
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
File: FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json)
Hash identifier: Dnow+VVq+b53Ch/eKMOki/l09KvfuYafSRgy89dq+SY=
Subject key identifier: 76:B4:DD:82:64:D7:00:46:C3:04:A3:DC:F3:BA:22:40:D8:78:2B:B4
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial: 065E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
Manifest number: 0616
Signing time: Wed 22 Jul 2026 23:47:49 +0000
Manifest this update: Wed 22 Jul 2026 23:47:48 +0000
Manifest next update: Wed 29 Jul 2026 23:47:48 +0000
Files and hashes: 1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: uz37OQU0oyJFP+3t2DqR1U93j1ti/xY//dZ7ZHsKItQ=)
2: 9DF3BC14E48011F0AC3D40BC426F56BC.roa (hash: 34Y8hUwkkH6eRmIMWTovUQbEQ5leyxSbVRWa0szDZH0=)
3: B589332C498611EF90B46962C4F9AE02.roa (hash: qQDURXc4miq6wSpyJJAXvi86X+8AWTAJoPUGTUH+F/w=)
4: F6DBFB92B3F311F0929DA35BC4F9AE02.roa (hash: bGSs+GuQ8roH3KjNYjFOeAuN1jZZUS7buyDDBU1Jy+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1630 (0x65e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Validity
Not Before: Jul 22 23:47:48 2026 GMT
Not After : Jul 29 23:47:48 2026 GMT
Subject: CN=6a6156a4-325d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1a:90:b9:b7:2a:94:8a:3b:be:cc:ff:06:80:
29:98:29:17:83:0c:48:21:b1:dc:5e:d9:f6:2c:55:
f7:3f:ce:b5:0d:b9:4c:18:93:f2:b7:28:15:1d:d5:
87:4a:d2:43:ab:86:41:86:2c:25:f9:51:7d:5d:8e:
2c:83:c4:27:84:ee:ce:fd:09:1d:61:bc:b3:e5:7e:
3f:5d:b4:ac:0a:63:6a:60:4d:9c:92:91:6a:9d:92:
10:68:ad:76:17:ee:df:eb:e5:b1:d2:cd:77:47:1d:
a3:95:18:ce:64:df:26:17:1b:db:30:d7:3d:67:ef:
a0:cd:68:33:de:e3:16:04:36:0d:af:f3:c6:66:fa:
c2:18:67:dd:97:44:ad:b3:2b:34:7a:0f:e6:37:96:
12:21:44:15:3f:aa:0b:b4:71:fe:2a:65:a6:c4:e3:
ec:c2:2d:9b:99:72:89:a5:ca:36:d1:86:e2:93:0e:
76:a7:c5:32:e5:41:fb:71:76:92:2f:8b:8f:6c:93:
94:57:11:c0:6e:c0:c2:14:ce:8a:f4:0a:b7:0a:f1:
1f:8f:63:cd:63:90:8a:69:7f:8e:32:90:d4:dd:0d:
e6:df:eb:62:11:42:03:31:7f:ee:c3:d6:18:3c:50:
92:bf:a1:c9:55:00:b3:a1:88:21:de:7e:39:e6:83:
af:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B4:DD:82:64:D7:00:46:C3:04:A3:DC:F3:BA:22:40:D8:78:2B:B4
X509v3 Authority Key Identifier:
keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ff:cc:8a:d4:b0:71:eb:8d:47:cd:10:ef:40:e9:9d:d9:63:
4c:b1:0a:8a:38:50:98:b6:ce:ef:bb:d1:2d:02:e4:a7:c6:8f:
48:8d:c6:5b:0e:89:e9:ac:5c:64:99:ad:29:99:c8:17:b2:ae:
da:0c:16:7f:43:ba:da:49:21:51:ac:87:85:87:a4:0e:aa:43:
0a:ce:f1:c8:83:fd:63:8e:2a:d2:20:a3:d0:b9:42:b6:93:3a:
aa:38:df:40:07:20:5c:0f:09:a5:6e:11:ec:ca:6f:c8:50:e4:
e5:28:39:ee:43:1d:89:a0:8e:72:ec:9c:21:b3:50:4c:fe:d3:
b2:df:38:0b:8a:c1:a4:9f:76:71:0d:0c:eb:34:bf:fd:92:78:
11:25:a3:aa:ac:d8:b9:12:50:b9:de:b0:30:fa:4b:f8:fc:06:
33:ef:80:ba:13:cd:e2:2a:ac:08:7a:3c:cf:bc:cc:4e:68:65:
7c:07:79:09:f6:1d:85:f3:e2:15:7a:c9:be:8f:5d:7f:e0:06:
36:c8:1a:8c:2d:67:68:d7:b8:44:9a:0d:b6:31:fa:fe:f6:23:
53:c6:18:d8:74:de:a7:17:90:19:f7:05:57:c2:92:01:61:87:
6f:95:be:65:f3:71:32:fe:26:e7:a1:13:56:72:a0:ec:68:c8:
71:c5:39:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:48:12 2026 by rpki-client