
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
File: FrgD2zk43LFdxZooyXcZ2h_yClM.mft (raw, json)
Hash identifier: eunTUU+P+gn6WUSviP1LwzVqcE+h2eb5o/lRgoV5p34=
Subject key identifier: E1:C5:AC:2C:3E:44:41:D3:A2:A7:F5:23:6B:CC:99:E6:7E:CD:68:74
Authority key identifier: 16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53
Certificate issuer: /CN=A9149E0D/serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53
Certificate serial: 0C44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
Manifest number: 0C37
Signing time: Tue 22 Sep 2026 18:38:28 +0000
Manifest this update: Tue 22 Sep 2026 18:38:27 +0000
Manifest next update: Tue 29 Sep 2026 18:38:27 +0000
Files and hashes: 1: FrgD2zk43LFdxZooyXcZ2h_yClM.crl (hash: edLnohdQn51g/09329MJkn3w199MQpajCc8PeaubsMw=)
2: C8FB48F808AF11EBAB78DF6BC4F9AE02.roa (hash: mSjl0ibvEOuCK6DB5KHjDY/U2WKZFdSr/+i3luIa4aI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl
rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:38:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3140 (0xc44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149E0D, serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53
Validity
Not Before: Sep 22 18:38:27 2026 GMT
Not After : Sep 29 18:38:27 2026 GMT
Subject: CN=6ab2cb24-243f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:27:44:95:f3:c6:40:94:18:fa:79:a1:92:c0:
70:43:d3:22:63:aa:3f:39:87:cb:f0:da:8f:1c:e6:
96:c0:35:fc:d0:fe:c2:76:ff:e1:b0:84:95:ea:15:
26:8c:fa:1f:28:7a:f9:89:c1:ba:f4:b7:2b:57:4a:
d5:9d:e9:45:b8:c1:f7:0b:57:a2:cb:1a:96:1a:94:
11:f1:4c:6b:42:7b:16:ea:2c:b7:c1:d5:08:1a:8e:
a9:fc:c2:05:16:e9:54:27:12:16:52:45:a0:3b:6d:
94:4b:15:0d:5a:9e:8e:98:ea:99:ee:61:8e:16:df:
5a:ce:b2:9d:3c:39:74:da:ab:11:6d:cb:8f:ba:d5:
83:8a:7c:26:20:9e:8e:ab:06:f5:ff:f1:3c:99:71:
60:0c:82:7d:64:59:ee:c4:11:a6:a5:a0:63:82:70:
24:c1:5c:e3:cd:a9:96:8a:69:cf:ee:9f:a0:54:1f:
6c:c5:f6:2f:c1:37:ec:dd:e9:2f:24:52:d9:72:e3:
6d:c1:31:9a:7f:d8:01:cb:c4:97:2e:dd:a4:81:5b:
b7:06:f4:f6:40:9f:8b:a5:20:06:4b:fc:58:21:b0:
35:bd:d8:f9:8f:8f:29:51:9e:ab:03:9a:e7:37:b3:
3e:08:0a:d2:59:65:95:b0:e3:a0:05:dc:d0:53:60:
61:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C5:AC:2C:3E:44:41:D3:A2:A7:F5:23:6B:CC:99:E6:7E:CD:68:74
X509v3 Authority Key Identifier:
keyid:16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c5:54:df:a6:0b:bb:af:32:cd:d6:0b:c2:30:a1:25:a7:19:
39:ac:13:9c:7a:a1:58:48:8f:10:2f:89:45:21:26:6a:8f:bf:
79:2b:9a:0b:a3:5e:9e:48:86:f4:df:d3:2a:1d:49:7e:80:c7:
f2:e9:49:5c:55:f2:ca:87:87:ba:88:e6:b6:19:0d:4f:dd:c5:
19:65:e0:20:32:4a:b6:b9:dd:2a:9e:c6:f5:82:50:9c:8c:c9:
e6:ec:ad:e2:5a:55:34:cd:71:84:1d:96:53:d0:88:9c:5f:b4:
b8:0d:54:b1:f6:db:1d:79:61:c9:ce:ba:cb:b8:44:5d:ef:91:
65:7f:5e:aa:b5:be:c1:ba:ea:87:ff:fa:97:3b:fc:7e:69:41:
b7:75:37:b6:1a:6a:ab:b0:4e:69:ac:0f:69:c9:c7:66:18:e2:
3e:bd:0a:a7:b3:ca:c7:d3:a6:97:18:4c:3a:07:95:dc:43:eb:
76:9d:1a:83:6f:49:d7:ac:37:33:ff:99:31:5a:cc:4d:ae:fa:
06:80:a3:a7:57:26:b7:50:a3:f0:94:cd:d9:5c:8d:5a:56:ff:
4a:4b:c1:82:39:3f:ab:27:3e:29:71:34:f1:88:0b:7f:7f:82:
f0:ed:40:13:bb:0a:92:5a:df:2c:82:2e:2a:c9:48:4a:59:d2:
51:60:34:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:44:59 2026 by rpki-client