
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
File: fwOXxqlOUll2g0u_1YAvFbeV-44.mft (raw, json)
Hash identifier: W7wrURLm39Fba8kqx0gcymnexHPXMBQoC77QOZC1lI8=
Subject key identifier: 65:32:A9:DE:73:7A:04:6F:16:4F:B0:B9:16:1E:11:B5:8E:12:86:99
Authority key identifier: 7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E
Certificate issuer: /CN=A9189D9B/serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E
Certificate serial: F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
Manifest number: EE
Signing time: Thu 23 Jul 2026 08:14:15 +0000
Manifest this update: Thu 23 Jul 2026 08:14:14 +0000
Manifest next update: Thu 30 Jul 2026 08:14:14 +0000
Files and hashes: 1: fwOXxqlOUll2g0u_1YAvFbeV-44.crl (hash: AtlI6f9fzHXNeZgKcfmwYQq91ZmfbJaOA8ZULF29h5w=)
2: C865C1BC8D2E11F0A977AE41C4F9AE02.roa (hash: z/pF1TiSSvu2UaCDjXshPW7+WO39dYPms0u7Umk74/0=)
3: 552F0C342E2011F0AF4AB70CC4F9AE02.roa (hash: +6GhLzBq26qZLSAXHkP4lRMwMkM4IDi1gjQptQ2nnL4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl
rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:14:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189D9B, serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E
Validity
Not Before: Jul 23 08:14:14 2026 GMT
Not After : Jul 30 08:14:14 2026 GMT
Subject: CN=6a61cd57-4886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:56:d3:20:e1:53:b1:dc:f4:16:69:65:0a:
ae:b1:da:16:02:4c:71:d8:45:c7:34:22:1a:f4:57:
b9:cc:5a:be:83:38:17:2c:70:9e:e7:b1:f1:44:99:
09:b3:77:9c:d8:a4:1e:fd:b9:f9:e6:11:6b:51:76:
6b:2d:68:da:34:d1:ac:46:9d:83:94:37:03:62:98:
f7:70:dc:2a:fe:c0:cf:e9:16:4f:8a:5d:98:79:ff:
e8:08:b6:62:15:29:e0:93:c3:38:b5:21:1c:6b:73:
11:ca:ac:bf:0a:aa:fa:9f:50:3b:b0:51:ef:dd:ea:
2f:25:20:8a:9a:31:b3:3b:ea:d2:78:6c:a7:c0:58:
24:7b:c9:fb:57:85:de:44:c7:3c:57:2d:b6:12:e9:
90:70:19:1f:71:12:77:a2:0f:75:7d:a6:11:1c:06:
84:3a:19:2a:8f:80:61:79:bf:dc:b6:70:b1:37:bb:
42:d3:98:b6:a8:58:c7:08:87:19:ef:02:2e:c0:18:
d5:47:e6:13:53:cd:2c:cc:cc:15:d2:90:3b:03:d9:
0a:bf:b4:55:2e:e7:86:f1:ee:9d:f1:0b:04:0e:b4:
ac:4e:c2:3b:86:ca:b2:f2:7c:70:f2:58:7f:d5:ff:
dd:34:13:ea:5d:da:72:3a:f5:f6:be:6c:ff:08:de:
e2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:32:A9:DE:73:7A:04:6F:16:4F:B0:B9:16:1E:11:B5:8E:12:86:99
X509v3 Authority Key Identifier:
keyid:7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:f8:98:30:1c:3e:f3:13:50:c7:01:28:47:53:21:ba:a2:97:
84:cf:65:7b:97:9f:fd:8a:ac:1d:a0:86:c5:15:0b:6f:6b:1d:
43:ce:5d:82:50:ad:b4:40:a0:5d:a3:e1:89:f4:12:ea:09:e8:
c5:73:b2:64:6b:a2:11:58:d6:47:5e:01:d6:32:96:91:ec:5b:
bc:93:1f:1b:b4:4b:6b:15:65:94:d3:94:e0:41:4a:55:a0:0d:
4d:9e:62:ca:7a:54:09:ab:a8:08:86:8a:9d:ad:36:86:5f:0b:
bc:61:dd:77:12:77:0a:5f:46:f3:2f:b6:a9:6e:bb:19:63:2f:
52:61:b1:8a:15:c4:75:2d:1e:07:6a:dd:95:13:63:4f:16:0c:
4c:b0:6a:ff:28:f9:d1:43:d5:63:7c:1d:0f:1f:34:2e:e4:2e:
95:59:db:55:cb:dc:d3:72:82:db:93:2e:5d:c4:81:e5:10:e6:
aa:7a:2d:4c:e9:49:14:0a:fa:40:21:32:e1:e6:10:82:05:f1:
ee:45:79:f8:d6:d6:5c:c6:02:da:3a:5e:af:7f:42:af:9c:e6:
9e:34:53:3c:39:d3:97:c6:a9:a0:47:1f:f9:b5:e8:12:17:0f:
fb:fa:a0:22:93:7f:d1:d7:f5:7d:7b:88:e4:da:37:80:22:cc:
e1:8c:93:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:41:21 2026 by rpki-client