacKajeEZHd32KG7Keo9NsZZyN
Sxznr32eWsAVB3c9bC/SVJK1nJKQqEHsSwDWHKfHNQyV8Qn+BIhRfwp48k/SJJNd
tIxaRswqa/6kkwV0YiLBxlZpq2HmoKXAbvMuDcgh7+dGZeJzbr2XOYS7Qy1fntvq
Kebzcq1Y72QpZRa8sb0SmtzXDN8ZcPF3o/BkDczBS3w8Zly8Ph8H08TfZf5OcEI3
sgSmV6lTHD7oU/KqQA9AIrdgtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDlcTJMt
eENPdmVHjWd69jAVMseuMB8GA1UdIwQYMBaAFBUg8rNKvdyulPqSLvR1fNNhQPJU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZFOS9GOUU2NUUyMDQ0
MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNLNlUtcEl1OUhWODAyRkE4
bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZTRHlzMHE5M0s2VS1wSXU5SFY4MDJGQThsUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
M0ZFOS9GOUU2NUUyMDQ0MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNL
NlUtcEl1OUhWODAyRkE4bFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcwtmGyprryNTwX5se3xl6jf4DL7m7jDCZZMtkYuLIfvMlHdfBPW6knY+almA
dZS8Tu3Q/VxcPC1Q+zU6vpT46C0KA3ed+sE1Sd2pZ4psWnl31dYwC238JqcqJiFF
CDXNMERbrbYVW9RA470k3eyos5haLv4psblpuNncbkOX+e3j8nOSQ6zWPI1yThDP
RNW3km1UDCMv5Z+MNlTBIlwWAPZ6h+jft05dciat9QngDALb0VSxXhttsGqt1HSV
qnGHF6vqqjXllzfyzsISHTpqbELF35QwY/CtaNoHtHhwL6RejxBRd8ldF6e+K7XG
ZTIMtT0uhT32OgARx6ro/2HQow==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:26:50 2026 by rpki-client