
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
File: fwOXxqlOUll2g0u_1YAvFbeV-44.mft (raw, json)
Hash identifier: TMIH6vWtdbYWZONKfGHEAGmac7n1aGmEGxbX9OhwTGM=
Subject key identifier: DA:39:1B:E3:A6:9F:CF:13:AD:23:E1:C1:85:95:AC:20:C5:E4:F1:7C
Authority key identifier: 7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E
Certificate issuer: /CN=A9189D9B/serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E
Certificate serial: 011B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
Manifest number: 0110
Signing time: Fri 25 Sep 2026 06:10:28 +0000
Manifest this update: Fri 25 Sep 2026 06:10:28 +0000
Manifest next update: Fri 02 Oct 2026 06:10:28 +0000
Files and hashes: 1: fwOXxqlOUll2g0u_1YAvFbeV-44.crl (hash: CJErCf0fsy1O7wCTIKqY35HE8LAfRTeFk4Me+GpenqE=)
2: sRUiG2trcmUK59z372qjDQndoA8.asa (hash: 9Rnwl/OBah1XEyWrjHCFdXkyGyYZc17DRreV4ymct+U=)
3: 552F0C342E2011F0AF4AB70CC4F9AE02.roa (hash: +6GhLzBq26qZLSAXHkP4lRMwMkM4IDi1gjQptQ2nnL4=)
4: C865C1BC8D2E11F0A977AE41C4F9AE02.roa (hash: z/pF1TiSSvu2UaCDjXshPW7+WO39dYPms0u7Umk74/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl
rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:10:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189D9B, serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E
Validity
Not Before: Sep 25 06:10:28 2026 GMT
Not After : Oct 2 06:10:28 2026 GMT
Subject: CN=6ab61054-c8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:29:a4:38:25:2f:79:9d:7c:8d:bf:f8:77:01:
67:ac:85:6e:7f:88:0e:3f:99:6d:46:3c:4b:40:f9:
28:4c:89:6d:47:a8:b4:99:ef:5d:2d:68:53:36:20:
fe:53:cc:b8:ae:96:02:c2:44:7d:99:7d:c7:8e:1f:
1a:20:27:a5:b3:55:dd:2b:88:58:e0:db:d9:b1:21:
bc:63:08:db:b9:c6:f7:cb:7f:9e:d8:94:be:d0:96:
bd:08:a3:86:d8:ab:13:a5:a7:1d:b4:d3:f1:2b:39:
24:12:89:6c:c3:25:d6:fc:4b:12:9e:c3:03:8c:2a:
41:88:fd:42:0a:79:5e:e0:5b:fc:c9:48:da:11:b1:
f2:15:34:a3:94:7b:c6:36:7d:2a:0e:18:34:c0:9d:
09:9f:33:dc:68:c4:1b:f3:bf:5f:31:35:2e:c8:fe:
85:ba:5c:cd:e5:22:1f:f4:a3:2a:f2:c8:2a:10:b2:
d4:d3:23:21:4e:73:13:c1:0c:8a:b2:3a:ce:79:6d:
90:c6:50:18:2d:7c:ce:15:e8:1e:cd:12:d3:a8:bc:
3f:82:f7:d3:d6:8f:2f:dc:6f:44:29:d8:2b:ab:e6:
2b:c9:dd:34:4d:db:c5:bd:b7:8d:d2:50:2d:90:4f:
d4:e0:dd:57:8e:ee:97:21:19:f3:3f:09:e7:b6:4c:
89:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:39:1B:E3:A6:9F:CF:13:AD:23:E1:C1:85:95:AC:20:C5:E4:F1:7C
X509v3 Authority Key Identifier:
keyid:7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:df:0b:86:ac:9e:7b:c4:97:18:61:ff:88:44:c0:2f:b4:d9:
a4:3b:8e:62:fe:40:2e:12:76:24:8b:c4:58:ec:a3:8b:e8:75:
32:4a:3c:1b:e2:7c:80:9e:c5:3c:9a:23:b8:49:b9:20:28:6d:
d7:7b:e6:f4:34:a2:89:8c:8f:ca:35:ba:57:29:d2:9f:4e:b2:
87:a1:e0:c2:a6:7b:54:1e:97:73:cf:4a:f2:62:25:e9:df:fd:
a9:c3:4c:88:f3:df:87:2d:46:92:0c:34:b4:87:0e:27:21:c1:
52:dd:aa:75:16:bd:58:75:60:81:4e:01:a9:2b:9c:b6:7a:35:
e3:78:bf:c1:77:e5:45:18:b2:b0:ea:2b:f2:b3:67:d2:2c:bb:
74:1e:0f:b7:75:56:1d:bb:61:bf:85:33:6f:a3:cd:d8:76:29:
f0:9e:77:65:80:c2:89:ec:1f:6c:51:4c:ab:6b:f3:ef:5f:9c:
d6:32:bc:0f:f5:5a:da:ed:51:ef:2d:9f:db:7e:41:4a:76:29:
a9:ac:c3:80:72:56:08:e0:91:28:1b:06:75:33:c8:19:b2:ea:
08:72:a3:74:37:a4:f5:3c:fa:08:c7:13:8e:75:d8:7d:3c:e8:
9c:19:c4:57:11:5e:a6:08:fa:ef:d5:ac:0a:f8:0a:e4:ad:58:
7a:a3:b8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:07:12 2026 by rpki-client