
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft
File: fSf9xw_NGLbdWwQmla_djBc1wTA.mft (raw, json)
Hash identifier: CYzfqogXMhiaRU7qEwbBKGBg65qTNE0ixe8tSXQdlDk=
Subject key identifier: F4:BC:88:68:03:B0:1F:77:F9:E5:A5:E5:16:32:5C:86:31:D4:B3:54
Authority key identifier: 7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30
Certificate issuer: /CN=A9122041/serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130
Certificate serial: 018E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft
Manifest number: 0189
Signing time: Wed 15 Apr 2026 04:03:19 +0000
Manifest this update: Wed 15 Apr 2026 04:03:19 +0000
Manifest next update: Wed 22 Apr 2026 04:03:19 +0000
Files and hashes: 1: fSf9xw_NGLbdWwQmla_djBc1wTA.crl (hash: tG8JxpEG+UuBrtRwNAKWvj96+v9f86XBWm0m2GGz1A8=)
2: E46B7DACDC3611EEBE5CDD37C4F9AE02.roa (hash: jCjUHPVQsJaqVu7vufX+mmPVYe7rI/psWHiQFh1SNOI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl
rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 04:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122041, serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130
Validity
Not Before: Apr 15 04:03:19 2026 GMT
Not After : Apr 22 04:03:19 2026 GMT
Subject: CN=69df0e07-4567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:33:30:1e:20:8d:15:c0:65:a1:83:c8:91:
c9:a8:e8:84:12:60:0e:f6:3b:75:4b:d7:b3:2f:d0:
7c:0d:7b:71:ee:12:49:36:df:f7:42:b8:ae:bf:9e:
a4:14:f7:15:9e:78:5d:76:b2:27:5e:a6:81:dd:a9:
be:72:f0:72:f7:c2:62:08:cb:19:93:2f:8f:a8:aa:
85:92:92:e0:f9:e5:83:9e:d1:9b:f8:0d:e8:32:1e:
0a:4c:9e:6c:1a:f8:f7:72:35:82:f3:73:dd:8b:3a:
83:af:c6:67:39:f4:11:3e:b8:02:bf:c9:16:e6:d1:
cd:1a:5c:06:58:c1:3c:d9:59:57:57:cb:0c:24:66:
a3:92:70:b1:ef:61:3e:b7:31:d9:90:78:6b:0a:72:
d4:70:be:e5:78:14:0c:71:fe:37:62:82:4b:d5:92:
78:71:8d:c9:bb:bd:e7:b7:1f:1a:d0:de:da:20:fe:
72:59:39:67:ed:90:3e:52:ae:cc:49:3a:6d:ba:ec:
97:df:6e:85:7f:c8:62:92:43:9b:52:c6:54:d5:b8:
da:1e:76:f2:84:3a:08:40:9f:f1:2d:1b:d2:79:1b:
98:83:3d:5c:35:c6:6d:49:aa:62:58:44:38:ea:c3:
c8:99:c9:a2:b0:40:f4:e4:90:db:b4:aa:04:19:c4:
fd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BC:88:68:03:B0:1F:77:F9:E5:A5:E5:16:32:5C:86:31:D4:B3:54
X509v3 Authority Key Identifier:
keyid:7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:25:02:a5:a0:94:d4:19:21:3f:db:47:ce:57:32:3d:20:c9:
c1:ee:f0:8b:58:39:f0:23:7a:04:db:0a:5d:00:d7:82:be:ee:
36:c7:75:25:f5:7b:dc:73:63:51:bc:87:71:c2:81:90:07:be:
72:12:5b:5f:8a:61:f7:24:f3:51:06:87:e7:65:ae:61:77:62:
bc:7f:c5:0e:2d:4c:9c:78:b4:3e:4f:3e:d7:b2:03:cd:02:6f:
f4:d9:84:8f:e1:c3:1c:7d:a1:26:41:11:68:6a:9f:6a:fd:95:
54:85:a6:77:fc:08:b7:d4:43:26:24:fb:a1:db:58:85:7e:af:
96:65:d6:65:49:db:5f:8f:8b:23:04:f4:9d:c9:2a:a8:33:cb:
74:10:3f:8a:77:c1:de:88:22:4c:23:e2:f2:84:24:a4:f6:7a:
f5:9c:ca:27:23:4e:e4:ea:21:15:85:7a:c1:15:ef:4a:d4:3c:
40:a6:e3:23:11:a4:9b:29:ff:94:35:c6:47:9c:a4:00:32:2e:
3a:88:c3:87:9a:bd:58:b5:06:e9:ac:a7:cc:fe:9f:a1:e0:6d:
b6:7b:26:9f:a0:9b:15:72:79:cd:f7:a2:59:6c:41:03:16:8d:
ff:22:05:67:f4:01:2f:be:94:15:aa:5c:0d:cb:31:be:62:71:
af:4f:04:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjIwNDExMTAvBgNVBAUTKDdEMjdGREM3MEZDRDE4QjZERDVCMDQyNjk1QUZERDhD
MTczNUMxMzAwHhcNMjYwNDE1MDQwMzE5WhcNMjYwNDIyMDQwMzE5WjAYMRYwFAYD
VQQDEw02OWRmMGUwNy00NTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqyAzMB4gjRXAZaGDyJHJqOiEEmAO9jt1S9ezL9B8DXtx7hJJNt/3Qriuv56k
FPcVnnhddrInXqaB3am+cvBy98JiCMsZky+PqKqFkpLg+eWDntGb+A3oMh4KTJ5s
Gvj3cjWC83PdizqDr8ZnOfQRPrgCv8kW5tHNGlwGWME82VlXV8sMJGajknCx72E+
tzHZkHhrCnLUcL7leBQMcf43YoJL1ZJ4cY3Ju73ntx8a0N7aIP5yWTln7ZA+Uq7M
STptuuyX326Ff8hikkObUsZU1bjaHnbyhDoIQJ/xLRvSeRuYgz1cNcZtSapiWEQ4
6sPImcmisED05JDbtKoEGcT9IwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPS8iGgD
sB93+eWl5RYyXIYx1LNUMB8GA1UdIwQYMBaAFH0n/ccPzRi23VsEJpWv3YwXNcEw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjA0MS8yRTcyRTBBRURD
MzUxMUVFOEZGMUE0MzNDNEY5QUUwMi9mU2Y5eHdfTkdMYmRXd1FtbGFfZGpCYzF3
VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZTZjl4d19OR0xiZFd3UW1sYV9kakJjMXdUQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjA0MS8yRTcyRTBBRURDMzUxMUVFOEZGMUE0MzNDNEY5QUUwMi9mU2Y5eHdfTkdM
YmRXd1FtbGFfZGpCYzF3VEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeyUCpaCU1BkhP9tHzlcyPSDJwe7wi1g58CN6BNsKXQDXgr7uNsd1JfV73HNj
UbyHccKBkAe+chJbX4ph9yTzUQaH52WuYXdivH/FDi1MnHi0Pk8+17IDzQJv9NmE
j+HDHH2hJkERaGqfav2VVIWmd/wIt9RDJiT7odtYhX6vlmXWZUnbX4+LIwT0nckq
qDPLdBA/infB3ogiTCPi8oQkpPZ69ZzKJyNO5OohFYV6wRXvStQ8QKbjIxGkmyn/
lDXGR5ykADIuOojDh5q9WLUG6aynzP6foeBttnsmn6CbFXJ5zfeiWWxBAxaN/yIF
Z/QBL76UFapcDcsxvmJxr08E5Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:18 2026 by rpki-client