
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
File: FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft (raw, json)
Hash identifier: 7xkti10A+4qlWRccoKgop0DJxKzgklxrJ4Og8lV+gcU=
Subject key identifier: B2:70:ED:C6:57:8B:37:33:51:9C:F8:5A:66:52:DF:C5:71:66:D4:44
Authority key identifier: 14:20:F8:07:09:DD:D3:DF:C3:F5:11:56:55:03:CE:F4:44:4B:ED:C3
Certificate issuer: /CN=A914F5BA/serialNumber=1420F80709DDD3DFC3F511565503CEF4444BEDC3
Certificate serial: 0994
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
Manifest number: 098C
Signing time: Thu 16 Apr 2026 19:55:58 +0000
Manifest this update: Thu 16 Apr 2026 19:55:58 +0000
Manifest next update: Thu 23 Apr 2026 19:55:58 +0000
Files and hashes: 1: FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl (hash: BVkYotRWUCC2e/GZm2QbgaowiXTbr3KPO3zlkBnc+6M=)
2: E9E80356AD6211EABEDF046AC4F9AE02.roa (hash: oL+E2occgF2Rh0xxZmLpozavtSN8h7g27TX6pQxOEn0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl
rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:55:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2452 (0x994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F5BA, serialNumber=1420F80709DDD3DFC3F511565503CEF4444BEDC3
Validity
Not Before: Apr 16 19:55:58 2026 GMT
Not After : Apr 23 19:55:58 2026 GMT
Subject: CN=69e13ece-4ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0d:43:07:0b:eb:f2:95:08:ce:62:1f:ab:75:
74:bb:61:ea:0e:c3:d9:09:23:81:2f:42:37:e9:a0:
58:83:af:a4:24:c2:2b:4f:93:0b:42:d1:85:bb:e3:
07:13:4c:26:de:b4:74:f0:32:0c:38:e1:52:bc:63:
f4:61:2a:f1:7c:4a:5e:17:82:25:ee:b4:93:28:5e:
1d:f5:80:e3:91:12:38:06:f9:fb:8e:e9:58:3f:80:
0e:4c:70:32:3b:be:de:30:8c:9b:34:0e:de:71:60:
a1:46:28:4f:ae:1e:07:90:16:40:16:97:9f:c2:cf:
e6:49:9f:56:05:1a:93:cb:43:44:6a:6e:a2:4e:3b:
8a:7c:4c:93:6c:4b:2f:33:22:83:e9:4a:9f:d0:88:
46:fe:66:fe:88:24:e4:86:13:fc:17:42:ae:e0:f5:
65:1e:f0:b5:ba:59:9d:5f:33:a8:7a:d8:33:cc:dd:
e3:1d:b8:9e:0c:f9:a0:23:f5:21:f9:96:d8:ef:21:
59:9c:f6:05:06:1b:0e:db:37:bc:34:9d:2e:5d:c6:
7b:4b:17:02:c5:5a:98:84:fc:d0:86:18:3a:52:84:
23:86:77:b5:88:fd:8a:a1:45:30:76:58:30:f7:59:
47:79:76:69:00:5b:69:05:82:af:30:f6:f1:f4:08:
21:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:70:ED:C6:57:8B:37:33:51:9C:F8:5A:66:52:DF:C5:71:66:D4:44
X509v3 Authority Key Identifier:
keyid:14:20:F8:07:09:DD:D3:DF:C3:F5:11:56:55:03:CE:F4:44:4B:ED:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:5b:99:2f:a6:77:c3:20:b6:75:28:fe:9f:40:a1:07:70:1e:
14:0d:70:d1:37:f4:32:0b:12:a7:4e:83:8a:33:9a:fa:10:f1:
c0:e4:3c:d0:5b:49:48:c9:25:b4:08:08:5d:7b:23:12:b6:f8:
2e:de:ac:c8:cc:5c:29:55:80:70:6c:78:5f:91:bb:93:5d:45:
11:4f:91:4e:fc:24:be:63:65:fa:a5:69:4d:59:06:86:0c:c2:
32:de:b0:6f:98:36:ae:5b:f7:bd:09:df:c7:80:56:4d:7b:01:
a8:d3:5a:a9:7e:33:f8:4c:f7:f0:37:41:a3:ac:e9:94:11:0b:
51:d2:50:2c:1d:33:3e:ea:cd:2c:21:14:e4:f9:8f:4c:3f:e7:
29:10:24:57:79:a2:a9:31:fe:80:c3:d5:00:1a:f6:4c:b7:d9:
2e:8d:0e:f5:d0:cf:08:8f:19:d5:fc:f4:14:03:be:d5:f4:d7:
88:86:a6:0c:af:25:e6:1a:08:3b:e4:f5:e9:e1:28:80:06:c1:
7f:92:34:55:d3:4f:3a:9c:6a:82:4a:8d:d7:6a:df:40:b2:9c:
f6:1a:2c:78:d4:62:0f:23:ea:4c:30:71:59:7e:9e:65:75:3c:
ed:a3:ec:05:2c:32:6c:2e:40:4e:60:c7:c7:17:6b:5d:75:71:
8d:38:2c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:37 2026 by rpki-client