
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
File: FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json)
Hash identifier: RHA86c5Q6yHiBcAizo3EvdaSSdiEwXF07VVLLdU+0Z8=
Subject key identifier: B2:B3:7E:70:3C:F9:18:30:29:BD:7B:D3:C7:1E:EB:32:F0:98:2C:31
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial: 0624
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
Manifest number: 05DF
Signing time: Thu 16 Apr 2026 23:06:06 +0000
Manifest this update: Thu 16 Apr 2026 23:06:05 +0000
Manifest next update: Thu 23 Apr 2026 23:06:05 +0000
Files and hashes: 1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: a0hT6NqYCu5DpQwnjA6kObE+ECKjdyk7i3pjt40Ew2c=)
2: B589332C498611EF90B46962C4F9AE02.roa (hash: qQDURXc4miq6wSpyJJAXvi86X+8AWTAJoPUGTUH+F/w=)
3: F6DBFB92B3F311F0929DA35BC4F9AE02.roa (hash: bGSs+GuQ8roH3KjNYjFOeAuN1jZZUS7buyDDBU1Jy+0=)
4: 48811D22EBB411F0A3585372626F56BC.roa (hash: cW9BhUWSf1eWBWfw/7wY1Z34c7OQiu9inYmolk+51Jc=)
5: 9DF3BC14E48011F0AC3D40BC426F56BC.roa (hash: 34Y8hUwkkH6eRmIMWTovUQbEQ5leyxSbVRWa0szDZH0=)
6: 06E8BCB4B3F411F0874AC55BC4F9AE02.roa (hash: HMO8+hILpX40jIXBPLdsHDVWASlEOQyWg25odthKBWQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1572 (0x624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Validity
Not Before: Apr 16 23:06:05 2026 GMT
Not After : Apr 23 23:06:05 2026 GMT
Subject: CN=69e16b5e-9ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:48:b0:81:ba:f2:0a:fe:36:9d:a3:f4:c2:54:
c2:43:ac:56:e3:1e:60:fc:8a:86:da:2f:d9:c8:0a:
d5:98:e0:60:25:55:cf:fc:a4:55:cf:62:b8:f8:71:
e2:c3:73:6f:b0:48:dc:3a:c7:e0:e8:92:e0:53:cb:
f6:b3:e2:59:5f:f5:4d:5c:2d:15:ec:68:db:de:13:
a7:08:da:c7:ae:1b:bb:67:e8:47:20:6b:49:ca:39:
b1:eb:04:28:d8:58:e2:21:19:f9:81:a4:8c:aa:5e:
5f:ff:ec:26:81:1e:b6:39:d3:00:fe:01:85:4d:d2:
32:75:e5:5e:32:1f:40:f3:21:74:cb:59:8f:fe:de:
ee:c2:e3:a9:7d:ae:6a:ab:cc:e8:cf:59:92:56:c9:
87:5f:db:79:1b:e7:38:3a:55:c6:58:b9:ca:21:e4:
40:47:69:43:66:fb:a8:5e:bc:b4:69:c2:ea:8a:1f:
c6:82:e4:d6:90:79:5d:25:1b:5f:bd:50:ef:11:95:
55:c4:97:21:6a:56:3a:e6:17:b8:9b:b3:4b:56:e0:
b4:81:09:f2:c9:67:a7:f9:fa:94:b4:45:80:86:34:
3a:73:35:d9:89:1e:93:56:f5:4a:ad:de:d3:64:3d:
35:a7:23:35:87:ca:f6:9c:0a:80:e8:52:d7:21:81:
17:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B3:7E:70:3C:F9:18:30:29:BD:7B:D3:C7:1E:EB:32:F0:98:2C:31
X509v3 Authority Key Identifier:
keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:d0:d3:4a:9d:44:c4:70:0d:9f:b9:61:12:1b:ef:22:d5:3d:
89:f5:1f:63:6e:76:f9:96:a9:6f:31:e3:6b:9b:31:80:7d:82:
16:b1:e8:90:0f:9c:6f:79:0c:f7:65:83:07:68:30:6a:28:92:
31:ef:96:97:90:ca:8d:b5:30:ed:79:14:8a:f6:9c:cc:76:9f:
30:48:2a:2c:d5:d7:d8:c4:bf:85:0e:8c:64:dd:66:7a:30:6b:
88:ea:55:5c:73:53:e9:15:5c:b0:f4:4d:ab:b0:fc:ca:d8:3c:
69:30:89:56:5b:67:10:9a:ec:bc:3a:77:9b:b8:7d:aa:3b:95:
5c:44:f6:ce:dd:cd:a6:52:a9:5b:cf:0f:e4:54:1e:62:d3:9a:
c5:3b:7c:a6:b1:9c:1d:d0:ce:ec:93:04:8f:c1:30:2f:c5:76:
50:2e:9e:89:7a:cd:cd:bd:a3:e9:9d:99:4a:f4:bf:d2:fa:aa:
4a:53:3f:73:79:0b:b9:09:41:eb:0a:85:ce:c2:2e:19:4b:40:
19:51:5e:2b:8e:e7:e2:54:37:44:aa:1f:8f:32:da:36:ae:c4:
71:86:62:85:02:5a:d3:34:83:8d:0e:c4:4e:6c:60:4a:26:12:
94:b1:04:fb:8f:8a:35:e3:7b:5a:48:03:2e:77:37:01:52:d7:
28:45:dc:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0
NERCMjZFOTEwHhcNMjYwNDE2MjMwNjA1WhcNMjYwNDIzMjMwNjA1WjAYMRYwFAYD
VQQDEw02OWUxNmI1ZS05YWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwkiwgbryCv42naP0wlTCQ6xW4x5g/IqG2i/ZyArVmOBgJVXP/KRVz2K4+HHi
w3NvsEjcOsfg6JLgU8v2s+JZX/VNXC0V7Gjb3hOnCNrHrhu7Z+hHIGtJyjmx6wQo
2FjiIRn5gaSMql5f/+wmgR62OdMA/gGFTdIydeVeMh9A8yF0y1mP/t7uwuOpfa5q
q8zoz1mSVsmHX9t5G+c4OlXGWLnKIeRAR2lDZvuoXry0acLqih/GguTWkHldJRtf
vVDvEZVVxJchalY65he4m7NLVuC0gQnyyWen+fqUtEWAhjQ6czXZiR6TVvVKrd7T
ZD01pyM1h8r2nAqA6FLXIYEXLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLKzfnA8
+RgwKb1708ce6zLwmCwxMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx
NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli
cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEJGQS8wNEEyNEMzNDExNDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJi
S1VnNXZKZ1ZaVlpFMnlicEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGdDTSp1ExHANn7lhEhvvItU9ifUfY252+ZapbzHja5sxgH2CFrHokA+cb3kM
92WDB2gwaiiSMe+Wl5DKjbUw7XkUivaczHafMEgqLNXX2MS/hQ6MZN1mejBriOpV
XHNT6RVcsPRNq7D8ytg8aTCJVltnEJrsvDp3m7h9qjuVXET2zt3NplKpW88P5FQe
YtOaxTt8prGcHdDO7JMEj8EwL8V2UC6eiXrNzb2j6Z2ZSvS/0vqqSlM/c3kLuQlB
6wqFzsIuGUtAGVFeK47n4lQ3RKofjzLaNq7EcYZihQJa0zSDjQ7ETmxgSiYSlLEE
+4+KNeN7WkgDLnc3AVLXKEXcyA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:47:14 2026 by rpki-client