
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
File: FggPXxr0qlYST_cZXRPoW5OllSE.mft (raw, json)
Hash identifier: /cTrRaOx5SEZVP6GgbOR/xjNTneFiK2r7dx6U/NUTLQ=
Subject key identifier: DC:2D:78:10:A5:96:37:32:8B:89:C6:A0:64:F3:1D:63:3E:AD:38:FC
Authority key identifier: 16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21
Certificate issuer: /CN=A9193267/serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521
Certificate serial: 0273
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
Manifest number: 026E
Signing time: Wed 25 Mar 2026 01:26:08 +0000
Manifest this update: Wed 25 Mar 2026 01:26:08 +0000
Manifest next update: Wed 01 Apr 2026 01:26:08 +0000
Files and hashes: 1: FggPXxr0qlYST_cZXRPoW5OllSE.crl (hash: xjcoiPIJO3enIR5kkPeWqXjePnZ5VLgW9KaCA+HzLDU=)
2: F29D0E026EE311ED94338E61C4F9AE02.roa (hash: c6WyHsBn28zLxAPslj/mtPb6e/zIB82d9kY7lKbn8V0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl
rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:26:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 627 (0x273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193267, serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521
Validity
Not Before: Mar 25 01:26:08 2026 GMT
Not After : Apr 1 01:26:08 2026 GMT
Subject: CN=69c339b0-6deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d5:9a:53:7b:98:05:c5:34:fc:17:51:ef:e1:
a9:1f:b3:0f:0d:d8:cd:5a:7f:76:82:d9:f7:ed:dd:
02:cf:b4:19:d9:37:ad:ee:4f:e8:6c:54:2e:0c:a9:
ff:5e:11:ec:83:46:2e:82:fc:a6:54:d8:34:b4:f5:
1d:8d:0f:2a:b4:54:1a:a4:8c:6f:7d:89:f3:ef:00:
99:7a:0a:64:35:04:57:f1:16:00:71:55:a5:1c:83:
18:d5:fb:fa:8d:6d:da:62:92:ca:30:b6:d4:77:35:
50:67:96:61:24:a7:86:ea:09:09:72:ad:e4:9b:c8:
6d:5b:25:ac:79:37:cf:ad:16:5d:c5:d8:e5:cd:90:
42:5b:ae:92:bc:a5:40:a1:e4:0a:2a:e2:01:bf:67:
1d:28:87:0b:c8:48:12:b7:ad:1d:a4:80:29:e5:80:
fa:3e:4b:fa:cb:fd:be:4b:d4:3b:a8:5c:d6:3e:be:
31:22:33:fe:bd:55:d2:e9:51:99:83:92:e7:97:ed:
51:47:0b:69:91:be:7d:53:e6:d4:68:fe:f1:67:b8:
81:14:b7:8c:a2:fd:f7:08:ba:ff:be:3a:a5:47:f7:
9e:73:11:4a:b3:23:5f:8b:81:07:ba:ea:af:96:66:
ed:39:55:ba:fc:2c:24:bf:7d:27:f5:e3:d8:eb:9c:
49:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2D:78:10:A5:96:37:32:8B:89:C6:A0:64:F3:1D:63:3E:AD:38:FC
X509v3 Authority Key Identifier:
keyid:16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:f8:56:7d:93:61:d7:5a:da:5b:ae:17:01:34:16:51:bb:a2:
e6:72:eb:00:6f:34:07:b2:0a:87:cb:be:39:c3:c2:7b:fa:47:
4a:b4:b8:97:00:d0:fa:3c:c1:26:f5:39:74:87:91:63:ad:cd:
46:d7:a8:18:db:b7:f7:b5:08:ed:f7:d8:a2:73:9c:fe:df:42:
41:e6:5b:33:a6:02:81:04:30:51:f3:a7:2e:bc:b8:ad:75:c7:
c0:cb:a6:d8:37:49:40:c7:83:95:f3:54:ff:84:db:90:19:ca:
ca:77:68:83:cd:b6:4e:42:f7:4d:70:d5:04:82:a8:fc:b6:22:
3f:ab:ff:b6:23:e6:bb:3a:ee:50:a7:5d:de:9b:1e:17:21:75:
54:c2:e8:1a:1f:e5:d8:21:d9:62:f1:10:96:05:61:ce:58:21:
26:72:b2:6c:f2:2a:9d:37:c7:90:8c:4d:a2:09:6f:e0:49:40:
37:48:e4:00:d7:c6:7e:87:c5:95:51:58:0e:3f:28:36:71:4f:
48:4f:b0:67:ce:4c:bc:01:90:5f:f8:f0:96:ed:b0:df:aa:f0:
c0:56:34:20:e7:c9:c6:01:d8:a2:eb:5c:cf:d1:d2:1d:56:06:
44:33:e4:dd:ea:d6:f7:58:cb:ae:08:c9:27:6f:5d:c4:9d:c0:
99:22:74:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:23 2026 by rpki-client