
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
File: fONyLR7LAIObJGf9XDmmrUamImE.mft (raw, json)
Hash identifier: fn2fYYzP097rW8+ckOaHrB3QWqfk90NreTw47cmaSqY=
Subject key identifier: 74:E0:EF:39:F1:48:48:1D:23:5E:54:C2:A7:69:F6:F7:7D:C4:91:6E
Authority key identifier: 7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61
Certificate issuer: /CN=A9156E6F/serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261
Certificate serial: 0CE7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
Manifest number: 0CDC
Signing time: Thu 26 Mar 2026 18:14:43 +0000
Manifest this update: Thu 26 Mar 2026 18:14:43 +0000
Manifest next update: Thu 02 Apr 2026 18:14:43 +0000
Files and hashes: 1: fONyLR7LAIObJGf9XDmmrUamImE.crl (hash: QiYSa2E5V3nVPkRtuddl+gIWJVL6G58gm110/QrdF1Y=)
2: ABD61D2E06D611EA8EBBEA50C4F9AE02.roa (hash: taMg9ABZmz3UBA8VdUB5OiDUtv+I/OZVxR13yJafYfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl
rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 18:14:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3303 (0xce7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156E6F, serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261
Validity
Not Before: Mar 26 18:14:43 2026 GMT
Not After : Apr 2 18:14:43 2026 GMT
Subject: CN=69c57793-8e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6d:8d:1f:86:8e:7c:f9:1e:26:80:9a:6d:b2:
ff:a2:f2:34:c1:42:82:af:df:a9:11:0a:70:fe:18:
62:dd:f2:66:59:c8:ec:a0:70:b7:a0:1d:70:e4:58:
e8:74:6e:9a:9d:06:77:50:1b:84:e3:5a:a2:2c:97:
c0:cc:ab:69:af:10:21:97:53:68:6f:14:f3:d6:94:
ab:6f:e0:d5:1e:0c:53:2b:2b:32:53:7f:6c:6e:92:
cf:e9:f0:4b:07:3a:c7:81:70:11:d0:ae:35:e5:d7:
6b:23:2e:46:99:19:30:d4:81:bf:07:be:a1:ad:2d:
bd:b3:fe:d9:0d:bf:51:18:a2:ee:7f:30:50:f6:2e:
1a:b5:62:02:87:0e:a6:71:52:a9:93:24:8a:45:ac:
89:be:08:25:01:66:09:fd:52:71:ca:83:87:7a:83:
81:0c:1b:86:83:9e:d5:90:3a:b1:28:b8:5e:36:ac:
b1:93:0d:2e:55:6b:80:31:14:fd:8b:22:78:14:b2:
35:e6:1c:01:ac:3e:fc:a5:1c:fb:df:10:ba:52:05:
ec:e2:af:a1:ba:44:d0:bb:ff:df:e3:f7:24:8c:a2:
2d:27:1d:e8:ff:1a:e3:fa:a4:5c:9c:60:9a:a9:88:
3c:d7:5c:50:b5:5c:c1:bf:b1:fc:7f:b7:f2:45:c5:
8f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E0:EF:39:F1:48:48:1D:23:5E:54:C2:A7:69:F6:F7:7D:C4:91:6E
X509v3 Authority Key Identifier:
keyid:7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:73:f9:8d:ee:c2:c4:f2:1c:d3:a6:66:e1:4d:9a:19:35:40:
a6:26:80:e5:d3:b2:2a:da:49:87:2d:33:98:74:5f:b0:b1:69:
f1:1c:55:ff:2c:08:79:a7:a0:76:89:ad:77:91:d5:7a:0d:8d:
47:d9:19:f4:75:40:20:80:56:30:f8:b0:96:77:03:d9:8b:1a:
54:ca:cb:af:6c:94:28:89:06:33:1c:03:6a:81:ee:89:ea:d0:
d4:19:92:65:ca:2f:85:3e:51:f0:d7:59:ef:e5:91:59:85:25:
75:27:88:f4:fe:ca:ae:a2:eb:08:b8:e7:39:a1:c5:21:ae:44:
7e:2f:3e:c6:c8:31:b1:60:ef:bb:98:52:ed:31:92:5a:54:67:
14:2f:21:f3:29:8f:a3:6e:32:45:f0:1a:9c:60:38:cd:09:f9:
a6:6b:5f:c6:74:6d:09:43:a6:6e:bf:86:88:23:c5:14:42:47:
e6:fc:05:78:8b:97:e9:bc:ba:70:46:a8:ad:8c:fc:cd:7e:02:
c8:02:bc:66:eb:52:33:a8:b4:36:75:3b:28:fb:eb:27:0d:43:
ed:36:76:96:9c:f9:82:76:32:6f:17:32:a2:fa:35:20:09:de:
98:32:7a:c9:e3:d4:ec:cd:9a:44:ca:1e:0c:2c:c4:87:d3:7f:
9e:57:4e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:41 2026 by rpki-client