
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
File: _fz0IvXEZi3h5GQ6JxwEax4hxK0.mft (raw, json)
Hash identifier: QE1pKF1RvQOJsFWwMDTPUy9e5lnbUuwpE8mbuUXoYvA=
Subject key identifier: B1:C2:88:AA:C7:54:F6:2D:40:6F:32:60:3A:9B:DF:99:12:1B:4B:DC
Authority key identifier: FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD
Certificate issuer: /CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD
Certificate serial: 04C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
Manifest number: 04BF
Signing time: Mon 02 Mar 2026 00:29:06 +0000
Manifest this update: Mon 02 Mar 2026 00:29:04 +0000
Manifest next update: Mon 09 Mar 2026 00:29:04 +0000
Files and hashes: 1: _fz0IvXEZi3h5GQ6JxwEax4hxK0.crl (hash: Y/x3XTg7NDqFhD511LOHqJKKx6HX3wx9fLFzz6fhvP4=)
2: AF506F14630811EC97879243C4F9AE02.roa (hash: 957JN3cduwRqZhBkt9zySk9smfI+Ua9et4xDRT3DRKs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl
rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1222 (0x4c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125A95, serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD
Validity
Not Before: Mar 2 00:29:04 2026 GMT
Not After : Mar 9 00:29:04 2026 GMT
Subject: CN=69a4d9d1-7fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3d:38:2c:0e:42:ed:b8:4a:59:fa:54:bf:af:
18:9c:d2:99:3f:03:f5:98:c4:15:59:fa:56:98:51:
52:8e:22:2e:b0:c3:79:12:71:45:cc:46:3c:36:1a:
10:b1:8d:0d:18:d6:be:c2:78:50:00:61:8e:1c:fc:
0b:70:3f:3f:6d:cb:d0:d3:89:ed:09:de:14:f8:a3:
d3:95:05:37:6d:0a:da:1c:f6:4a:15:e2:bf:bb:f8:
58:c1:a7:40:88:76:c0:2b:1f:68:a5:fa:ff:08:83:
1b:d1:58:e3:19:4f:1b:ff:70:c8:b9:21:04:1b:87:
12:b6:b2:20:9b:71:66:90:e3:24:44:5d:dc:ac:16:
0b:5f:ec:77:32:39:1c:13:8f:f5:ac:34:6b:28:e4:
90:10:73:3e:72:fa:60:d5:cf:df:9d:1a:60:5a:0a:
eb:af:e3:b8:ce:8f:c9:c4:b7:dd:de:57:42:57:1b:
5d:10:af:ac:4e:a0:d3:d2:94:89:73:c5:a7:fd:e7:
a1:a4:87:94:a8:91:f0:41:16:40:ea:18:89:c4:56:
9c:fd:eb:2d:e2:f4:a7:de:c8:92:12:f1:09:db:22:
5e:e4:a6:17:83:13:27:cb:d8:c0:ff:fe:22:b4:c0:
aa:a3:74:fb:37:59:14:2b:45:5d:25:d2:ae:55:91:
b5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C2:88:AA:C7:54:F6:2D:40:6F:32:60:3A:9B:DF:99:12:1B:4B:DC
X509v3 Authority Key Identifier:
keyid:FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:4d:d0:cc:1c:57:c3:a8:db:4f:93:6c:be:a0:56:9f:54:86:
1b:06:c4:42:5b:ce:cc:97:5f:67:41:bd:93:1c:df:d3:53:a7:
d6:c6:74:59:1b:97:8b:94:9d:18:16:60:5e:f7:d8:50:fb:18:
5b:30:b0:41:08:6a:85:8a:e7:e7:2e:58:a7:94:27:f1:fa:3c:
06:a4:b0:b4:fc:cc:be:29:75:49:35:4f:66:d6:fc:a0:8f:53:
83:1e:87:9b:1a:ed:90:cd:1e:f7:9c:1e:e7:6c:44:ba:c1:38:
01:7a:ba:92:39:f3:55:ce:24:87:10:57:98:c4:5f:65:fd:a4:
13:a0:0b:87:86:b2:e0:15:85:a3:38:f1:f5:ca:79:38:10:dd:
95:24:91:e8:28:fc:a7:ea:b5:29:1a:5e:4f:1a:a6:2f:d4:eb:
3d:26:53:d2:ad:fa:df:eb:65:4a:3e:53:71:55:2e:b7:fe:3c:
27:27:40:a4:d7:e2:60:77:8f:4e:b2:2d:67:8b:ea:eb:cb:01:
30:5f:17:e2:e6:df:82:30:ad:fd:70:4f:5d:03:bb:3a:f1:11:
d7:72:88:87:f1:d6:6a:89:7a:41:d7:cb:d1:38:e4:c0:f5:ed:
72:5d:96:79:db:16:f3:93:36:8c:70:d3:cf:bd:1d:ce:f2:12:
d4:72:e3:1c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjVBOTUxMTAvBgNVBAUTKEZERkNGNDIyRjVDNDY2MkRFMUU0NjQzQTI3MUMwNDZC
MUUyMUM0QUQwHhcNMjYwMzAyMDAyOTA0WhcNMjYwMzA5MDAyOTA0WjAYMRYwFAYD
VQQDEw02OWE0ZDlkMS03ZmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnj04LA5C7bhKWfpUv68YnNKZPwP1mMQVWfpWmFFSjiIusMN5EnFFzEY8NhoQ
sY0NGNa+wnhQAGGOHPwLcD8/bcvQ04ntCd4U+KPTlQU3bQraHPZKFeK/u/hYwadA
iHbAKx9opfr/CIMb0VjjGU8b/3DIuSEEG4cStrIgm3FmkOMkRF3crBYLX+x3Mjkc
E4/1rDRrKOSQEHM+cvpg1c/fnRpgWgrrr+O4zo/JxLfd3ldCVxtdEK+sTqDT0pSJ
c8Wn/eehpIeUqJHwQRZA6hiJxFac/est4vSn3siSEvEJ2yJe5KYXgxMny9jA//4i
tMCqo3T7N1kUK0VdJdKuVZG1ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLHCiKrH
VPYtQG8yYDqb35kSG0vcMB8GA1UdIwQYMBaAFP389CL1xGYt4eRkOiccBGseIcSt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUE5NS9BQTYwQzhFQzYx
NzIxMUVDQTMxNzIwODZDNEY5QUUwMi9fZnowSXZYRVppM2g1R1E2Snh3RWF4NGh4
SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19mejBJdlhFWmkzaDVHUTZKeHdFYXg0aHhLMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NUE5NS9BQTYwQzhFQzYxNzIxMUVDQTMxNzIwODZDNEY5QUUwMi9fZnowSXZYRVpp
M2g1R1E2Snh3RWF4NGh4SzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaE3QzBxXw6jbT5NsvqBWn1SGGwbEQlvOzJdfZ0G9kxzf01On1sZ0WRuXi5Sd
GBZgXvfYUPsYWzCwQQhqhYrn5y5Yp5Qn8fo8BqSwtPzMvil1STVPZtb8oI9Tgx6H
mxrtkM0e95we52xEusE4AXq6kjnzVc4khxBXmMRfZf2kE6ALh4ay4BWFozjx9cp5
OBDdlSSR6Cj8p+q1KRpeTxqmL9TrPSZT0q363+tlSj5TcVUut/48JydApNfiYHeP
TrItZ4vq68sBMF8X4ubfgjCt/XBPXQO7OvER13KIh/HWaol6QdfL0TjkwPXtcl2W
edsW85M2jHDTz70dzvIS1HLjHA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:55 2026 by rpki-client