
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft
File: FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft (raw, json)
Hash identifier: 5wZdrCLoKqM0LbmO5QrBxA784jnLC/sXaI30POBGbiY=
Subject key identifier: 56:DB:3B:87:CF:DC:C4:A5:AE:10:3C:18:6A:6B:7A:08:D2:9E:82:F9
Authority key identifier: 16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57
Certificate issuer: /CN=A9188F77/serialNumber=16315A68A745080BDDB6C8F0156D043068931B57
Certificate serial: 01E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft
Manifest number: 01CF
Signing time: Thu 05 Nov 2026 04:36:59 +0000
Manifest this update: Thu 05 Nov 2026 04:36:59 +0000
Manifest next update: Thu 12 Nov 2026 04:36:59 +0000
Files and hashes: 1: FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl (hash: apbWZrvTfj3MfaQPJL+2IvT1j0HDbDa4HFJB76snYHY=)
2: 1501E24625F511EF8F342F3EC4F9AE02.roa (hash: ezZJRYxLK6j3OTpYQ1JWUPNDJf7+Fv6xmBdkXwcseTQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl
rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 04:36:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 482 (0x1e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188F77, serialNumber=16315A68A745080BDDB6C8F0156D043068931B57
Validity
Not Before: Nov 5 04:36:59 2026 GMT
Not After : Nov 12 04:36:59 2026 GMT
Subject: CN=6aec07eb-f9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5b:c5:3e:06:d9:21:99:47:2b:c4:aa:78:fe:
71:6e:3d:c3:f4:3d:34:8f:3f:5c:4d:37:58:10:f9:
75:10:77:7a:69:e9:d7:40:97:b4:e7:2b:a4:0b:9c:
55:bd:72:8b:42:14:d9:1d:6c:80:fd:46:81:70:e7:
b4:cf:47:b7:a9:46:dc:e2:a9:98:fc:f7:24:82:f5:
79:c9:9d:9e:44:f2:42:24:30:07:75:8b:67:6f:63:
fd:e6:a1:68:fa:5d:41:9c:68:51:2f:8e:07:45:1e:
33:c5:a1:b8:d8:ce:30:c7:5d:13:60:17:ff:0c:a4:
eb:bd:2f:5e:48:fc:5f:da:5a:57:57:33:7f:dc:c5:
d9:a9:81:de:aa:fc:90:4f:ee:6f:90:5e:66:ba:1e:
23:45:4d:f4:f7:0e:6d:ca:1d:0a:35:2f:89:11:d7:
80:21:e1:23:bf:d1:a1:11:b4:1a:b9:f3:59:40:ea:
cf:92:d7:e7:2f:45:0e:80:62:87:b1:52:cd:3d:7b:
52:9b:91:36:67:5e:a2:0f:28:3a:d7:05:9c:01:07:
da:01:47:12:84:57:0b:a6:da:31:cd:9d:1a:e7:45:
ad:3a:dc:f0:b8:f1:af:26:0e:6c:28:40:dd:58:33:
37:96:6a:52:4d:15:b8:4c:37:ec:61:84:80:f4:a4:
10:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DB:3B:87:CF:DC:C4:A5:AE:10:3C:18:6A:6B:7A:08:D2:9E:82:F9
X509v3 Authority Key Identifier:
keyid:16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:3e:87:44:4d:58:58:23:fa:f3:59:12:8c:26:ac:7b:6c:c2:
16:e2:2b:93:f0:69:ad:cc:2c:ff:f1:5d:f1:1d:14:8c:7d:5d:
8f:aa:13:a2:c7:ed:4e:22:4a:8a:a5:66:43:bc:89:28:d1:3e:
71:ec:bb:fe:c1:82:56:bc:24:4f:0c:cc:3e:d9:90:dc:16:05:
a3:0b:5f:ee:bd:7a:04:09:0b:6f:bc:01:dc:b4:98:56:41:5b:
0f:9c:85:87:b3:e2:0a:d3:3a:4f:4b:1c:de:43:8d:52:f2:07:
2c:a7:94:7c:ef:7f:53:9a:32:36:d9:32:ac:67:e6:b5:9f:2c:
18:f7:43:e2:21:f5:ea:d7:81:50:03:e8:43:63:e4:a4:14:f0:
64:54:81:b3:41:22:6c:d3:98:49:96:90:3f:0e:3f:09:a1:ac:
73:a1:13:e8:5d:c5:a1:c2:de:d8:e9:7d:27:7b:4a:ab:d5:80:
38:3a:ab:71:de:df:cf:ae:e5:2a:31:9b:da:c4:da:89:32:70:
8b:40:a9:de:82:2b:78:01:a2:8a:55:53:80:bb:96:27:73:f4:
c1:00:45:f8:18:36:7d:ed:32:f1:2e:28:72:7d:70:ec:ce:ba:
8b:0a:3a:f2:ff:47:6c:2f:ab:59:20:48:fd:45:e3:8c:eb:06:
73:6e:69:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:29:19 2026 by rpki-client