
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
File: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft (raw, json)
Hash identifier: wPgog23n0AqCNe+N9mvtRo9/CSUpV6Fxc2dOuO1h6k8=
Subject key identifier: F9:72:25:D3:5D:1F:BB:BF:9D:89:89:5B:4D:60:1B:56:9C:C4:BA:D1
Authority key identifier: 7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B
Certificate issuer: /CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
Certificate serial: 06DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
Manifest number: 06D3
Signing time: Thu 26 Mar 2026 22:05:27 +0000
Manifest this update: Thu 26 Mar 2026 22:05:27 +0000
Manifest next update: Thu 02 Apr 2026 22:05:27 +0000
Files and hashes: 1: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl (hash: wZTfMf/tmSv7SrMy9hdIMe2CVbGhTK0ePCyIsvn/OC8=)
2: AB791BEE7BC711F0B0A56A74C4F9AE02.roa (hash: QaYEG2WSdhaWEdoGVElFyYGDrqVJROikfBh2ov/24oo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl
rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 22:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1755 (0x6db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152A4E, serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
Validity
Not Before: Mar 26 22:05:27 2026 GMT
Not After : Apr 2 22:05:27 2026 GMT
Subject: CN=69c5ada7-3790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:73:d3:29:b7:41:47:fd:7c:c5:76:c8:cb:
be:8d:64:4e:ea:47:ee:92:9e:1c:80:dd:3e:9a:c8:
33:97:6b:fe:52:4f:ce:dd:7c:a7:aa:cc:f5:2d:31:
1f:11:20:ef:d9:11:00:e9:3c:01:4c:c6:9e:be:d9:
b0:31:63:31:24:fb:82:20:fc:82:fc:77:0c:7c:d8:
32:7a:e8:6b:7c:0b:9a:fa:e1:0e:73:d9:26:d7:ce:
9c:01:fd:20:a9:e0:2f:1d:0b:2a:8a:bb:80:57:36:
1a:1e:60:08:f7:03:e8:18:80:b2:c1:5f:31:35:3a:
bf:84:f9:ce:6a:a7:b0:47:34:8f:bc:30:db:9b:67:
60:4e:9e:c8:11:c9:66:2e:d6:db:c6:a6:1e:51:62:
db:e2:89:c8:65:d2:81:4b:63:a7:d4:79:00:00:8b:
bf:eb:bf:74:29:82:c8:19:28:61:78:4d:12:2e:05:
a0:fa:09:5f:16:9b:e6:b7:a3:da:ad:b7:50:71:ef:
01:db:2b:25:0e:3c:a1:ea:2c:a1:a0:84:8b:0e:78:
37:fd:a9:11:56:a5:d4:ba:cc:de:f2:4d:3e:6b:db:
fb:ae:5b:93:80:b6:07:00:e8:85:05:28:96:b7:1c:
f4:ef:35:53:41:e9:5a:9b:19:71:ab:9e:47:d5:21:
6e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:72:25:D3:5D:1F:BB:BF:9D:89:89:5B:4D:60:1B:56:9C:C4:BA:D1
X509v3 Authority Key Identifier:
keyid:7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:0e:97:c6:93:1b:aa:7e:7d:1a:b8:35:72:bc:ba:12:6f:0b:
9e:39:8f:93:85:95:82:98:01:d6:d4:1c:8f:15:e8:81:b5:6c:
0d:fe:54:a0:34:9c:61:b5:a1:7f:a5:6a:7b:14:e2:b8:26:80:
fc:fb:b9:f6:9f:1f:67:63:da:c1:5a:e1:a0:84:a4:4d:7b:e8:
fb:ea:63:8d:bf:75:0c:35:6a:a8:04:b5:00:07:a0:17:aa:e9:
51:c0:f7:27:2a:1b:31:f3:de:c2:61:2b:46:24:58:ff:13:59:
66:41:e0:0f:20:8f:54:35:39:e9:d7:0f:ae:d1:b7:28:d5:24:
9d:7e:2c:2b:92:f2:af:83:d7:48:7b:85:d2:06:9d:3d:69:7b:
44:7e:43:c8:f5:64:38:8d:cf:88:26:5f:7b:11:3c:ed:0e:c2:
6c:7b:4a:14:79:9e:85:cf:13:d8:2f:d7:da:71:f9:8b:03:f2:
f5:4d:8c:37:74:d4:f1:4f:c8:ae:76:93:e0:67:94:28:8c:ef:
42:cf:70:61:c7:8c:63:49:00:21:a5:6b:23:01:9f:3b:89:d4:
2d:86:7c:52:76:3a:1a:5c:df:fe:a9:94:a0:4e:56:f9:4d:49:
b9:3b:bc:1c:36:78:bc:de:4c:8a:aa:3c:bb:54:1d:ce:ba:0b:
7e:24:3a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:39:37 2026 by rpki-client