
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
File: fHxDqtDIa183jl18MzKgXeRhJ1A.mft (raw, json)
Hash identifier: q4pUppph1IjArevCXxPsiL9ief6xfO959o3CaDr/8Sw=
Subject key identifier: 9D:FC:B8:C4:D9:05:A8:83:00:A7:F3:5C:9E:2B:76:F0:A4:D7:85:D0
Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50
Certificate issuer: /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
Certificate serial: 088C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
Manifest number: 0859
Signing time: Mon 02 Mar 2026 00:54:41 +0000
Manifest this update: Mon 02 Mar 2026 00:54:39 +0000
Manifest next update: Mon 09 Mar 2026 00:54:39 +0000
Files and hashes: 1: fHxDqtDIa183jl18MzKgXeRhJ1A.crl (hash: 3hTGlg5WA3AI7OPHuyvMSInWsWhletv2EqoTlV0y9kw=)
2: E897EA5A3EE411ED905A3415C4F9AE02.roa (hash: jcbGwSlzULf5rLkfD8fUMWUcZGOa/WoZyUzS4RvfPc8=)
3: 5035F194413211EDAAFCC96EC4F9AE02.roa (hash: Np5X7labqLR6uVR9D5aWdfLBPLfJXIHETsW1UGxarNQ=)
4: E7EBC9003EE411ED905A3415C4F9AE02.roa (hash: Xwcag2EhQTRwm0D7NvbX8HrCG5pxxZTCPAIFSZUKDeg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl
rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:54:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2188 (0x88c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CA50, serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
Validity
Not Before: Mar 2 00:54:39 2026 GMT
Not After : Mar 9 00:54:39 2026 GMT
Subject: CN=69a4dfd1-91ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cc:e1:c5:0e:d3:0a:b9:de:56:80:f8:b5:c7:
9e:2d:d6:1e:d8:66:f9:c3:e3:22:7b:b0:79:09:3b:
7e:f5:3c:dd:c1:7d:92:9a:f5:06:68:9b:78:8c:42:
95:17:07:99:4e:07:66:74:6f:d8:1d:79:9d:b5:c1:
a5:52:94:c5:29:5e:ef:a7:ce:d2:97:2c:e1:17:6e:
f0:58:0e:b2:4a:32:e3:6c:fe:98:57:65:15:54:4b:
be:b4:ff:9e:03:0d:8f:2d:7a:6f:8d:36:bf:22:42:
2c:de:88:12:56:cb:e4:c4:61:a6:8b:ed:21:02:c3:
14:d2:e8:df:c4:66:b3:a6:2a:3d:a3:7f:a6:c5:43:
67:fe:00:50:91:cc:06:86:42:80:e8:ef:a9:35:1f:
ad:bd:05:0c:e5:b3:90:8f:32:9b:9b:85:59:15:0c:
b2:44:d0:61:b2:a0:91:35:2e:6e:5e:9a:ba:43:85:
83:6e:2d:fe:48:42:12:f4:e7:b6:47:0f:7e:e2:9d:
cb:82:b3:9d:ad:21:77:5c:e2:7f:fa:6c:2b:71:2f:
95:83:3c:03:ac:46:9d:00:91:ac:11:48:e4:70:ec:
a6:3c:e1:a8:2f:7e:bc:9a:f3:35:a4:4f:31:f4:cc:
2d:20:df:81:ca:e2:e9:6b:e9:6a:03:ca:c8:e7:24:
a8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FC:B8:C4:D9:05:A8:83:00:A7:F3:5C:9E:2B:76:F0:A4:D7:85:D0
X509v3 Authority Key Identifier:
keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bd:17:ed:4d:d0:c5:44:aa:ff:64:d8:53:d6:12:23:a7:ac:
b4:fa:dc:39:94:bc:35:ab:2c:84:55:72:5c:2d:79:a9:c5:a8:
1b:96:9d:2f:ce:02:5b:04:00:a9:36:f8:aa:cf:20:b3:53:4f:
f9:ab:26:99:b9:28:e9:7e:4b:50:62:0f:22:1e:87:b2:0e:54:
92:39:09:54:03:1a:b8:ea:09:80:a2:ca:a0:ec:5d:c3:d5:fe:
66:cb:3e:ea:b7:65:6a:74:a0:77:e8:01:48:93:58:fb:59:b8:
7f:1d:91:a6:4e:9a:4d:45:85:b0:37:d7:02:2b:26:70:33:87:
a3:77:cb:c6:35:b9:02:63:07:86:8e:5d:c9:8e:2a:f0:b1:24:
f4:cc:16:a4:ae:f1:42:14:2d:94:a5:b2:2b:f1:f7:72:2b:89:
15:3b:fc:4b:bd:7c:3b:b2:c2:92:5c:f4:8f:49:0e:f5:e7:c5:
d2:53:d5:da:0b:cc:7d:11:30:de:1a:d4:46:c0:41:b9:55:f5:
d5:2c:8d:b4:f6:da:73:e3:2a:f9:5d:c8:01:6b:8f:7b:ec:82:
93:b0:0c:61:5f:75:84:55:fe:e7:26:33:14:5a:5e:25:03:8d:
ee:65:af:d4:ec:30:13:58:0c:0d:b4:e4:55:e9:af:f1:d2:4f:
f7:15:35:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:50 2026 by rpki-client