
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
File: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft (raw, json)
Hash identifier: mEZBxE9iK6W03CIl6IbqwU1FRxcL1u+4fWbctUyP8Qo=
Subject key identifier: A1:C2:96:D5:16:DF:25:60:73:37:00:DA:F7:26:B4:A8:79:91:72:DE
Authority key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4
Certificate issuer: /CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4
Certificate serial: 0625
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
Manifest number: 0615
Signing time: Mon 02 Mar 2026 02:24:30 +0000
Manifest this update: Mon 02 Mar 2026 02:24:27 +0000
Manifest next update: Mon 09 Mar 2026 02:24:27 +0000
Files and hashes: 1: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl (hash: 6raEogly36vFSs0HqVTm79Co+XE0XJnvM5F0W1rqVjk=)
2: AB532852B38911ED825BDC70C4F9AE02.roa (hash: RCoE8bQ2xQx3+6AG70lWii6WPBaMur94b8A3cmNzGaY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl
rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:24:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1573 (0x625)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189BB3, serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4
Validity
Not Before: Mar 2 02:24:27 2026 GMT
Not After : Mar 9 02:24:27 2026 GMT
Subject: CN=69a4f4de-1028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:c5:ac:c2:8a:73:55:81:32:fa:54:96:dc:
08:73:7b:8e:4f:ab:68:41:e9:52:61:71:26:3a:2b:
aa:e9:14:74:a1:5f:02:99:56:3f:ec:6f:a0:15:47:
c3:6e:43:00:da:86:00:1a:1d:c9:ae:e2:e0:12:5a:
e5:ec:a6:8f:ef:1c:bf:7f:e4:c7:5c:03:c1:51:46:
83:f7:d2:96:df:51:ee:a9:5e:81:f2:dd:e8:f0:2f:
ad:98:b4:1c:e8:0b:0f:f0:b6:4d:e8:2c:10:2a:fa:
8a:b7:04:0d:01:55:67:4a:fa:e9:62:9a:69:69:f7:
84:1a:59:de:28:0d:27:42:90:fb:98:ee:3a:e2:35:
b3:4b:63:2b:35:e0:aa:1a:dc:4e:f8:ea:79:8d:d8:
6e:ce:52:d7:34:53:7c:51:f5:cf:cc:0a:da:22:09:
0a:c9:67:64:b2:e2:a2:56:fc:72:d5:a5:08:d6:5d:
ee:f3:3c:57:00:6e:b1:36:1b:1d:d8:9b:0f:6c:ec:
98:fd:7b:42:92:37:73:db:59:f1:47:f6:25:2f:78:
17:07:ba:46:2c:23:e1:2f:17:7b:01:36:11:96:ec:
f2:c2:8b:7a:70:97:5b:66:61:0d:9e:b1:fb:bd:ad:
55:e6:33:97:e5:31:9b:41:be:32:08:44:50:af:1c:
08:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C2:96:D5:16:DF:25:60:73:37:00:DA:F7:26:B4:A8:79:91:72:DE
X509v3 Authority Key Identifier:
keyid:15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:a8:48:de:62:9d:33:3e:b5:54:e3:50:e6:17:de:dd:7a:61:
a4:23:46:76:b9:2b:83:db:f7:3e:de:2f:70:38:8c:56:4d:98:
f6:f1:19:3b:c2:02:7f:95:fd:5f:f8:89:50:3a:85:aa:d0:1a:
e9:62:a0:de:b6:47:19:87:0e:23:b4:70:54:95:e6:67:79:53:
af:ce:58:97:a9:f1:f6:a6:57:10:b1:cc:ac:e7:46:25:21:6d:
ff:37:34:bd:eb:09:b5:90:b0:d9:40:b3:f8:84:0b:49:61:c2:
ef:ce:24:a5:34:4d:71:4d:24:17:30:12:39:65:28:54:40:a5:
e8:58:83:af:9d:d6:51:35:4d:79:a7:cf:c0:ff:99:47:0b:2d:
0c:52:bc:3d:f7:bc:51:c6:a9:30:11:07:7f:d4:a9:41:d5:0e:
5f:04:ab:08:d1:c0:25:04:91:e8:8e:bc:12:3e:d6:97:f1:d5:
b9:bf:95:6e:97:3a:18:92:41:31:0f:43:3f:25:10:51:ad:81:
13:62:05:a0:c0:13:46:4d:2f:06:1d:a0:7b:5c:b8:24:23:79:
3d:f3:66:66:a8:d9:6b:0b:4f:ea:22:ef:32:38:19:9c:ba:a4:
3f:2b:0a:4f:98:33:91:64:21:b8:6c:a2:bf:55:95:d1:43:a0:
ee:5c:ff:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:46:39 2026 by rpki-client