
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
File: _fbWlYIK89Dw56dNs0RTLFfa7kA.mft (raw, json)
Hash identifier: ZHi+SHeKSi9UPssU9f+QN9ZhYOOGttFRIeKFczIwxmc=
Subject key identifier: DA:8E:32:09:0C:79:0B:E4:DC:55:B0:57:04:D0:D1:73:A3:D2:D4:4F
Authority key identifier: FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40
Certificate issuer: /CN=A9125864/serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
Certificate serial: 23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
Manifest number: 1F
Signing time: Sun 01 Mar 2026 10:21:34 +0000
Manifest this update: Sun 01 Mar 2026 10:21:34 +0000
Manifest next update: Sun 08 Mar 2026 10:21:34 +0000
Files and hashes: 1: _fbWlYIK89Dw56dNs0RTLFfa7kA.crl (hash: X9opUhHftVVoGdriik6ESoeMgal0JAphjHN50WXgcWY=)
2: 0BE73752ED1C11F0A0F1907B416F56BC.roa (hash: wnHDSrJ1lNjniUVeFmGkrnIaI5zcmuj8d7YV4WvUiMk=)
3: 7B57CA16ED1C11F09DBA53AB416F56BC.roa (hash: zWp6TDXFrmD5/NSfTk8YdIj2drPaBuTNuJsIqnk6a6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl
rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:21:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125864, serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
Validity
Not Before: Mar 1 10:21:34 2026 GMT
Not After : Mar 8 10:21:34 2026 GMT
Subject: CN=69a4132e-c445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:c3:a3:59:83:a6:7c:43:a2:b4:eb:62:c9:
f6:f2:c8:43:4c:bb:b8:32:f0:1a:b0:27:75:94:1a:
11:23:b9:91:64:45:6d:21:93:69:a0:9b:da:2b:fb:
36:7c:41:ee:6b:35:0c:c6:1b:f5:99:ff:35:f7:db:
e6:96:33:cd:50:22:22:d4:9e:43:3c:98:c5:20:f0:
14:84:d8:27:71:ca:40:c5:93:db:3b:7d:d8:7a:c5:
51:4c:35:02:13:06:09:ef:3e:b8:22:ec:55:0d:9d:
67:56:9b:00:44:ba:3f:d6:98:26:a9:05:28:10:25:
6d:b1:ae:50:40:51:c9:84:0c:09:66:6b:64:04:32:
0c:bb:e6:be:66:e3:70:1f:2a:86:bf:1b:fa:c7:86:
bd:82:2e:33:e0:93:dc:99:a4:ed:04:5b:58:c5:fd:
8e:a0:7d:03:53:80:30:be:5c:57:e9:a2:db:a3:9e:
65:9f:89:e5:15:2d:bf:4b:4f:0a:c3:12:b2:0f:ef:
33:1b:c4:ec:38:39:2b:fc:f7:31:a3:5f:13:bd:c8:
d2:a1:cc:ba:60:2c:1f:78:35:b4:1f:28:46:53:38:
a2:9e:95:12:8b:7f:cd:cf:58:96:dc:11:ac:b6:fe:
80:aa:a7:a4:f0:3e:41:e1:7f:fd:49:c1:d9:50:7a:
88:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8E:32:09:0C:79:0B:E4:DC:55:B0:57:04:D0:D1:73:A3:D2:D4:4F
X509v3 Authority Key Identifier:
keyid:FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:29:92:8a:2f:6d:e9:34:79:34:fd:e7:c1:8f:44:91:e0:dc:
29:b7:27:9d:b5:2d:4c:a9:46:e6:94:16:b7:c7:2d:d0:d0:1d:
de:48:c2:b8:0b:19:c2:1b:bb:73:4b:a2:49:4f:96:b5:82:02:
ab:88:0a:db:4d:bc:41:23:09:0f:71:3c:1f:87:31:4d:76:37:
dc:04:04:79:3a:38:24:ba:57:b1:5a:8b:a3:3f:2b:9c:1a:cb:
9f:99:4a:98:62:2e:f4:1b:5a:da:04:ce:12:9e:e9:b6:f4:c5:
0b:99:be:cc:2c:fc:1c:b8:ca:a4:12:c2:1a:92:cc:f3:95:0d:
8d:3a:a7:15:86:e4:9e:f6:d9:b2:a9:16:8b:3b:4a:04:b9:5b:
cc:ca:de:7a:4f:93:ee:13:25:22:b0:3e:d2:3d:3c:aa:8b:9c:
97:49:90:4d:d6:e9:39:7b:b0:15:cd:31:6b:5d:1b:7f:81:c8:
f8:51:8c:77:94:c8:2a:91:aa:96:2b:b8:0b:1c:dc:38:77:a6:
64:c6:91:97:40:6d:47:90:c9:e9:37:ce:3f:4d:6f:ff:02:f7:
c6:62:46:39:a7:59:bb:36:cc:7c:26:79:f6:77:36:8d:bc:e6:
dc:83:ce:9e:96:f0:41:69:7f:71:b3:73:52:db:bd:60:97:8f:
18:d5:1d:3d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
NTg2NDExMC8GA1UEBRMoRkRGNkQ2OTU4MjBBRjNEMEYwRTdBNzREQjM0NDUzMkM1
N0RBRUU0MDAeFw0yNjAzMDExMDIxMzRaFw0yNjAzMDgxMDIxMzRaMBgxFjAUBgNV
BAMTDTY5YTQxMzJlLWM0NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCq0cOjWYOmfEOitOtiyfbyyENMu7gy8BqwJ3WUGhEjuZFkRW0hk2mgm9or+zZ8
Qe5rNQzGG/WZ/zX32+aWM81QIiLUnkM8mMUg8BSE2CdxykDFk9s7fdh6xVFMNQIT
BgnvPrgi7FUNnWdWmwBEuj/WmCapBSgQJW2xrlBAUcmEDAlma2QEMgy75r5m43Af
Koa/G/rHhr2CLjPgk9yZpO0EW1jF/Y6gfQNTgDC+XFfpotujnmWfieUVLb9LTwrD
ErIP7zMbxOw4OSv89zGjXxO9yNKhzLpgLB94NbQfKEZTOKKelRKLf83PWJbcEay2
/oCqp6TwPkHhf/1JwdlQeoiPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2o4yCQx5
C+TcVbBXBNDRc6PS1E8wHwYDVR0jBBgwFoAU/fbWlYIK89Dw56dNs0RTLFfa7kAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1ODY0LzE5MjMxNUYyRUQx
ODExRjA4RTFDMDYwMjQwNkY1NkJDL19mYldsWUlLODlEdzU2ZE5zMFJUTEZmYTdr
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvX2ZiV2xZSUs4OUR3NTZkTnMwUlRMRmZhN2tBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1
ODY0LzE5MjMxNUYyRUQxODExRjA4RTFDMDYwMjQwNkY1NkJDL19mYldsWUlLODlE
dzU2ZE5zMFJUTEZmYTdrQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCoKZKKL23pNHk0/efBj0SR4NwptyedtS1MqUbmlBa3xy3Q0B3eSMK4CxnCG7tz
S6JJT5a1ggKriArbTbxBIwkPcTwfhzFNdjfcBAR5OjgkulexWoujPyucGsufmUqY
Yi70G1raBM4Snum29MULmb7MLPwcuMqkEsIakszzlQ2NOqcVhuSe9tmyqRaLO0oE
uVvMyt56T5PuEyUisD7SPTyqi5yXSZBN1uk5e7AVzTFrXRt/gcj4UYx3lMgqkaqW
K7gLHNw4d6ZkxpGXQG1HkMnpN84/TW//AvfGYkY5p1m7Nsx8Jnn2dzaNvObcg86e
lvBBaX9xs3NS271gl48Y1R09
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:37:58 2026 by rpki-client