
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
File: _fz0IvXEZi3h5GQ6JxwEax4hxK0.mft (raw, json)
Hash identifier: ZTfAHOuSQhUeRBxkEn4JQSKuODtzP9m6+B9edbxwO74=
Subject key identifier: 8B:F0:97:66:96:A8:95:ED:DF:2E:9B:1B:01:A5:0A:6B:D1:BD:D6:F4
Authority key identifier: FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD
Certificate issuer: /CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD
Certificate serial: 0511
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
Manifest number: 050A
Signing time: Mon 27 Jul 2026 00:39:19 +0000
Manifest this update: Mon 27 Jul 2026 00:39:19 +0000
Manifest next update: Mon 03 Aug 2026 00:39:19 +0000
Files and hashes: 1: _fz0IvXEZi3h5GQ6JxwEax4hxK0.crl (hash: XGbVLco4UYToO25r6HBBtx1cC1Ja8gH6REUlmna/gfo=)
2: AF506F14630811EC97879243C4F9AE02.roa (hash: 957JN3cduwRqZhBkt9zySk9smfI+Ua9et4xDRT3DRKs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl
rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:39:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1297 (0x511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125A95, serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD
Validity
Not Before: Jul 27 00:39:19 2026 GMT
Not After : Aug 3 00:39:19 2026 GMT
Subject: CN=6a66a8b7-a080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:c7:e3:68:02:f1:73:f1:fc:16:ef:75:6e:
84:b0:6c:98:57:a3:fb:4a:3b:cc:d0:f5:85:95:e2:
e7:07:a7:c2:dd:60:91:81:e7:83:e5:c8:d3:11:47:
95:62:bb:ea:3d:3b:05:06:8b:6a:08:70:f0:a1:f2:
75:16:ec:4f:d6:69:4c:d6:fc:80:41:20:19:ac:ca:
62:36:f6:cc:33:b1:02:bc:d0:1d:2c:93:43:10:6e:
6a:58:6a:74:cd:1f:b4:73:f7:a3:60:60:ec:74:21:
79:e2:7a:55:0f:b6:1d:d9:f2:97:4d:e2:96:00:89:
d9:31:56:0e:cc:29:64:93:ca:bd:16:14:26:04:10:
46:36:74:5b:af:66:d7:97:df:a7:e1:1c:9f:3b:36:
95:5c:f9:9f:4c:82:85:c6:47:f8:96:15:b6:2f:9e:
d8:7f:9d:14:e2:d9:3b:2f:15:b5:d9:80:51:a1:70:
e8:34:81:19:bc:73:9d:25:dc:05:09:09:8a:95:fc:
b3:87:ae:76:2f:bb:78:e7:b9:99:4b:73:b2:92:d7:
ac:41:77:1d:92:b7:d0:48:55:cc:1d:2a:f5:aa:cb:
ba:85:97:26:05:3c:46:0a:71:d9:74:db:5b:d2:2e:
90:60:82:26:d2:15:e1:a6:19:ff:60:80:0c:0b:8e:
ea:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F0:97:66:96:A8:95:ED:DF:2E:9B:1B:01:A5:0A:6B:D1:BD:D6:F4
X509v3 Authority Key Identifier:
keyid:FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:75:37:b4:8d:c8:83:0f:d1:b7:cf:a4:f3:2e:38:2b:e5:8c:
f1:1a:86:8d:68:58:20:4c:ed:80:2c:b8:30:da:a1:7e:59:b8:
b9:a3:b3:1b:80:50:5a:d1:ab:7c:03:2f:df:d9:20:7d:8f:8c:
a7:ae:15:4d:d9:30:c9:29:66:59:85:04:0a:42:60:14:44:69:
13:b4:45:b4:64:41:70:00:16:61:0f:56:14:c3:11:89:db:47:
2a:d3:43:6a:39:f6:27:d5:0e:4f:9b:5a:1d:b3:bb:fd:2c:5b:
2c:18:d8:f6:a0:7b:59:c3:09:61:f4:a7:38:93:0a:5e:56:63:
d2:db:fa:c9:b2:c6:93:12:64:9c:b3:c3:ce:5a:6a:7d:3f:b6:
f8:48:0d:c9:27:8e:fd:02:76:d9:d6:27:ec:3c:ab:e7:46:d5:
ca:9f:7e:3e:d6:ae:78:75:2e:d7:14:41:71:b4:dd:d2:44:ac:
9e:97:00:cf:69:69:23:11:00:fd:2e:d6:84:d6:47:fc:44:3a:
90:0f:74:7e:cb:13:f0:d6:3f:02:05:ba:df:e0:49:e1:f9:e0:
e5:97:e2:26:89:03:3b:65:89:8f:dd:40:39:54:02:15:36:45:
47:c6:fc:a0:92:f0:6a:0e:a2:36:8d:01:b6:59:0b:c6:41:d9:
9b:55:df:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:29:58 2026 by rpki-client