
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
File: FWbBYbuz41NHqXrE1YFtjt5UIY4.mft (raw, json)
Hash identifier: KH4XcOkdEvXdfBmIFNfGRzZptUeSrx1HvQca1HGOT/k=
Subject key identifier: E3:51:F5:DA:FB:D7:FC:15:8E:93:20:76:B2:8F:7F:D8:7B:4D:9C:E8
Authority key identifier: 15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E
Certificate issuer: /CN=A9134FAF/serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
Manifest number: DA
Signing time: Wed 29 Jul 2026 08:05:03 +0000
Manifest this update: Wed 29 Jul 2026 08:05:02 +0000
Manifest next update: Wed 05 Aug 2026 08:05:02 +0000
Files and hashes: 1: FWbBYbuz41NHqXrE1YFtjt5UIY4.crl (hash: iBfQ7yVi+nnla1j/3nt/d17RfpY+EeqUOY29gRWg1+M=)
2: 4CB714B644AA11F0B7FB6E72C4F9AE02.roa (hash: CDDizrxHdCVQBvWNHH5kJ+Klq5BvJObvDJfzp1lpWpE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl
rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 08:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134FAF, serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E
Validity
Not Before: Jul 29 08:05:02 2026 GMT
Not After : Aug 5 08:05:02 2026 GMT
Subject: CN=6a69b42f-6d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:73:d3:d5:b9:31:9b:cb:b0:ee:fb:d4:fd:
90:44:39:60:09:8c:8b:4e:c5:ab:b5:2e:73:b9:b4:
34:47:8f:5f:c0:64:12:8b:92:9c:d7:e6:0f:15:6f:
ab:92:64:7c:13:d8:dd:24:86:29:52:3b:7b:02:39:
5f:90:88:aa:e1:4d:ca:9c:6e:8d:06:46:14:0b:c5:
f2:da:f0:39:44:78:d7:02:0b:97:10:0c:b8:92:de:
6c:42:e1:fb:91:c9:73:7b:fa:e2:2e:c3:f1:7d:a9:
d0:2e:00:14:6a:80:97:a2:6f:03:28:c7:91:1c:50:
54:b0:74:64:a5:e7:ad:20:34:3b:60:af:61:4c:39:
57:64:f8:e2:30:ed:c9:63:89:fd:82:63:fb:dd:03:
01:94:17:dc:4f:b6:2c:d4:b6:f6:d9:92:07:54:89:
d6:80:16:03:96:c9:5a:c8:dc:08:3a:ce:6e:52:ed:
98:5b:4a:b8:05:8d:be:69:77:3e:a2:41:10:eb:d0:
59:d9:bc:8b:bb:3f:5a:1f:41:0e:22:5a:02:d0:15:
0e:25:dd:68:e3:59:59:05:4e:80:10:64:39:51:e1:
f0:75:73:a3:17:af:bc:21:69:b6:7d:b9:75:79:5b:
f2:70:36:a6:f1:f2:bf:fb:7d:bc:34:67:18:a6:15:
8b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:51:F5:DA:FB:D7:FC:15:8E:93:20:76:B2:8F:7F:D8:7B:4D:9C:E8
X509v3 Authority Key Identifier:
keyid:15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:ae:ec:e2:43:cb:28:a9:21:58:12:71:1b:fc:0a:2f:11:c2:
55:c8:c6:8e:e3:38:c0:db:75:23:c4:2a:14:66:82:77:f6:e5:
4b:76:d8:14:29:4f:2d:89:c2:84:7c:36:70:0d:03:dd:f5:e7:
76:8d:0e:e2:35:eb:68:1e:44:be:15:94:61:3a:c3:4f:c3:0b:
26:2d:a4:bf:77:3f:34:83:5f:18:0e:af:1b:15:3a:c1:1e:af:
60:ee:70:0a:e7:f0:27:10:72:c4:f9:6b:3f:81:97:27:25:64:
fc:ed:03:c8:b2:49:67:bb:74:6f:1c:d2:66:7d:6b:69:b4:35:
7b:4a:98:6d:7f:b6:5f:2b:91:4a:e6:75:23:24:45:73:ea:f2:
19:78:05:2c:ea:a2:e8:18:56:49:81:a6:93:14:a2:5a:e6:ff:
2b:b0:b2:d6:9c:3d:11:b6:7a:0f:b5:19:b0:1e:05:36:82:e1:
64:84:e7:9e:26:94:01:89:1c:99:b8:b4:e6:bd:b8:d9:99:96:
61:74:44:6c:ba:db:0d:28:3f:59:6c:53:5b:e0:a5:8a:fb:c3:
c8:71:78:b5:c0:5f:c3:c6:65:33:45:30:6d:f5:38:5c:42:07:
18:b5:7a:7d:9b:25:6d:0a:da:a4:a4:a8:8c:58:94:6f:bb:39:
67:0c:b9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:47:01 2026 by rpki-client