
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
File: FWbBYbuz41NHqXrE1YFtjt5UIY4.mft (raw, json)
Hash identifier: 1rae2XqeSOqual8CV/1eSZuRE9IKmN0k1u3n66KS/lc=
Subject key identifier: 61:11:44:F2:8C:84:26:8E:01:FF:96:22:DA:D9:59:29:B3:EA:4D:0C
Authority key identifier: 15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E
Certificate issuer: /CN=A9134FAF/serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E
Certificate serial: A8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
Manifest number: A5
Signing time: Fri 17 Apr 2026 06:59:56 +0000
Manifest this update: Fri 17 Apr 2026 06:59:56 +0000
Manifest next update: Fri 24 Apr 2026 06:59:56 +0000
Files and hashes: 1: FWbBYbuz41NHqXrE1YFtjt5UIY4.crl (hash: T0jStwGiOfZos1eVZjSe253BHgpajVHZUDhoypg0ZVI=)
2: 4CB714B644AA11F0B7FB6E72C4F9AE02.roa (hash: Kpi2lExwMtUBB90ubhO2BgOMUMkDluldZJCK6di+564=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl
rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134FAF, serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E
Validity
Not Before: Apr 17 06:59:56 2026 GMT
Not After : Apr 24 06:59:56 2026 GMT
Subject: CN=69e1da6c-e108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:7f:3a:5d:6a:56:ba:e8:ac:a2:a5:fd:cf:
4f:6e:25:73:86:9a:27:7d:b9:e6:be:e7:04:b4:31:
b1:ec:c5:d7:6e:7c:a1:b2:7a:a0:b1:29:69:cd:e9:
02:c7:5a:19:3e:42:b9:be:22:78:97:82:47:50:de:
e0:38:3e:48:fc:bb:21:3d:bc:64:48:79:37:b3:40:
00:e0:a3:a9:e0:6f:7e:32:5c:b7:f5:bd:5c:a8:66:
3e:7f:0e:dd:50:f7:d4:3b:1b:a5:fc:fb:2a:3b:16:
e1:fb:1a:6e:95:e1:0f:86:64:23:d7:1a:67:10:b0:
2f:d4:be:52:e9:e6:33:14:6c:1f:84:3f:6d:24:28:
ae:3c:61:2a:e6:fb:02:99:6a:cb:60:aa:39:4c:a9:
c2:56:16:20:7e:43:51:40:34:81:62:e1:ed:18:ab:
6b:e0:9c:6b:3c:cd:7e:f5:33:0e:5f:af:a6:1b:1a:
0e:8f:91:31:d4:7b:14:72:1e:cc:c5:48:a2:5e:1f:
6a:f6:76:3b:d3:86:61:1b:d5:49:7e:35:25:0f:c8:
00:6c:f3:33:bc:df:f8:05:25:19:9d:c0:af:f0:e8:
2a:45:5e:d0:5c:85:34:47:80:bf:e5:25:3d:01:73:
c9:43:18:69:f3:14:32:af:62:ae:59:12:5b:ca:93:
6d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:11:44:F2:8C:84:26:8E:01:FF:96:22:DA:D9:59:29:B3:EA:4D:0C
X509v3 Authority Key Identifier:
keyid:15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:03:35:45:ac:bf:50:a2:46:28:fd:5d:3e:4b:3d:72:3e:d1:
0c:21:88:93:74:9e:84:a0:b3:68:ec:80:01:cb:39:97:ab:1c:
27:3b:d2:6f:4a:f3:76:08:b9:90:fe:c8:9c:d1:fe:7f:fb:d6:
2b:0b:87:76:75:58:12:b4:51:0a:7e:06:27:52:0f:5c:51:bf:
56:47:04:5f:29:24:cb:09:88:ae:12:c5:e3:5a:e8:55:9c:4f:
1a:2d:ae:9a:71:df:3a:2a:a9:da:45:01:ca:ea:92:56:c6:ba:
73:2b:99:18:4a:fb:2c:dd:74:b3:87:59:91:19:eb:e0:7f:6b:
a4:de:f3:7a:bd:59:3f:d3:5f:ac:bb:bc:78:78:21:b5:05:73:
3f:21:d5:10:ad:e9:53:b0:24:3f:82:30:10:00:08:5b:8d:81:
57:af:8f:b9:28:13:e0:b7:9c:6d:4c:cf:69:3c:b4:47:ce:a4:
f6:6a:13:67:d1:af:e2:5c:f8:0a:6d:c3:fe:ed:a3:4a:89:9c:
a8:35:4a:c7:26:67:84:c0:db:f2:39:44:22:a7:be:1c:36:51:
d5:d8:da:13:87:f3:61:18:67:ff:5c:73:10:d3:4b:23:47:bd:
cf:79:09:69:3d:12:dc:21:7d:2c:be:e9:af:ff:b9:4f:95:e8:
b5:63:09:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:01:50 2026 by rpki-client