
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
File: f32FZbsEGDw68czSI-nEYR8VCAY.mft (raw, json)
Hash identifier: Zww8VUb77LfEdfUFbEKPgCCCugJ2v5sZo7+evPn94EU=
Subject key identifier: DD:D6:BC:98:31:87:6B:61:C5:F6:31:E2:71:8B:AD:C7:37:80:DC:D6
Authority key identifier: 7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06
Certificate issuer: /CN=A9194004/serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
Certificate serial: 0253
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
Manifest number: 024E
Signing time: Wed 23 Sep 2026 02:11:30 +0000
Manifest this update: Wed 23 Sep 2026 02:11:29 +0000
Manifest next update: Wed 30 Sep 2026 02:11:29 +0000
Files and hashes: 1: f32FZbsEGDw68czSI-nEYR8VCAY.crl (hash: mrHhw/0dn0+H+XNrKt0xLawJGKG5bJAuHjYp4a+Bl0M=)
2: 4A6E97AC311E11EE85C30E3BC4F9AE02.roa (hash: eZZ6OFwcrcrXTZgOQDhlIiXfyLs/tMt4GT83cZsLk+s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl
rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:11:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194004, serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
Validity
Not Before: Sep 23 02:11:29 2026 GMT
Not After : Sep 30 02:11:29 2026 GMT
Subject: CN=6ab33552-5535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:68:a4:aa:38:2d:5a:65:90:2b:21:5e:30:d4:
9a:e0:6b:a8:80:df:9c:80:0e:9d:4a:1e:d2:44:5b:
43:a1:66:07:c3:ee:f5:55:0a:e8:75:74:c6:cb:f3:
45:33:95:b1:d8:37:bf:6d:04:23:e5:d7:22:95:0f:
33:15:7c:f5:90:5e:93:5d:4a:6e:45:ed:63:66:d9:
d1:1e:27:08:85:e7:74:63:9b:e6:c4:a3:ef:90:66:
d0:15:0f:85:56:a0:33:c3:b1:b5:a9:23:be:2a:17:
cd:6b:ab:fb:b7:bc:ef:37:03:74:99:64:86:e2:0c:
24:93:9e:d5:d8:d4:0d:d1:ef:35:1f:83:39:1e:d8:
ef:61:70:ac:db:38:9a:23:bc:86:3d:b4:bc:d8:66:
ed:52:95:ac:af:b2:67:83:03:7b:11:0b:e7:57:46:
66:a9:32:c0:f5:0f:3c:db:43:f3:d9:b3:c1:51:10:
d8:c0:30:4e:aa:58:65:b2:de:b0:da:28:d8:c8:6e:
59:0a:71:5b:b7:a3:4f:ee:9b:81:d3:f6:4b:45:3d:
73:09:c0:01:a2:97:d1:37:7c:2d:6d:27:8d:bd:74:
0e:cf:65:3f:32:7b:77:e9:46:3b:76:8f:f7:4a:ae:
af:64:02:e1:ba:eb:61:b0:ea:ad:d8:c7:24:2b:00:
79:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D6:BC:98:31:87:6B:61:C5:F6:31:E2:71:8B:AD:C7:37:80:DC:D6
X509v3 Authority Key Identifier:
keyid:7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:74:b1:22:96:cc:0d:90:bc:66:a5:ee:35:a8:73:8e:79:c5:
f0:a8:4f:72:60:50:4a:ef:de:2a:d6:52:a0:27:ed:f3:14:9d:
63:82:af:af:f9:06:86:2e:e8:f3:c8:14:2d:ad:de:88:55:4e:
24:0e:39:7f:c8:55:77:fb:a2:01:ac:da:bc:a3:7d:1f:73:13:
6f:f6:9a:8e:f1:0b:34:6b:92:a4:eb:44:ca:d2:ef:8f:a9:c2:
b1:c6:e7:3f:6a:59:71:eb:86:a3:e6:61:8d:c7:38:e4:d9:e2:
b9:45:a4:39:f2:96:c8:77:cc:5f:fd:30:4e:16:93:54:a8:0a:
e0:48:46:a3:d8:5d:24:68:b6:c8:ca:f1:92:e5:4d:54:21:5f:
d2:05:75:ed:a8:a7:47:f7:26:11:1d:02:f2:f0:12:1b:8f:7d:
51:75:51:4a:51:6f:1b:c5:47:34:54:1d:c0:82:bd:a8:7d:4c:
02:ba:2e:33:da:3f:02:a6:c0:4f:a3:33:f8:0b:31:69:f2:e2:
b2:a9:14:c4:0b:c4:70:b1:4e:4d:54:fb:3f:bc:91:71:a8:06:
1e:4d:12:92:59:0a:24:77:53:1e:b5:1b:1d:27:5a:b1:08:2f:
8b:c6:64:c6:d8:c2:b3:3c:ca:c2:ec:d4:75:dd:b9:f9:c3:64:
f5:d7:ac:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:14:30 2026 by rpki-client