
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
File: _fbWlYIK89Dw56dNs0RTLFfa7kA.mft (raw, json)
Hash identifier: sc6JhsCy4xVymxXUbwITMP8wIB+EsLaaU5IYHgikSJU=
Subject key identifier: 57:25:13:AC:E6:97:CB:B5:DE:D5:4A:E8:15:F7:66:B2:82:8A:BE:95
Authority key identifier: FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40
Certificate issuer: /CN=A9125864/serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
Manifest number: 36
Signing time: Wed 15 Apr 2026 08:09:30 +0000
Manifest this update: Wed 15 Apr 2026 08:09:29 +0000
Manifest next update: Wed 22 Apr 2026 08:09:29 +0000
Files and hashes: 1: _fbWlYIK89Dw56dNs0RTLFfa7kA.crl (hash: as74zvpcAI7tjZy+xTfsfmXr2SGet97hhTR7aqEoXtY=)
2: 0BE73752ED1C11F0A0F1907B416F56BC.roa (hash: wnHDSrJ1lNjniUVeFmGkrnIaI5zcmuj8d7YV4WvUiMk=)
3: 7B57CA16ED1C11F09DBA53AB416F56BC.roa (hash: zWp6TDXFrmD5/NSfTk8YdIj2drPaBuTNuJsIqnk6a6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl
rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 08:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125864, serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
Validity
Not Before: Apr 15 08:09:29 2026 GMT
Not After : Apr 22 08:09:29 2026 GMT
Subject: CN=69df47ba-1a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:0c:ac:29:6c:de:d2:91:f7:7e:0c:97:81:
a1:d4:66:9d:9f:72:66:9d:db:68:e8:95:29:56:7d:
ef:4e:ed:bf:a2:93:c7:b6:38:a3:d3:ff:ed:41:b8:
6a:04:eb:6e:80:d5:82:cb:32:31:71:39:80:c9:1e:
f5:8c:75:89:8d:11:30:f5:06:ee:10:1c:8a:18:4a:
66:85:8d:47:4b:fa:92:29:4a:c8:ea:d7:9b:03:fb:
1a:b2:c1:73:43:3b:50:c3:65:0f:17:e6:78:bf:a5:
d5:30:34:8c:8f:12:36:ad:81:86:b9:42:2a:c7:37:
2f:ae:e5:7f:e4:7c:e6:e8:62:75:18:63:f5:58:39:
a3:7e:c0:01:b6:2a:d0:39:60:05:25:e3:71:8e:25:
19:b4:50:7e:22:03:d5:08:37:15:65:69:9d:a0:23:
d3:3f:89:48:f2:54:0f:0d:94:d5:dc:74:64:37:d7:
91:da:99:db:84:75:16:d6:ef:ac:35:a8:18:02:b5:
15:b9:ff:4c:b8:ed:49:64:03:3e:a6:ce:73:8c:f5:
b7:53:35:63:37:cb:a9:cc:ce:b1:73:8b:62:9b:a8:
29:dc:f9:4b:81:86:d4:e2:96:03:e9:0a:9d:ec:14:
81:40:2f:a4:85:60:11:a1:42:98:19:a3:0f:94:89:
86:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:25:13:AC:E6:97:CB:B5:DE:D5:4A:E8:15:F7:66:B2:82:8A:BE:95
X509v3 Authority Key Identifier:
keyid:FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d1:d6:46:cc:bf:1b:8f:01:86:70:30:34:58:92:67:09:68:
7f:17:cb:a9:2f:46:70:f9:48:4b:ae:3a:72:8c:8f:0a:19:66:
53:33:ed:5f:ed:fd:0e:59:53:89:ae:35:c9:bc:54:aa:b5:13:
0a:ec:8d:3e:7c:e3:88:c4:cf:f1:2c:b6:db:17:67:cd:7e:3b:
99:bc:cf:b8:6f:9a:24:40:ee:15:21:68:f8:ec:09:92:36:21:
e1:78:0c:d3:56:04:e4:70:a4:0e:22:ec:9f:93:16:03:37:f7:
3a:77:35:6f:38:fb:7a:02:ba:5f:fa:b5:e6:32:bb:83:8c:35:
d5:55:f9:9e:1a:05:d4:f2:d1:93:69:83:a9:38:4c:a8:8a:d4:
2e:8b:52:f9:8f:97:48:fa:d6:5c:00:00:f0:08:bf:84:4a:77:
e6:15:31:ac:d6:46:c8:b4:67:fc:02:71:57:13:37:d0:6b:f7:
4c:ba:6d:fe:68:9f:06:4a:30:ca:93:69:74:79:4f:c5:47:23:
51:5e:bd:6d:c8:7c:ce:d6:05:9f:2e:6b:04:ea:79:8a:76:91:
63:72:f1:47:db:b7:24:a3:0c:bc:ab:8d:59:27:0a:83:d1:19:
a5:81:83:0d:be:ea:78:c2:f8:a7:6c:41:bd:6f:06:ee:02:05:
45:23:52:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:47 2026 by rpki-client