
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
File: Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft (raw, json)
Hash identifier: 4FB0UmSz4F9iox0DU4GD6w+8P1KthsCGiWSqD5MzI/U=
Subject key identifier: D7:AE:AB:41:A1:03:5D:2C:3D:79:04:EC:85:38:C1:E8:AC:D8:37:40
Authority key identifier: 17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C
Certificate issuer: /CN=A9186363/serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C
Certificate serial: EC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
Manifest number: EA
Signing time: Sun 01 Mar 2026 07:31:31 +0000
Manifest this update: Sun 01 Mar 2026 07:31:31 +0000
Manifest next update: Sun 08 Mar 2026 07:31:31 +0000
Files and hashes: 1: Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl (hash: dgdwnWoF1zN1XvovZwH1K09p6MhxF731e1cXtcO2kAc=)
2: 0FFCC5E8AFAE11EFAC818674C4F9AE02.roa (hash: 3iz7wj1YXwc+8ZUE8ZccL2zY0SUrahR9tPAyGcy55nk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl
rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186363, serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C
Validity
Not Before: Mar 1 07:31:31 2026 GMT
Not After : Mar 8 07:31:31 2026 GMT
Subject: CN=69a3eb53-d665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:73:02:c0:1b:93:ea:a4:62:1c:00:79:b2:
1e:ab:87:25:1d:e1:90:32:5f:6b:53:c4:5a:f2:04:
1e:3e:ad:37:8e:1c:c2:e3:39:13:ac:f9:5d:df:36:
ef:57:2f:7b:84:63:af:08:12:b6:3f:a4:72:2e:f6:
7c:99:fe:03:49:b3:2c:5a:67:76:c8:8f:35:1a:65:
aa:0d:79:38:42:ba:ad:5e:57:7a:32:9c:dd:96:14:
ef:69:bb:7f:2f:5b:be:27:11:d5:e4:52:59:3d:b0:
d7:51:40:7f:3b:8c:79:af:40:1b:ac:56:cd:a7:d1:
93:38:7f:ab:33:c0:cf:e7:56:25:98:cb:ef:89:cc:
7c:c6:81:80:0c:04:b6:c3:8f:e3:b8:bc:dd:ea:6a:
4b:e9:6c:32:f2:92:d5:e6:87:60:82:0e:87:23:d0:
43:ae:0e:e8:fe:0c:29:35:6b:bf:92:42:b5:fe:2f:
86:c3:81:04:b4:7b:22:d8:1c:30:3a:3f:82:b2:a9:
9c:47:22:a1:20:55:7e:e2:94:b6:4d:9e:17:45:d0:
9c:d9:3b:bc:2f:4d:93:ea:f2:c3:07:39:df:0e:fe:
04:f5:30:66:ff:db:88:3b:93:3c:95:e9:6b:93:e7:
14:dd:0b:dc:08:a0:5b:7f:a6:0e:e3:12:2c:01:32:
93:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AE:AB:41:A1:03:5D:2C:3D:79:04:EC:85:38:C1:E8:AC:D8:37:40
X509v3 Authority Key Identifier:
keyid:17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:5f:25:f8:06:e1:e3:f1:a7:7b:f1:cd:2d:b7:bc:d7:40:72:
7f:3d:46:a1:3d:7b:b6:58:e1:da:4f:9c:da:70:a9:1b:f0:bd:
b5:48:11:e1:61:54:97:5c:f7:98:dc:0b:64:70:c8:03:2e:a4:
c9:cd:6a:90:df:a7:b3:0b:8b:fc:46:91:77:d1:c4:22:12:52:
cc:7e:a0:db:17:88:82:38:b5:8f:35:29:eb:01:9b:6f:65:3d:
f2:6e:04:52:3d:90:6b:21:73:66:8e:82:ba:e3:75:cf:f3:16:
99:b5:d7:6b:f1:08:e0:05:ac:e2:ff:e3:8e:ac:27:ca:d1:14:
6b:72:d0:b7:9d:c5:01:8b:18:fe:c6:07:2b:e5:04:b1:22:24:
49:cf:3e:77:cb:81:56:94:c2:3f:35:6c:97:5f:c3:2e:af:cb:
10:63:56:58:c8:30:99:c2:83:b4:10:3e:89:24:ff:e4:4a:fd:
cc:cf:ee:60:7c:cd:22:dc:c8:38:81:88:42:26:ef:8c:4c:12:
4d:f0:e4:ad:03:ff:bb:e6:f0:ad:81:e5:40:7c:2c:5f:cb:3e:
0d:9f:3e:eb:45:01:89:9e:3c:50:93:b0:fa:32:2e:ee:df:f2:
35:d1:be:ca:03:4e:4c:41:d7:ab:50:bf:00:a8:af:ba:06:c4:
3d:3a:44:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:25 2026 by rpki-client