
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
File: FWbBYbuz41NHqXrE1YFtjt5UIY4.mft (raw, json)
Hash identifier: 1WoVN3WJ8zB8zIvxpUz+NfTGoO1t071Pz49QWWSbVic=
Subject key identifier: D8:87:21:F7:0A:A4:65:CF:0D:8D:30:75:78:FB:C1:21:89:11:FD:2A
Authority key identifier: 15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E
Certificate issuer: /CN=A9134FAF/serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E
Certificate serial: 8E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
Manifest number: 8C
Signing time: Sun 01 Mar 2026 08:52:55 +0000
Manifest this update: Sun 01 Mar 2026 08:52:55 +0000
Manifest next update: Sun 08 Mar 2026 08:52:55 +0000
Files and hashes: 1: FWbBYbuz41NHqXrE1YFtjt5UIY4.crl (hash: l2hD9HwHQEXN+Shfnp5Qzya8vOO4xKhNAfgVQAoH/ZA=)
2: 4CB714B644AA11F0B7FB6E72C4F9AE02.roa (hash: kwHBlGIR+jm5Ej5kABIZ/iPvo1ebkMi20lOVX9QW4oI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl
rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134FAF, serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E
Validity
Not Before: Mar 1 08:52:55 2026 GMT
Not After : Mar 8 08:52:55 2026 GMT
Subject: CN=69a3fe67-2031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3a:41:cf:89:01:73:8f:57:0c:59:c1:5b:6b:
4f:93:0d:88:1f:85:3a:8c:30:93:b6:6f:41:93:30:
cb:a8:f4:f4:7c:49:7b:10:a6:62:a8:30:3a:5b:1d:
4f:b1:05:82:4f:c5:9f:64:08:a7:e9:fb:75:07:58:
15:5d:2c:e0:95:d8:27:06:31:57:99:52:bb:80:be:
74:cc:68:35:24:ce:26:16:17:20:16:ea:42:4d:f9:
88:b1:15:ac:a6:83:b2:18:be:db:5e:cd:4d:17:e7:
77:aa:fa:93:a3:c9:90:a8:70:fe:bf:83:de:c2:35:
25:23:28:23:4c:07:d4:87:94:25:c9:99:fc:4e:11:
2b:90:db:44:47:98:ea:1b:10:91:7a:36:45:53:d7:
22:1f:27:3f:b6:63:cf:55:3b:b1:d9:f8:6a:63:1e:
fc:bb:df:07:a7:96:9f:39:c8:78:9e:10:8a:75:32:
6f:9a:fe:18:b1:d2:e8:0e:8e:e5:bb:d9:93:a5:8d:
ea:c5:e0:e9:8c:24:c2:96:b2:9a:63:a0:00:37:d6:
3b:0f:db:f4:e2:d2:0f:63:88:90:bc:a7:26:80:56:
0b:19:e9:72:78:3c:75:5f:53:dc:cd:d3:7c:98:22:
19:d6:52:6c:cd:f7:93:89:6b:63:29:05:7d:93:16:
3a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:87:21:F7:0A:A4:65:CF:0D:8D:30:75:78:FB:C1:21:89:11:FD:2A
X509v3 Authority Key Identifier:
keyid:15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:b7:ee:be:f5:79:b3:23:7f:34:71:06:36:d5:01:0c:38:08:
24:ff:4b:68:45:08:a3:e0:bd:c8:99:60:28:67:2c:6d:64:58:
0d:71:92:fd:0f:75:b1:72:a6:5b:68:14:e6:22:a6:ca:de:59:
e0:27:1d:f7:c4:a8:c3:f6:52:d5:0a:7c:aa:69:61:fc:c7:41:
85:f8:f4:00:9d:6a:b2:7f:a8:47:39:b8:a9:e9:0b:5c:fe:8e:
5c:7e:26:a8:ce:71:b2:31:0b:79:bf:b5:05:25:73:0c:ce:2a:
be:8a:dc:e5:57:ce:2d:66:e8:fb:a3:c9:de:77:24:26:ee:35:
ac:f7:69:2e:13:3e:e5:83:14:d6:a1:26:11:8f:58:b4:ae:04:
71:18:a7:8f:45:57:5e:63:88:92:41:60:19:0a:b5:c9:10:bc:
39:d7:65:e2:9e:fb:56:0b:8d:6c:40:c6:33:9a:5c:83:78:9e:
b4:ee:f1:97:99:6d:d4:2b:b7:39:b9:fd:bf:08:1b:3c:27:9d:
e2:81:da:7b:56:55:b1:03:e2:81:91:4a:18:41:d0:51:90:cd:
07:df:b7:77:01:32:36:5e:86:f4:15:8f:33:60:74:ae:e0:fb:
8e:b5:5b:31:59:8d:73:08:7d:b5:3a:3b:80:98:34:34:77:94:
e3:3d:4b:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzRGQUYxMTAvBgNVBAUTKDE1NjZDMTYxQkJCM0UzNTM0N0E5N0FDNEQ1ODE2RDhF
REU1NDIxOEUwHhcNMjYwMzAxMDg1MjU1WhcNMjYwMzA4MDg1MjU1WjAYMRYwFAYD
VQQDEw02OWEzZmU2Ny0yMDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyTpBz4kBc49XDFnBW2tPkw2IH4U6jDCTtm9BkzDLqPT0fEl7EKZiqDA6Wx1P
sQWCT8WfZAin6ft1B1gVXSzgldgnBjFXmVK7gL50zGg1JM4mFhcgFupCTfmIsRWs
poOyGL7bXs1NF+d3qvqTo8mQqHD+v4PewjUlIygjTAfUh5QlyZn8ThErkNtER5jq
GxCRejZFU9ciHyc/tmPPVTux2fhqYx78u98Hp5afOch4nhCKdTJvmv4YsdLoDo7l
u9mTpY3qxeDpjCTClrKaY6AAN9Y7D9v04tIPY4iQvKcmgFYLGelyeDx1X1PczdN8
mCIZ1lJszfeTiWtjKQV9kxY6YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNiHIfcK
pGXPDY0wdXj7wSGJEf0qMB8GA1UdIwQYMBaAFBVmwWG7s+NTR6l6xNWBbY7eVCGO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEZBRi84MjQ4RTkxNDQ0
OTcxMUYwQTk3NTczNjJDNEY5QUUwMi9GV2JCWWJ1ejQxTkhxWHJFMVlGdGp0NVVJ
WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0ZXYkJZYnV6NDFOSHFYckUxWUZ0anQ1VUlZNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NEZBRi84MjQ4RTkxNDQ0OTcxMUYwQTk3NTczNjJDNEY5QUUwMi9GV2JCWWJ1ejQx
TkhxWHJFMVlGdGp0NVVJWTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYLfuvvV5syN/NHEGNtUBDDgIJP9LaEUIo+C9yJlgKGcsbWRYDXGS/Q91sXKm
W2gU5iKmyt5Z4Ccd98Sow/ZS1Qp8qmlh/MdBhfj0AJ1qsn+oRzm4qekLXP6OXH4m
qM5xsjELeb+1BSVzDM4qvorc5VfOLWbo+6PJ3nckJu41rPdpLhM+5YMU1qEmEY9Y
tK4EcRinj0VXXmOIkkFgGQq1yRC8Oddl4p77VguNbEDGM5pcg3ietO7xl5lt1Cu3
Obn9vwgbPCed4oHae1ZVsQPigZFKGEHQUZDNB9+3dwEyNl6G9BWPM2B0ruD7jrVb
MVmNcwh9tTo7gJg0NHeU4z1Ljw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:50 2026 by rpki-client