
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft
File: fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft (raw, json)
Hash identifier: hnurJNxARAYSqExv2GxRf7HdQB2lDvl2AGYniXVQEH4=
Subject key identifier: B4:37:45:47:90:EA:82:56:10:AC:8C:3F:66:21:71:29:18:4B:BF:EE
Authority key identifier: 7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01
Certificate issuer: /CN=A916892A/serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801
Certificate serial: 0194
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft
Manifest number: 018D
Signing time: Mon 21 Sep 2026 04:29:04 +0000
Manifest this update: Mon 21 Sep 2026 04:29:04 +0000
Manifest next update: Mon 28 Sep 2026 04:29:04 +0000
Files and hashes: 1: fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl (hash: Irw1vekDVVphjknkjnkniegU5W/wjGAtslKd2zQUsfY=)
2: 99DDC906ABCF11F09186B30FC4F9AE02.roa (hash: C0Cuj4295jMXddurmsuKdybi+VVlCTio/EAvQnqE+Cw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl
rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916892A, serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801
Validity
Not Before: Sep 21 04:29:04 2026 GMT
Not After : Sep 28 04:29:04 2026 GMT
Subject: CN=6ab0b290-3c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:78:45:58:17:e9:cc:95:f2:23:e5:68:fb:
d6:e8:ed:ed:98:9f:d6:61:55:5e:61:05:a2:9b:a8:
a8:9d:24:18:66:5f:09:f4:77:f7:4b:63:e4:8f:c0:
d7:88:c6:1a:e5:75:34:1b:fb:b5:1e:af:b5:14:5a:
15:6a:de:49:96:79:ff:79:06:a9:9d:c5:10:ba:7b:
72:a1:9c:8a:27:97:0f:77:16:ee:c6:bb:93:0e:50:
3c:81:44:7a:3f:1b:6d:a0:03:8c:ba:a5:d5:7c:a4:
e6:63:30:a9:3c:de:b1:5b:03:71:23:04:3b:06:23:
5b:98:67:3b:e3:56:4a:18:f2:34:8e:f7:7c:63:b6:
34:7a:97:30:1c:69:28:fb:6b:6e:86:98:6c:6b:33:
c7:ba:c5:00:6a:7e:41:1d:bf:94:be:74:0b:2a:f9:
56:a5:61:f1:34:33:15:0e:df:a9:2a:93:3a:3b:2f:
c7:9a:97:68:8c:b7:9f:bf:cf:90:b5:85:49:d4:b1:
30:45:87:c0:cd:f8:35:8e:0c:c8:22:99:e2:bf:4b:
ca:28:7c:d6:21:48:b4:69:99:d1:f4:d8:99:ec:fd:
ba:a3:11:c1:fb:9c:3c:24:cb:1b:1d:f4:b2:7c:a7:
e5:9e:05:e4:c4:b3:0a:00:87:05:96:bc:99:52:fc:
4f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:37:45:47:90:EA:82:56:10:AC:8C:3F:66:21:71:29:18:4B:BF:EE
X509v3 Authority Key Identifier:
keyid:7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:95:53:a7:3d:69:1d:5d:22:37:8b:4f:f2:ae:8b:96:64:02:
8e:f7:c1:df:76:7c:43:af:23:1c:54:cd:1b:4d:d8:de:e1:b0:
5e:89:23:c2:54:e1:de:ff:92:10:20:c8:19:cc:d4:f7:31:00:
4e:e6:03:5d:f1:ed:0a:d1:ce:53:45:75:6e:58:67:01:c5:e2:
00:2c:48:51:9b:3a:ad:80:de:96:9f:eb:d7:a2:62:6c:18:81:
0b:cb:84:d0:27:7f:74:29:b8:1a:29:8f:4f:20:94:ff:d9:8e:
d7:27:6b:49:65:94:f7:49:0f:ca:80:61:0d:1d:42:2c:1c:9a:
47:88:3f:73:0c:d8:42:43:b6:2c:4d:55:ab:4a:e1:9c:d8:05:
ca:c3:79:0f:d0:63:92:07:8c:af:e6:6a:9b:81:af:c2:3e:d0:
9a:e9:61:55:3c:c7:81:c6:a4:bd:b7:6e:9f:da:13:78:c8:f6:
72:75:ca:2f:96:f7:8d:3f:cb:1b:fc:58:5f:92:ee:24:20:26:
9b:ce:9f:fc:7e:7e:a2:0c:7f:30:17:d2:f5:7d:17:f8:7f:f5:
58:c1:29:14:65:97:08:d5:f4:43:b2:ed:99:35:ba:8e:d5:58:
cc:d0:34:3f:35:dd:6d:c7:7b:29:d2:5b:c6:37:0c:b7:4d:5a:
ab:e6:65:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:36:08 2026 by rpki-client