
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
File: fwOXxqlOUll2g0u_1YAvFbeV-44.mft (raw, json)
Hash identifier: VI8A+oGKZqzXwto11arjwTZV8YQRSAgAnwQin+gjY0k=
Subject key identifier: 82:FC:FF:52:D6:92:F5:64:51:6A:D5:E9:BA:6B:44:84:FF:2B:BD:0B
Authority key identifier: 7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E
Certificate issuer: /CN=A9189D9B/serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E
Certificate serial: D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
Manifest number: C8
Signing time: Mon 11 May 2026 07:02:57 +0000
Manifest this update: Mon 11 May 2026 07:02:57 +0000
Manifest next update: Mon 18 May 2026 07:02:57 +0000
Files and hashes: 1: fwOXxqlOUll2g0u_1YAvFbeV-44.crl (hash: PH6xqWQmkfyy2gBJeXQPfghly2zeUhDB0JqgaBsLl44=)
2: 552F0C342E2011F0AF4AB70CC4F9AE02.roa (hash: Os32lL30yxnI+rMD5Up4IutqeJR0LoJ837R4MBPxXs4=)
3: C865C1BC8D2E11F0A977AE41C4F9AE02.roa (hash: Fw/j+y8H8YzLuAy+NNQ6vU7kAdtmWkerdqp60DAL/h4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl
rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189D9B, serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E
Validity
Not Before: May 11 07:02:57 2026 GMT
Not After : May 18 07:02:57 2026 GMT
Subject: CN=6a017f21-6326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d0:3b:d4:a1:66:74:e3:2e:41:9f:8b:18:b7:
65:51:20:1c:29:d6:d6:e2:c6:1c:49:99:2a:cc:27:
e4:da:97:21:fb:d5:bb:55:0b:69:7f:8d:d1:b3:42:
a2:36:f0:13:d0:4f:20:6b:e1:87:48:68:17:ec:81:
b8:20:aa:58:f5:91:5b:a8:d2:39:b0:de:89:aa:ed:
8b:03:61:5c:e9:e1:cd:48:3a:c1:5b:ed:16:f4:e1:
d9:8e:c3:62:16:e1:1a:c9:1b:91:f2:33:44:1c:20:
8d:bf:77:37:ce:08:2f:0c:d5:f7:4f:7a:60:a2:60:
53:23:0d:a7:55:d5:fa:e2:52:f8:34:99:a9:ca:dd:
d5:e0:67:2d:05:1f:c4:00:0a:0e:77:0f:90:88:a9:
b4:58:8b:57:e5:34:b2:17:15:c9:c2:ba:de:47:c6:
cd:c9:6b:16:0e:68:f9:a4:1a:f3:df:d7:ee:f4:48:
14:31:88:ba:ed:80:67:e0:64:bb:fa:18:e8:b1:bd:
54:ac:b1:47:0c:f7:1e:af:ab:13:b3:d5:05:86:ec:
ef:9d:70:5d:9d:2a:50:9f:d6:5d:d4:79:b3:72:3e:
5c:e2:7d:06:06:6f:27:1d:de:2e:eb:c1:3f:14:5f:
3f:f3:b9:31:7b:f0:f8:c6:3d:98:2a:d7:ae:57:37:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FC:FF:52:D6:92:F5:64:51:6A:D5:E9:BA:6B:44:84:FF:2B:BD:0B
X509v3 Authority Key Identifier:
keyid:7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:d7:43:18:c9:b7:2d:8c:9a:a9:1d:e6:29:d2:9e:95:bb:3b:
8c:41:be:a5:ed:61:62:2e:c0:2b:d4:49:0a:0b:8d:d7:65:e5:
85:e8:42:6e:d5:2a:16:2d:78:48:bc:d9:bb:92:fc:d5:4e:94:
60:2c:55:cc:04:fc:e7:fb:d6:4c:6a:3d:44:4b:46:a4:b6:80:
6c:76:34:91:f0:18:62:bc:19:36:b7:47:26:13:a0:ec:c1:88:
43:6e:60:33:6c:7a:a7:6c:34:47:3b:90:e4:2d:3a:06:71:7f:
b2:31:a8:07:dc:b7:c8:be:fc:11:32:e3:6a:23:30:34:9a:50:
74:1d:7f:d5:ed:f5:1d:a6:62:95:30:70:b3:c4:af:f1:30:d7:
61:cd:6e:92:5e:d2:c3:dc:de:59:45:03:fc:a7:09:63:84:e5:
9b:f7:4b:fe:69:9a:32:44:ed:6b:a3:cb:b5:b9:61:b8:3f:06:
b2:e5:4e:06:6b:c4:f1:8e:50:17:9f:da:b9:09:18:e6:09:7a:
41:66:93:ed:a4:63:96:1e:de:ca:fe:92:0d:02:ff:5b:1f:67:
2f:07:7f:cb:2b:f2:72:7e:c6:f7:57:9c:0a:59:32:a7:ed:b4:
4d:ad:77:8b:9b:02:56:7f:ad:fd:aa:44:a0:e8:90:c8:d0:0d:
aa:ec:22:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODlEOUIxMTAvBgNVBAUTKDdGMDM5N0M2QTk0RTUyNTk3NjgzNEJCRkQ1ODAyRjE1
Qjc5NUZCOEUwHhcNMjYwNTExMDcwMjU3WhcNMjYwNTE4MDcwMjU3WjAYMRYwFAYD
VQQDEw02YTAxN2YyMS02MzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2NA71KFmdOMuQZ+LGLdlUSAcKdbW4sYcSZkqzCfk2pch+9W7VQtpf43Rs0Ki
NvAT0E8ga+GHSGgX7IG4IKpY9ZFbqNI5sN6Jqu2LA2Fc6eHNSDrBW+0W9OHZjsNi
FuEayRuR8jNEHCCNv3c3zggvDNX3T3pgomBTIw2nVdX64lL4NJmpyt3V4GctBR/E
AAoOdw+QiKm0WItX5TSyFxXJwrreR8bNyWsWDmj5pBrz39fu9EgUMYi67YBn4GS7
+hjosb1UrLFHDPcer6sTs9UFhuzvnXBdnSpQn9Zd1Hmzcj5c4n0GBm8nHd4u68E/
FF8/87kxe/D4xj2YKteuVzdTJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIL8/1LW
kvVkUWrV6bprRIT/K70LMB8GA1UdIwQYMBaAFH8Dl8apTlJZdoNLv9WALxW3lfuO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUQ5Qi9CMkE1NzdDMjI3
NDUxMUYwQUVEMkI0NjlDNEY5QUUwMi9md09YeHFsT1VsbDJnMHVfMVlBdkZiZVYt
NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z3T1h4cWxPVWxsMmcwdV8xWUF2RmJlVi00NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OUQ5Qi9CMkE1NzdDMjI3NDUxMUYwQUVEMkI0NjlDNEY5QUUwMi9md09YeHFsT1Vs
bDJnMHVfMVlBdkZiZVYtNDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgddDGMm3LYyaqR3mKdKelbs7jEG+pe1hYi7AK9RJCguN12XlhehCbtUqFi14
SLzZu5L81U6UYCxVzAT85/vWTGo9REtGpLaAbHY0kfAYYrwZNrdHJhOg7MGIQ25g
M2x6p2w0RzuQ5C06BnF/sjGoB9y3yL78ETLjaiMwNJpQdB1/1e31HaZilTBws8Sv
8TDXYc1ukl7Sw9zeWUUD/KcJY4Tlm/dL/mmaMkTta6PLtblhuD8GsuVOBmvE8Y5Q
F5/auQkY5gl6QWaT7aRjlh7eyv6SDQL/Wx9nLwd/yyvycn7G91ecClkyp+20Ta13
i5sCVn+t/apEoOiQyNANquwiEw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:34:30 2026 by rpki-client