
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft
File: fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft (raw, json)
Hash identifier: PdG3GVJ69jNhaNydsKJs/ISTnpD9hPi+5qK7t5M1RF0=
Subject key identifier: 5B:3D:41:81:09:F8:DD:1A:4B:0B:11:14:CF:01:6F:1A:F1:5F:4F:8B
Authority key identifier: 7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97
Certificate issuer: /CN=A9187E80/serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597
Certificate serial: 06DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft
Manifest number: 06CA
Signing time: Thu 16 Apr 2026 22:13:47 +0000
Manifest this update: Thu 16 Apr 2026 22:13:47 +0000
Manifest next update: Thu 23 Apr 2026 22:13:47 +0000
Files and hashes: 1: fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl (hash: hRIYUialqrOCSU1EsMqomCBnoUBMSHV8IP/7GhaEV88=)
2: 1B120B6E563B11EE9C93E334C4F9AE02.roa (hash: zx3SfNrsBStmAGKK4PT2fic35nMh12b91cF9VkyjT2E=)
3: 9F68F54067EF11F09584C157C4F9AE02.roa (hash: UzDPn/plAnRycbk9Qz1NVyr/2jrEf/+GzQ2KgWJxmuQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl
rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1757 (0x6dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187E80, serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597
Validity
Not Before: Apr 16 22:13:47 2026 GMT
Not After : Apr 23 22:13:47 2026 GMT
Subject: CN=69e15f1b-2504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ff:76:14:ea:e7:cc:5a:75:dd:22:f9:d8:63:
89:ab:cb:ce:17:0f:ff:e5:5e:6f:dd:8d:11:6a:94:
c3:79:8f:4f:ec:51:c4:5b:54:2f:f4:52:12:c2:55:
5d:da:24:fd:2b:c5:bf:db:e5:44:4f:b5:02:58:55:
11:11:66:cb:f1:c5:67:68:49:b4:0c:1a:f8:41:b9:
8e:53:55:d0:92:1d:d0:f1:ab:0a:bb:33:f1:a3:da:
5e:c7:e4:0c:10:c3:b7:b3:eb:85:1d:90:ff:8b:9b:
45:73:89:ed:cd:01:a1:42:06:19:4f:6f:01:e7:5b:
55:ed:92:97:1f:54:e5:fa:1f:c3:e7:be:06:43:9d:
a6:8b:9c:54:44:e7:55:e6:db:9c:86:18:54:22:c4:
fc:00:44:f5:54:e6:2c:d8:fb:b5:31:55:89:1c:34:
5d:55:89:0e:3c:89:76:83:97:c1:0c:59:68:88:d2:
39:07:c5:f1:49:01:46:87:30:da:2b:ce:23:7e:77:
5b:e5:a1:f6:08:87:a1:40:ac:fa:37:59:85:4a:b6:
cf:fd:f2:7f:5a:d4:33:85:2d:c1:b2:6e:95:95:e1:
51:65:f6:3c:a8:3e:f9:e3:82:64:23:5a:16:48:17:
8b:84:04:c1:e2:bc:86:9c:1c:84:ef:07:d4:8a:e0:
a9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3D:41:81:09:F8:DD:1A:4B:0B:11:14:CF:01:6F:1A:F1:5F:4F:8B
X509v3 Authority Key Identifier:
keyid:7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:5b:1e:6d:f1:53:5e:65:75:70:99:9a:6b:32:74:3a:3f:57:
87:d6:8a:de:b0:f3:8e:88:7a:ee:ad:5e:00:e5:2a:f7:5f:38:
ed:f6:b6:e8:1f:df:98:aa:17:5f:18:f7:af:1b:d8:ac:d3:7f:
5f:dd:21:39:dd:45:03:9d:d3:b2:92:8c:f3:b9:4e:c4:f2:98:
42:24:7e:fe:61:6f:e6:f3:3a:a8:9c:56:ab:e7:2e:41:fa:58:
76:34:59:cb:b2:b4:6d:db:66:9c:df:5f:77:33:39:ad:f0:43:
d6:45:d5:f8:07:e9:12:d6:2e:4a:75:dc:3f:75:a9:ce:6b:c6:
d3:8f:55:56:aa:d7:21:49:4d:f9:47:f0:9f:52:27:cc:b0:e8:
86:8d:cb:8a:2f:6c:20:8a:af:48:9f:65:d4:18:a8:6f:4f:c2:
03:77:fe:b1:17:a6:3a:10:14:df:bd:69:21:1b:f5:d8:b9:73:
9f:de:b3:8c:6c:09:9e:54:75:e2:21:1c:1b:bd:18:77:ef:83:
e5:85:60:91:07:aa:4e:7f:7b:8e:95:50:1b:bf:b7:8e:0a:1b:
a3:56:51:b7:92:35:51:c8:83:09:0d:41:e3:df:cf:47:d2:ec:
75:5e:b0:fe:d9:87:dc:40:ea:a7:5f:ee:fd:80:4d:27:68:a6:
af:d5:88:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:07 2026 by rpki-client