
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
File: _fz0IvXEZi3h5GQ6JxwEax4hxK0.mft (raw, json)
Hash identifier: j4E18z6ARtD/9OZUTEvujm6f2PBEe7LP6Hd5At2oDng=
Subject key identifier: DA:07:46:72:34:7A:68:29:BB:4E:D3:A5:C0:31:91:8C:6D:8A:8E:04
Authority key identifier: FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD
Certificate issuer: /CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD
Certificate serial: 0534
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
Manifest number: 052D
Signing time: Fri 02 Oct 2026 23:51:33 +0000
Manifest this update: Fri 02 Oct 2026 23:51:33 +0000
Manifest next update: Fri 09 Oct 2026 23:51:33 +0000
Files and hashes: 1: _fz0IvXEZi3h5GQ6JxwEax4hxK0.crl (hash: UHp0u5mlGqtcxmHO/X6b7pfUPT5PJ0rBBBYt5C8uLRI=)
2: AF506F14630811EC97879243C4F9AE02.roa (hash: 957JN3cduwRqZhBkt9zySk9smfI+Ua9et4xDRT3DRKs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl
rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 23:51:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1332 (0x534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125A95, serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD
Validity
Not Before: Oct 2 23:51:33 2026 GMT
Not After : Oct 9 23:51:33 2026 GMT
Subject: CN=6ac04385-2571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b8:86:ea:1a:55:4f:e9:17:34:80:2b:f5:93:
34:9b:ee:13:f8:f9:43:da:c6:97:48:bc:8d:14:8b:
18:e2:c1:22:42:08:b6:94:22:d7:3e:05:d2:db:d4:
b9:40:8f:42:36:90:7f:d1:7f:8b:6e:64:c6:cb:e1:
57:4e:df:b4:21:3c:2d:57:de:44:23:de:45:25:a5:
4a:34:45:63:90:31:fe:18:ec:e6:85:7b:da:20:3c:
55:91:cc:80:c3:13:3b:50:85:f0:b6:e8:32:71:a4:
40:03:f2:ee:b2:a4:30:3a:c3:81:79:a1:c8:9a:73:
e9:59:81:54:cd:83:ce:b6:b8:da:32:d7:7a:2e:e6:
31:9a:b0:43:e6:23:7d:23:74:83:6f:b9:f0:5a:82:
77:83:88:97:5e:04:fa:a1:ae:6e:be:e1:4e:70:68:
7a:c9:01:82:fa:a8:68:37:b5:8b:1c:cd:75:28:8e:
45:9e:30:22:7a:bc:62:d0:93:82:72:25:7c:f2:ac:
2d:90:6b:cf:a1:eb:ec:35:99:a5:7c:4b:1d:03:d3:
63:9c:f7:a3:97:09:e7:e9:53:92:fd:99:ae:d6:f5:
44:38:26:e6:0e:67:e2:f7:79:2e:55:2c:dc:6c:d2:
32:df:19:60:bf:35:be:cc:08:9b:10:28:89:80:a5:
85:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:07:46:72:34:7A:68:29:BB:4E:D3:A5:C0:31:91:8C:6D:8A:8E:04
X509v3 Authority Key Identifier:
keyid:FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8d:17:13:eb:35:7d:8c:c4:26:24:31:70:fc:24:d7:58:e5:
92:fb:e7:ae:61:1b:66:6a:8b:b0:1d:3f:48:ca:63:a3:89:ea:
45:be:20:8c:5e:3f:a0:89:ca:d1:d4:86:f3:9a:97:46:6d:3e:
08:88:61:e2:fc:7a:af:1e:54:c7:72:46:4e:d3:af:28:71:26:
2a:71:93:e9:21:de:1c:e2:d4:89:3c:92:aa:29:61:9d:23:ed:
e2:dc:db:a7:4d:e6:79:cf:b3:5a:25:2c:03:e9:77:c2:d0:12:
7a:f6:0d:af:c1:81:b0:48:5d:1e:6e:ef:91:8a:c2:47:60:be:
b6:5d:b1:18:cb:29:42:91:f4:fe:50:40:86:d0:bf:03:30:eb:
f2:60:9d:c0:6e:8e:fb:92:6a:39:a2:3f:b2:48:d7:39:3a:ed:
08:0a:39:7b:b8:a3:9e:e1:db:4e:71:6f:d9:40:65:53:b2:85:
3a:8c:63:8a:5b:16:03:22:98:c0:ea:ab:1f:0a:9a:4b:15:1a:
29:a8:b1:48:fe:9f:78:9d:02:02:2a:92:2b:14:6f:30:88:f3:
d0:6c:f3:ed:39:f4:95:4e:57:d2:8a:de:73:2c:6d:14:2b:40:
99:8e:4f:7e:1a:3e:40:39:a9:f8:9b:b5:9d:2a:31:ff:ae:da:
fc:53:a3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:21:21 2026 by rpki-client