
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft
File: f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft (raw, json)
Hash identifier: CDLlaNbrrQ4MmKV+oj1frL966z/mTRIW9N9E2eHNyPs=
Subject key identifier: 1C:DE:CF:7E:C5:A7:D5:36:2C:63:3E:25:69:FB:F1:CC:7F:8F:4A:54
Authority key identifier: 7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF
Certificate issuer: /CN=A9190992/serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF
Certificate serial: 050B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft
Manifest number: 04FC
Signing time: Sun 10 May 2026 23:47:37 +0000
Manifest this update: Sun 10 May 2026 23:47:36 +0000
Manifest next update: Sun 17 May 2026 23:47:36 +0000
Files and hashes: 1: f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl (hash: jDoKtnRhyeTsxziH+RLrq1xsFom33H6zu2d9qNNvdI0=)
2: 5B24C51A60ED11EC874B903BC4F9AE02.roa (hash: 4w0TogS+2atxTCMCzPs6c9BF71e/45vAMcdgv3e+SKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl
rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 17 May 2026 23:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1291 (0x50b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190992, serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF
Validity
Not Before: May 10 23:47:36 2026 GMT
Not After : May 17 23:47:36 2026 GMT
Subject: CN=6a011919-115d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:02:a9:97:0f:b2:29:49:cf:1a:59:df:ce:cf:
78:f6:b3:38:00:06:ba:c6:36:60:9b:f7:df:c0:eb:
5c:a0:24:01:25:7f:bd:aa:12:06:f8:99:86:db:7a:
80:ba:d7:0f:9b:89:cd:72:08:49:5c:36:bf:60:90:
ec:db:51:6e:7a:0a:0e:59:8c:b2:20:b4:21:78:e5:
b0:a7:1e:f0:ae:0e:13:eb:15:4e:fe:1b:c7:44:39:
0e:33:df:34:c0:4f:fd:c1:02:3b:90:d0:b2:7e:df:
ab:29:18:f8:65:ef:e7:79:97:3f:e7:42:f3:f3:3c:
54:05:20:9f:f8:65:88:de:aa:2d:d2:d9:af:30:5e:
0e:87:37:67:6e:c0:0b:e6:00:07:59:44:be:4c:42:
e9:08:40:5c:e5:e6:14:17:86:45:c6:04:c7:33:f6:
4d:12:39:77:cf:4b:dc:47:2a:56:49:62:51:f4:f9:
13:82:6e:49:66:a2:e5:2b:cd:b5:95:c8:5d:80:c7:
86:b3:3d:db:13:32:ae:1b:77:27:75:78:d9:72:6c:
15:c9:d0:4e:53:2e:91:77:f3:26:87:66:d2:86:84:
ae:9d:b0:d3:a9:c2:c5:84:eb:58:e0:b8:b8:ec:af:
1d:1c:5b:08:8a:7d:fe:8d:36:63:93:48:f6:70:b5:
a6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DE:CF:7E:C5:A7:D5:36:2C:63:3E:25:69:FB:F1:CC:7F:8F:4A:54
X509v3 Authority Key Identifier:
keyid:7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:57:ff:49:ca:6d:f9:fa:dc:61:c7:8f:a8:6e:66:1a:0f:4b:
15:e9:15:14:4a:85:67:04:e7:ef:50:1c:2a:73:21:92:d5:2a:
20:bb:c6:11:26:a6:9e:1d:7e:56:08:6c:8e:76:1e:99:33:48:
78:e9:47:a4:b1:96:da:25:7d:2a:68:92:2e:89:d2:c1:a4:0d:
18:77:74:ec:a6:4c:02:0b:24:db:cf:9c:e3:5c:2a:e2:bc:db:
b3:e3:d1:27:50:4a:44:e1:c8:e8:39:3d:3d:91:16:4a:de:f8:
e7:2c:1b:ff:94:5e:93:b2:09:74:61:86:90:3d:32:b7:35:59:
da:d3:c3:71:26:f9:32:26:83:e6:ec:3b:ee:6f:eb:26:c4:9e:
fe:96:0c:63:59:8d:af:4c:b8:69:a7:26:d9:69:8e:c2:df:88:
79:0a:6e:31:14:7e:b7:af:af:b8:e0:78:8a:86:ba:26:67:92:
2a:4c:4a:7e:8d:0c:d4:67:f7:c5:56:9f:03:f7:12:4b:34:a7:
62:4a:55:65:fc:76:a2:dd:70:98:b3:e7:a7:92:4a:10:3d:d8:
1a:d9:fe:04:78:84:3e:72:61:3d:7b:05:6a:b2:00:b2:1e:1e:
1e:17:4e:8b:03:87:34:4b:28:b9:6c:13:ae:c9:6a:14:5e:e3:
bf:92:8f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:09:13 2026 by rpki-client