
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
File: fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft (raw, json)
Hash identifier: NYgqyz0ugxszZfTl7amlSQl1NRdYw5G3JUeHZRpJUUU=
Subject key identifier: 92:CD:9F:5F:2F:F5:7D:B1:C8:F0:D6:DA:9E:DE:C4:18:7E:D4:5D:33
Authority key identifier: 7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77
Certificate issuer: /CN=A9159309/serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
Certificate serial: 94
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
Manifest number: 90
Signing time: Fri 17 Apr 2026 07:14:02 +0000
Manifest this update: Fri 17 Apr 2026 07:14:02 +0000
Manifest next update: Fri 24 Apr 2026 07:14:02 +0000
Files and hashes: 1: fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl (hash: CRJ6iT0mEhLiFUVmb3q+6blJVBAM1brcrmpMEraHNac=)
2: B32DFBA0613E11F0807A9A39C4F9AE02.roa (hash: nT8Gn6kmDh+P+vCU8iV+2GM1ote3Wc58DjS3MS+fe0c=)
3: 21C5B04263A311F096468248C4F9AE02.roa (hash: EsPSnLTOkuXRSGQKefe1p2f6RMEUDwMDeK+ind9kj7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl
rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159309, serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
Validity
Not Before: Apr 17 07:14:02 2026 GMT
Not After : Apr 24 07:14:02 2026 GMT
Subject: CN=69e1ddba-a927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:e2:d5:30:85:63:d8:c9:fc:66:cc:ab:e6:
89:73:1f:8c:c7:de:c6:4a:46:88:af:ba:d6:e9:c3:
b9:17:33:16:5f:f1:8a:c9:d5:a2:d0:e8:d4:64:dc:
79:04:f7:6c:86:11:7e:4b:45:21:a9:10:97:74:71:
1e:7d:17:ce:1f:e6:57:6b:51:c8:47:e2:14:9a:78:
dc:4f:81:95:28:eb:64:e2:1d:c4:72:f3:36:16:2c:
df:5a:18:64:02:a7:c7:71:33:06:97:ba:6d:a9:cd:
7f:52:29:5b:bf:6a:16:38:13:4e:8d:6e:2f:51:91:
d2:cd:78:8d:31:1c:2d:39:82:4f:79:0b:03:f4:be:
75:c0:e4:70:6a:de:53:74:48:7a:ae:2f:01:4e:97:
6e:c2:cb:be:e3:27:7f:6f:85:58:a2:f2:5c:8d:1b:
44:70:75:06:ba:81:59:f2:02:b4:4e:a2:20:73:e9:
90:01:cb:83:b1:36:9b:5f:ff:49:f9:e4:83:23:6e:
ea:0d:83:03:e4:b7:4a:8d:ec:83:b2:88:d3:07:30:
c1:c8:7a:cf:5c:ff:bf:c9:fe:ad:f0:2b:cf:3e:8b:
11:4c:87:fc:f2:29:e8:29:79:d0:5d:db:3f:74:58:
77:65:1b:3c:36:38:13:40:db:73:82:92:d9:96:84:
4b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CD:9F:5F:2F:F5:7D:B1:C8:F0:D6:DA:9E:DE:C4:18:7E:D4:5D:33
X509v3 Authority Key Identifier:
keyid:7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:e8:b1:3b:30:07:b9:b6:29:32:df:59:ea:0c:92:0c:98:3a:
d7:6e:a5:fa:3d:7c:56:a0:48:f5:b4:f2:e6:62:e0:d9:39:69:
54:a1:99:57:7e:f2:97:1b:3e:11:06:7e:f0:f4:fd:c5:df:54:
20:2d:fd:a6:6c:2c:74:5d:08:37:68:3d:14:85:78:91:87:ca:
af:93:74:b7:47:17:41:3f:00:53:55:90:3e:2c:80:a5:a5:75:
a7:fd:cd:88:0e:53:3c:3a:43:16:ab:91:63:36:55:42:32:a8:
cb:38:ec:dd:6e:6f:ee:ef:07:f3:39:94:c7:76:89:79:f1:a6:
aa:3d:1b:ce:d8:31:32:2d:de:2f:27:a6:f3:92:a2:28:b9:5d:
02:ab:f6:fa:68:7f:69:2e:11:64:03:f5:e6:a1:9d:bf:1f:aa:
30:1c:c0:07:76:7a:e1:21:63:78:02:6f:04:2f:82:df:bd:df:
98:e4:6c:35:ee:d9:0d:69:1f:fd:2f:58:2e:3c:b1:9d:56:bb:
f5:36:d6:4a:09:b2:d3:5c:48:a0:18:c4:b1:48:e3:c9:8b:8d:
6e:7c:a0:56:75:81:ca:82:82:a6:ea:e3:52:65:58:d8:c7:b9:
82:39:b4:9d:80:f1:e0:96:46:a0:36:b6:1f:cf:b3:50:c0:43:
c6:67:3b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:22:23 2026 by rpki-client