
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
File: fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft (raw, json)
Hash identifier: CdIdLZ1Rw+sDiQeg9iqKIlcz4zuAlda6IZ22R3ZlBOs=
Subject key identifier: D4:AE:42:3B:D0:3A:67:0D:D7:E3:3D:44:1A:47:D3:2E:22:27:A6:BB
Authority key identifier: 7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77
Certificate issuer: /CN=A9159309/serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
Certificate serial: 7C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
Manifest number: 78
Signing time: Sun 01 Mar 2026 09:08:14 +0000
Manifest this update: Sun 01 Mar 2026 09:08:14 +0000
Manifest next update: Sun 08 Mar 2026 09:08:14 +0000
Files and hashes: 1: fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl (hash: 5NE9fTyH2KdWJb0RnKU2CDs8g4/8pd63dYXCezVmJuQ=)
2: 21C5B04263A311F096468248C4F9AE02.roa (hash: EsPSnLTOkuXRSGQKefe1p2f6RMEUDwMDeK+ind9kj7c=)
3: B32DFBA0613E11F0807A9A39C4F9AE02.roa (hash: nT8Gn6kmDh+P+vCU8iV+2GM1ote3Wc58DjS3MS+fe0c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl
rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:08:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159309, serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
Validity
Not Before: Mar 1 09:08:14 2026 GMT
Not After : Mar 8 09:08:14 2026 GMT
Subject: CN=69a401fe-09c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e5:fd:a9:e0:dc:f4:1f:f9:10:38:97:4b:02:
b0:d4:2c:05:aa:af:26:da:10:a3:45:64:46:27:5a:
22:59:48:a1:7a:81:13:f3:8b:5d:d8:75:67:db:f0:
b1:84:60:27:2a:9c:1c:14:68:bd:25:0f:5f:45:46:
e9:ae:ae:28:e4:43:8f:10:61:6c:85:97:f5:aa:6a:
d5:3a:22:fc:d2:65:14:40:a6:ca:4a:dd:81:7a:fa:
29:2d:89:5b:b4:06:92:35:9a:d4:2c:86:4c:4f:22:
4c:56:1d:9b:01:ae:fa:5b:c0:52:36:43:ab:55:4b:
9f:71:8b:b0:e0:0b:b1:8e:44:81:86:d8:71:2e:9e:
ba:e0:6f:be:72:06:26:09:74:29:be:67:2a:2a:9f:
2a:14:c1:86:a3:86:05:fc:69:b9:b2:27:74:72:7e:
3f:b1:06:f7:1f:dc:4f:a7:50:b0:42:2f:b4:2b:58:
4d:d0:70:d5:7c:5c:56:c7:c4:84:43:e5:32:f6:37:
55:3f:9d:98:09:91:18:71:b7:fb:f9:d8:35:48:da:
18:f5:86:04:64:14:86:92:44:7d:8f:54:79:f2:cf:
dc:00:28:f2:fc:fd:e4:8b:62:d9:88:d4:ca:75:8f:
c6:9a:03:5a:dd:17:93:a2:dc:74:54:1c:ac:fc:88:
91:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AE:42:3B:D0:3A:67:0D:D7:E3:3D:44:1A:47:D3:2E:22:27:A6:BB
X509v3 Authority Key Identifier:
keyid:7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0b:f1:f7:22:67:62:c5:1e:5d:10:ef:3d:fb:cf:f0:1c:7d:
80:36:86:a3:0a:8b:58:65:7c:34:02:1b:b4:2c:29:91:2a:1f:
d5:a1:f5:af:45:c9:cf:ab:7e:05:40:09:63:cf:bf:6b:5a:7e:
c7:3e:bd:f8:2c:25:c3:bf:1c:af:22:cd:1b:be:f8:87:7c:6b:
3b:37:47:16:76:a6:bd:18:6d:4a:b5:3a:4e:68:e5:27:c0:68:
5c:ae:5b:9c:fa:30:e1:25:fd:44:de:96:db:ea:a1:f2:10:32:
ea:67:d5:38:1b:86:a3:bb:01:23:f2:7e:d0:b7:07:9b:81:9a:
f5:6c:41:4b:10:d7:28:cf:d8:ba:9f:65:f3:e7:9f:2c:b1:12:
88:f4:94:8f:0c:e5:0f:56:04:af:ce:3b:fd:ae:7f:9f:7f:21:
0f:b7:91:27:79:64:6d:db:73:af:c9:3a:10:9f:87:26:4d:1b:
32:30:1d:70:27:cf:f1:25:d5:6e:34:65:c6:e0:d7:74:ea:54:
37:6b:4a:c3:ce:95:f3:ca:e5:e1:49:20:15:56:46:a6:e8:d7:
bf:8a:70:42:d5:ae:75:e9:e7:5f:81:9e:b9:fa:44:90:e1:ea:
4b:3e:1e:02:0c:4f:8a:b1:03:e0:d1:3a:42:61:4c:ab:f2:3f:
51:3f:75:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:03:12 2026 by rpki-client