
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
File: Fz6pPabl71KPpzMJc4hIg92lJ-4.mft (raw, json)
Hash identifier: RVUZhZShzC5w6pmJxkyE27u0ptw80O6tsujYr1jtOlc=
Subject key identifier: 07:8A:F6:00:FB:15:16:4C:F2:A8:81:10:1F:80:81:45:4A:D9:1A:F2
Authority key identifier: 17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE
Certificate issuer: /CN=A9145E09/serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
Certificate serial: D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
Manifest number: D4
Signing time: Mon 11 May 2026 06:50:17 +0000
Manifest this update: Mon 11 May 2026 06:50:16 +0000
Manifest next update: Mon 18 May 2026 06:50:16 +0000
Files and hashes: 1: Fz6pPabl71KPpzMJc4hIg92lJ-4.crl (hash: JOcgdozcGmz3PUcuJ6ulzmcnHUVueSpMcixDpXAycUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.crl
rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145E09, serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
Validity
Not Before: May 11 06:50:16 2026 GMT
Not After : May 18 06:50:16 2026 GMT
Subject: CN=6a017c28-f133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:64:14:1c:f1:28:42:2a:41:5f:60:ef:89:7f:
37:f2:7a:fc:2c:d8:36:27:b7:8a:dc:b3:a2:5e:a9:
7d:f2:86:39:9e:83:76:89:e5:44:51:bc:d4:35:0b:
a8:42:c6:62:e4:90:f1:cb:04:c5:4f:87:6b:4a:ee:
cf:0a:d1:2a:15:d6:b6:61:ae:65:24:b3:c7:15:ec:
b4:a6:d7:2f:17:93:0b:dc:06:59:fe:b0:c9:22:51:
3e:93:26:35:29:ee:77:31:9c:37:6a:26:d7:03:57:
15:e3:78:ac:63:50:39:bf:15:01:03:76:a2:a4:29:
7f:7c:ef:d8:0e:13:45:42:71:9c:67:8f:0e:6b:d8:
35:05:ed:61:35:7a:19:9c:c7:7b:ab:20:ad:e0:66:
c2:b9:ad:eb:8a:b9:31:50:31:2a:9d:ef:a8:35:7f:
26:87:d8:7d:f9:46:2d:24:9e:2b:f2:40:e4:f4:41:
62:c0:50:e1:13:8f:0a:e1:d3:cd:7c:bd:53:e5:bc:
24:b5:6c:22:74:f5:25:08:ce:1f:fb:43:d5:d0:89:
bf:1a:4c:1f:94:e3:6e:26:3f:b4:44:ab:12:f1:5a:
62:5a:96:03:7b:78:32:4e:b2:3a:f9:2e:26:86:67:
7c:f6:fe:82:5d:2c:f5:e5:27:54:12:5a:a9:33:f4:
42:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8A:F6:00:FB:15:16:4C:F2:A8:81:10:1F:80:81:45:4A:D9:1A:F2
X509v3 Authority Key Identifier:
keyid:17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:e9:11:91:05:b0:02:79:5a:c6:97:ab:c9:a2:9c:a5:f7:83:
f0:0c:11:fa:e1:c0:82:5d:20:09:83:20:9f:27:29:ca:ef:4c:
58:d7:83:31:6d:71:59:35:7b:8e:f2:ce:c7:ba:02:22:e1:fb:
b0:43:be:31:4b:8b:32:90:fe:e7:c7:aa:ed:e5:d0:1f:a4:c0:
74:ca:7c:0a:75:de:0f:b8:ad:74:e5:61:19:03:1f:11:0f:c4:
eb:db:af:91:c4:bc:88:42:e3:6e:35:7c:0b:0b:ed:e5:9a:af:
20:66:8d:c7:0b:d6:7c:1f:6e:f3:36:44:45:ec:82:70:4c:4e:
1a:f2:ed:73:0e:8b:06:19:21:18:b0:dd:14:e3:d0:26:5a:01:
b6:17:e2:54:93:5c:76:ca:8f:05:a5:42:98:3c:48:75:86:56:
b3:19:e3:c5:af:c9:26:6d:08:0c:9d:24:ba:72:87:34:24:f9:
b1:d9:63:65:fd:eb:a1:1f:1d:67:1c:a2:25:35:9f:c3:88:fa:
d8:5b:96:49:ba:0c:41:62:21:37:c9:b2:3e:fe:86:07:0f:7e:
8a:aa:c9:7b:84:dd:cd:a4:22:49:39:40:50:fa:56:11:fe:3a:
89:6c:4b:32:c1:39:79:68:5a:c2:9a:c9:ce:c5:93:06:56:4d:
92:d6:bc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:16:20 2026 by rpki-client