
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
File: fCqWpakDTN8qeG9kvfJ_2KxRySs.mft (raw, json)
Hash identifier: kmPkLNEp4QfktLbEAhwEAz3zkBJITDqufLYfQZ90gUc=
Subject key identifier: 0B:B5:68:CF:85:9F:C7:8C:35:8A:87:A3:A1:35:82:74:9F:30:0D:D2
Authority key identifier: 7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B
Certificate issuer: /CN=A9125E89/serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B
Certificate serial: 06EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
Manifest number: 06E6
Signing time: Tue 22 Sep 2026 21:57:03 +0000
Manifest this update: Tue 22 Sep 2026 21:57:02 +0000
Manifest next update: Tue 29 Sep 2026 21:57:02 +0000
Files and hashes: 1: fCqWpakDTN8qeG9kvfJ_2KxRySs.crl (hash: AmGwavqul55nwZjUO3DF/iTnBgSa3Vy+I+FQzIQx8HY=)
2: 12CC9D1857A711EDB284106DC4F9AE02.roa (hash: PVY3AdF3t/zgwOcDG/tezq9/ZDvImqiyQp2ssrrrcwc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl
rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1775 (0x6ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125E89, serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B
Validity
Not Before: Sep 22 21:57:02 2026 GMT
Not After : Sep 29 21:57:02 2026 GMT
Subject: CN=6ab2f9ae-2ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:68:fa:46:8e:a1:6d:c7:7a:dd:d7:57:6b:
b0:6c:17:f3:6e:3d:ed:ab:a6:d4:b4:56:73:58:fc:
24:98:57:d0:d5:3a:64:dc:e5:31:ff:ce:05:6b:00:
21:e1:92:14:b1:dc:38:75:9e:4d:b6:f8:a7:07:f0:
7d:f1:d8:c3:6e:d3:b9:ab:b2:e8:0f:ab:91:3a:96:
65:27:ca:71:1c:f9:98:77:75:1b:57:67:92:33:47:
2a:d9:97:ad:41:24:5b:2c:2e:d5:33:45:fa:e7:95:
82:7b:9d:65:53:b2:e5:f3:13:ad:27:fd:55:a7:86:
24:6d:29:b9:70:ee:e0:3a:d0:c5:a8:ec:a8:1d:6b:
a2:d2:f8:f4:21:8c:10:c0:89:a1:e7:ce:d4:d8:04:
29:b6:9d:24:a4:90:33:7e:4a:c9:d2:66:b2:42:0d:
fc:70:33:96:d7:5c:e6:cb:29:ff:50:35:22:7a:ea:
e5:83:68:fc:b7:3e:6b:76:57:e7:6e:2f:5b:d2:97:
9d:78:e6:fc:63:4b:ec:01:8b:2f:03:b5:92:38:eb:
16:4f:11:18:30:6c:c1:90:40:fb:fd:64:e0:fb:f6:
68:3b:89:73:10:91:cc:a5:5b:13:0c:f9:63:57:96:
8c:79:32:37:5c:47:f4:a7:10:3a:86:56:61:8e:63:
55:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B5:68:CF:85:9F:C7:8C:35:8A:87:A3:A1:35:82:74:9F:30:0D:D2
X509v3 Authority Key Identifier:
keyid:7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c0:24:a9:61:0d:71:f3:ff:5f:27:b6:77:6c:b6:ed:80:1c:
37:55:bd:a0:d8:fe:1b:3e:1a:ab:33:a0:44:b6:15:2b:58:d9:
22:75:84:ba:f6:35:22:8c:f7:92:9f:20:cb:1a:af:95:21:e1:
c9:c4:12:9e:80:0c:1d:1e:b1:e3:5f:a1:93:f7:86:3f:82:a5:
a8:a5:af:ea:e1:8f:8b:be:fc:7c:f3:38:6e:08:b7:6c:2c:71:
1b:10:ce:cd:96:d1:59:b6:4d:23:ad:af:e1:62:13:bf:9a:96:
a3:9f:b1:d1:a7:cf:cc:bf:92:ea:41:c3:92:30:09:cc:81:33:
1c:0f:17:a1:3d:53:05:eb:a9:6a:f4:54:aa:3d:0e:9b:fa:73:
3a:3f:16:2e:b2:7b:9f:24:31:3e:6e:2f:c2:d5:8a:d2:13:f7:
a6:47:a5:db:ab:f5:48:20:69:42:8b:e6:f4:c3:f3:df:4a:3e:
ca:81:6f:5a:d7:26:be:34:95:cc:8a:95:c3:77:d9:62:48:30:
9d:38:0c:09:40:72:b6:ec:f4:32:06:7b:1b:d9:08:c5:5a:f8:
a3:4e:d6:9a:d0:1c:7a:0b:75:3f:9d:0d:69:6b:d9:b4:37:39:
f3:ca:ab:68:05:cd:89:da:10:c3:9b:30:bb:f6:15:30:34:2c:
89:5e:10:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:38:54 2026 by rpki-client