
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
File: FyftFR9AiSEOw-Nopaae45SE4-Y.mft (raw, json)
Hash identifier: ja6bh1sT7/fkF10jMTDSvnSGAUSBRODlZwUZgiB1xwc=
Subject key identifier: 38:BB:81:D1:6A:E7:62:1D:B7:37:94:CC:08:BE:FC:3C:F5:41:F5:02
Authority key identifier: 17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6
Certificate issuer: /CN=A9145B5E/serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6
Certificate serial: 0134
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
Manifest number: 0131
Signing time: Sun 01 Mar 2026 06:33:16 +0000
Manifest this update: Sun 01 Mar 2026 06:33:15 +0000
Manifest next update: Sun 08 Mar 2026 06:33:15 +0000
Files and hashes: 1: FyftFR9AiSEOw-Nopaae45SE4-Y.crl (hash: n+0KxDa/zREKT7cmTEforuOuwU4osqM424x3BXfVUFM=)
2: F149E6BE45B611EFA10B0632C4F9AE02.roa (hash: SJSF6bp4Sfgvd7KWP8Saa4swgZFZdELO48DaToBOjAY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl
rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:33:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145B5E, serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6
Validity
Not Before: Mar 1 06:33:15 2026 GMT
Not After : Mar 8 06:33:15 2026 GMT
Subject: CN=69a3ddac-48ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0d:22:bd:69:57:7b:2a:3b:ba:9a:73:0b:f3:
c5:2c:88:7a:ff:7e:18:fc:e8:67:b5:41:3a:60:4a:
0c:d1:f1:76:bc:27:e1:5e:48:6f:0a:f6:ec:ef:3f:
d5:7e:a5:d0:c1:10:10:a7:04:cd:71:01:b5:c7:44:
ca:18:46:83:02:7a:51:a2:f5:85:58:1d:f7:f7:47:
aa:27:92:db:02:9b:4a:8d:92:d0:20:23:41:74:1c:
31:ec:33:c8:4c:c1:cb:a4:73:be:09:91:d9:5b:ad:
c6:35:d0:c3:45:f4:d7:73:55:30:f4:e7:d5:18:09:
3d:46:cc:71:32:d0:b6:d5:28:73:bd:e5:51:47:a3:
5c:7e:49:63:d1:8e:9e:95:9f:cb:f2:6e:ae:a3:a0:
d4:b6:e1:94:08:2e:8f:74:15:18:1c:f0:bc:58:38:
89:2f:18:03:26:cc:89:58:08:f2:b1:c4:5f:2c:ee:
fe:fa:4e:c4:cd:68:38:fd:29:b1:2c:c8:5b:41:ac:
16:55:09:e3:77:a7:d0:bc:91:21:12:51:a2:80:34:
2f:b2:6f:b4:20:fc:34:72:de:35:8d:61:b2:1a:52:
88:48:e8:ad:7d:64:ef:61:1d:fe:8d:0b:64:33:11:
e7:e3:8e:4d:c9:a4:78:44:76:2d:08:cd:be:28:d2:
31:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BB:81:D1:6A:E7:62:1D:B7:37:94:CC:08:BE:FC:3C:F5:41:F5:02
X509v3 Authority Key Identifier:
keyid:17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:dd:dc:1e:de:b7:e6:e7:63:48:3f:68:5d:a3:2e:be:20:e1:
ef:58:a9:ff:1b:9b:d0:fd:fa:2e:c8:1e:61:db:50:a8:5a:47:
90:b6:0d:22:02:37:d0:2e:ac:96:44:94:5d:33:39:4c:8e:b9:
ca:4b:1a:60:d3:cf:66:af:8c:00:17:a0:69:1d:0e:8d:be:77:
d3:64:88:cf:6a:28:2a:6d:f4:c0:c7:c8:3e:e8:f0:a8:e2:1b:
62:d1:d5:92:26:0a:ed:e9:b3:9b:be:ce:bf:96:97:62:a8:a5:
ad:f5:9b:57:27:b5:2f:8f:54:21:8c:7a:99:3f:37:64:49:e6:
df:91:1c:d7:08:1b:a2:ff:b4:01:67:67:91:b4:18:d9:e9:59:
59:84:cf:8f:75:03:f5:74:82:56:f1:bb:31:04:3f:99:57:e6:
e2:99:74:95:03:0f:f9:67:58:97:50:6c:cc:25:7a:d5:09:4e:
d6:ca:7e:a3:ae:fa:c1:06:dd:cb:60:9e:c8:92:bd:21:5a:4a:
a2:47:c4:a2:1e:63:f6:d0:bd:97:f5:c0:59:00:76:be:1d:41:
a4:06:73:e2:99:7f:d9:3c:48:92:8c:29:d4:b7:59:06:84:f1:
dd:2b:33:7d:ee:dc:f0:bd:2c:85:7d:61:ff:fb:44:3e:66:e7:
7a:6a:d3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:18 2026 by rpki-client