
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
File: fwOXxqlOUll2g0u_1YAvFbeV-44.mft (raw, json)
Hash identifier: hMF3Pp9oVPpV+BnfPmINAprwFMnsuGrcn728TIZ1SIs=
Subject key identifier: 13:3D:15:D7:7D:1B:3F:4A:A6:2A:A5:FF:66:5D:C9:70:ED:21:B1:D4
Authority key identifier: 7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E
Certificate issuer: /CN=A9189D9B/serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E
Certificate serial: B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
Manifest number: B0
Signing time: Wed 25 Mar 2026 06:25:24 +0000
Manifest this update: Wed 25 Mar 2026 06:25:24 +0000
Manifest next update: Wed 01 Apr 2026 06:25:24 +0000
Files and hashes: 1: fwOXxqlOUll2g0u_1YAvFbeV-44.crl (hash: jDViccJcntNAxGP1gnXzUbU6TQzlNJk4mI8K812IVB0=)
2: C865C1BC8D2E11F0A977AE41C4F9AE02.roa (hash: Fw/j+y8H8YzLuAy+NNQ6vU7kAdtmWkerdqp60DAL/h4=)
3: 552F0C342E2011F0AF4AB70CC4F9AE02.roa (hash: Os32lL30yxnI+rMD5Up4IutqeJR0LoJ837R4MBPxXs4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl
rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189D9B, serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E
Validity
Not Before: Mar 25 06:25:24 2026 GMT
Not After : Apr 1 06:25:24 2026 GMT
Subject: CN=69c37fd4-58c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:19:1c:81:1d:d1:ec:f6:d6:da:f8:c5:87:14:
41:2e:95:7a:0c:ab:2f:74:60:14:67:90:33:b7:fe:
f2:72:6e:3a:8e:d2:4f:7d:9e:c2:0d:f6:84:70:17:
e2:d4:86:16:16:ee:29:41:59:cc:b0:61:36:70:39:
17:8a:14:f0:99:cb:86:35:93:bb:93:a0:d4:9b:91:
a5:8f:02:bf:2c:64:28:8a:ee:35:a2:50:e4:f1:72:
5b:b9:5f:81:77:49:24:f9:e7:f2:8a:08:1a:c3:ad:
50:01:24:51:0c:0b:1d:27:3c:dd:f7:19:a7:03:8c:
57:7c:46:5f:d5:64:0c:db:94:5d:71:ff:b8:08:a6:
fa:47:83:55:35:c8:4b:48:ff:a4:73:6a:f4:55:91:
d9:a0:eb:d8:4c:03:8a:19:c8:84:ff:e1:a3:5e:8e:
e5:dc:63:a8:fa:71:2a:e6:de:7f:be:b1:c5:29:58:
da:65:fe:86:29:1c:29:90:a6:86:2b:e8:f2:6b:08:
dd:b7:e0:f8:ca:96:a3:e1:c6:54:ba:07:d6:1d:7e:
61:b8:9d:b2:f5:18:c2:11:ce:56:cd:fe:98:71:f9:
92:fc:5a:07:6a:15:e9:6c:21:5e:49:fc:dc:af:52:
f6:d4:5f:eb:35:d9:0a:bc:cb:3e:79:e7:db:b2:ee:
0f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3D:15:D7:7D:1B:3F:4A:A6:2A:A5:FF:66:5D:C9:70:ED:21:B1:D4
X509v3 Authority Key Identifier:
keyid:7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9a:52:7a:3e:b0:8a:f7:dc:e3:7e:50:59:3c:87:f1:ed:07:
fd:75:48:67:a9:e7:fb:4d:dc:70:57:8d:39:a9:1f:03:15:a6:
d2:5d:e3:08:6c:58:72:d3:47:14:3b:05:a9:8c:c1:2b:43:07:
0d:3b:db:b6:60:89:5a:b2:15:a0:2a:5a:e4:ec:64:f1:2b:f5:
c7:b5:c7:4a:54:3d:39:b1:92:17:fd:9e:81:8e:6f:64:3b:68:
b3:54:b8:e6:f7:b0:ba:bc:0a:b3:f3:8d:58:af:fb:c3:32:b2:
7d:74:46:92:9d:6a:ed:ae:6a:6c:62:1c:9f:19:78:bc:ac:26:
0a:e6:93:08:93:5a:93:c6:a3:67:d9:a8:34:08:b5:32:50:7c:
2c:d1:3e:5f:27:9e:b0:8c:67:b6:4c:f9:cf:46:9c:9f:45:83:
5c:04:3f:ec:8c:37:f4:c5:ee:84:1e:25:ba:79:7b:2f:1c:c5:
44:00:2d:69:b6:0b:d0:b9:3d:09:fc:c8:d2:96:39:83:c4:3f:
a2:4a:18:1c:68:f9:e4:37:32:71:ee:06:c6:77:66:e7:83:cf:
39:07:1e:4e:37:fb:11:ca:eb:e4:82:0e:f2:cd:3c:09:a8:39:
5f:07:af:55:7e:bf:b8:ec:50:01:50:41:14:fd:e5:0f:57:3e:
63:3f:91:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:34 2026 by rpki-client