
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft
File: FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft (raw, json)
Hash identifier: B0MkObx55peqg+ikxQDmn6keC74vRx9/bEV/5WzuSTk=
Subject key identifier: C1:F4:54:15:D4:21:79:9E:C7:6F:3A:FD:26:6B:49:60:D1:FF:7F:3B
Authority key identifier: 16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5
Certificate issuer: /CN=A9187208/serialNumber=16144C8235B4519F50EDD555368118844D1711A5
Certificate serial: 0200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft
Manifest number: 01F9
Signing time: Mon 02 Mar 2026 01:58:18 +0000
Manifest this update: Mon 02 Mar 2026 01:58:17 +0000
Manifest next update: Mon 09 Mar 2026 01:58:17 +0000
Files and hashes: 1: FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl (hash: KMZ4aLs5Pq2oyR7hxvLpJHS2CkFjNEir5/tORtxgyQg=)
2: 7F5C2CFA1A1B11EEBC083487C4F9AE02.roa (hash: aUTODXmHjpUGfT0IQJUqRgH5Oj/V0H1MlRKYULxxhWU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl
rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:58:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187208, serialNumber=16144C8235B4519F50EDD555368118844D1711A5
Validity
Not Before: Mar 2 01:58:17 2026 GMT
Not After : Mar 9 01:58:17 2026 GMT
Subject: CN=69a4eeba-2a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:88:03:57:f7:8a:04:23:02:60:00:b0:89:19:
08:f4:0a:a0:1d:18:a2:03:20:10:c0:27:22:dc:e4:
6f:57:90:f0:d6:2f:0d:ce:04:77:ff:80:e3:6d:88:
15:10:87:c1:1f:84:29:03:37:80:a1:47:b5:e0:22:
fb:06:1f:c3:cb:1e:4c:c9:be:ef:82:f9:19:fa:30:
49:75:6f:1c:ba:97:72:e4:9e:a5:48:68:4b:b3:8e:
1b:35:9d:7d:0f:a0:14:28:d1:33:a4:d6:d8:b7:0c:
a2:54:bd:a8:f1:b5:11:a5:23:19:cf:28:ce:bb:20:
f1:9c:3e:8c:2f:eb:f4:88:08:ee:a0:74:77:ad:b0:
fb:23:13:20:18:23:d6:77:64:d9:58:82:56:34:84:
e1:9f:d0:ba:be:e7:31:45:c8:c9:3e:87:57:8e:c0:
ff:b4:91:ec:02:fc:1d:98:40:f7:8a:b7:ff:ea:35:
c9:ba:41:6d:21:80:da:53:87:71:9e:40:eb:35:80:
be:df:27:9d:4a:ac:65:5f:c4:a8:37:92:b3:96:ee:
30:45:5f:30:08:23:55:69:c3:78:ad:80:71:0b:8e:
ff:e1:b5:95:1d:17:a3:2c:e7:85:d7:14:04:e3:56:
5f:66:7b:24:37:73:bf:9f:87:30:f5:1e:2f:7e:f7:
62:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F4:54:15:D4:21:79:9E:C7:6F:3A:FD:26:6B:49:60:D1:FF:7F:3B
X509v3 Authority Key Identifier:
keyid:16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:87:94:33:8c:30:91:f6:07:31:be:70:9f:72:2a:2e:67:1c:
fa:03:75:ab:58:7a:6a:ad:07:c2:a0:f7:1e:95:0e:86:ea:2f:
43:d5:08:99:e1:58:6f:b4:14:40:20:42:89:44:6f:72:0e:d7:
e6:99:6e:9f:00:7f:b0:6b:8c:05:be:b1:52:e3:72:67:eb:11:
25:39:1d:f2:6e:52:d6:c9:ae:c6:12:84:56:ae:81:a8:f3:20:
6d:9b:46:ec:29:43:bc:99:c5:32:e4:27:db:46:ab:0c:e9:03:
72:19:e9:b5:6b:b9:f2:7b:90:06:03:a3:e2:15:31:2c:01:97:
ce:db:96:5e:8b:9a:c7:ac:3a:e6:5d:8d:a1:91:53:92:42:35:
45:4d:39:e6:92:2d:00:54:5e:0a:61:02:9e:ae:22:49:4a:07:
3d:95:96:38:3b:99:7d:5a:0e:d7:7a:70:2e:ea:48:15:01:02:
7b:84:cb:f1:01:3c:c4:0e:61:7f:8b:81:82:9e:67:97:a7:68:
40:16:36:d2:fa:6e:04:0f:83:b7:47:d1:10:8e:a3:60:45:6a:
43:4b:1b:17:0a:9a:a2:aa:1c:2a:77:3c:9a:94:6c:73:96:a3:
46:a5:98:72:d8:14:51:a4:83:e3:d0:d5:95:78:a4:4e:f4:c2:
96:31:39:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODcyMDgxMTAvBgNVBAUTKDE2MTQ0QzgyMzVCNDUxOUY1MEVERDU1NTM2ODExODg0
NEQxNzExQTUwHhcNMjYwMzAyMDE1ODE3WhcNMjYwMzA5MDE1ODE3WjAYMRYwFAYD
VQQDEw02OWE0ZWViYS0yYTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmIgDV/eKBCMCYACwiRkI9AqgHRiiAyAQwCci3ORvV5Dw1i8NzgR3/4DjbYgV
EIfBH4QpAzeAoUe14CL7Bh/Dyx5Myb7vgvkZ+jBJdW8cupdy5J6lSGhLs44bNZ19
D6AUKNEzpNbYtwyiVL2o8bURpSMZzyjOuyDxnD6ML+v0iAjuoHR3rbD7IxMgGCPW
d2TZWIJWNIThn9C6vucxRcjJPodXjsD/tJHsAvwdmED3irf/6jXJukFtIYDaU4dx
nkDrNYC+3yedSqxlX8SoN5Kzlu4wRV8wCCNVacN4rYBxC47/4bWVHRejLOeF1xQE
41ZfZnskN3O/n4cw9R4vfvdibwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMH0VBXU
IXmex286/SZrSWDR/387MB8GA1UdIwQYMBaAFBYUTII1tFGfUO3VVTaBGIRNFxGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzIwOC9DNkQ5NkQ5RTFB
MTcxMUVFODIwNjM2ODFDNEY5QUUwMi9GaFJNZ2pXMFVaOVE3ZFZWTm9FWWhFMFhF
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZoUk1nalcwVVo5UTdkVlZOb0VZaEUwWEVhVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzIwOC9DNkQ5NkQ5RTFBMTcxMUVFODIwNjM2ODFDNEY5QUUwMi9GaFJNZ2pXMFVa
OVE3ZFZWTm9FWWhFMFhFYVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdoeUM4wwkfYHMb5wn3IqLmcc+gN1q1h6aq0HwqD3HpUOhuovQ9UImeFYb7QU
QCBCiURvcg7X5plunwB/sGuMBb6xUuNyZ+sRJTkd8m5S1smuxhKEVq6BqPMgbZtG
7ClDvJnFMuQn20arDOkDchnptWu58nuQBgOj4hUxLAGXztuWXouax6w65l2NoZFT
kkI1RU055pItAFReCmECnq4iSUoHPZWWODuZfVoO13pwLupIFQECe4TL8QE8xA5h
f4uBgp5nl6doQBY20vpuBA+Dt0fREI6jYEVqQ0sbFwqaoqocKnc8mpRsc5ajRqWY
ctgUUaSD49DVlXikTvTCljE5+A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:46 2026 by rpki-client