
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
File: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft (raw, json)
Hash identifier: SCohETLUeYEiQLczwzdUXzYWdj4Cpi9ToMiGWDP7Md8=
Subject key identifier: F2:97:B4:74:07:59:9E:46:2B:A4:85:58:13:1E:D4:58:C0:EB:9A:E2
Authority key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4
Certificate issuer: /CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4
Certificate serial: 063D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
Manifest number: 062D
Signing time: Thu 16 Apr 2026 22:44:56 +0000
Manifest this update: Thu 16 Apr 2026 22:44:56 +0000
Manifest next update: Thu 23 Apr 2026 22:44:56 +0000
Files and hashes: 1: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl (hash: YJXAUcGOSkvwFOeNYFs9/9SGKCHtC08B6oMhrGxvIn8=)
2: AB532852B38911ED825BDC70C4F9AE02.roa (hash: RCoE8bQ2xQx3+6AG70lWii6WPBaMur94b8A3cmNzGaY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl
rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:44:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1597 (0x63d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189BB3, serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4
Validity
Not Before: Apr 16 22:44:56 2026 GMT
Not After : Apr 23 22:44:56 2026 GMT
Subject: CN=69e16668-0d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c4:28:44:18:4b:41:ed:0f:44:86:08:fa:a1:
af:58:eb:47:44:db:ab:fb:2a:20:7f:b9:ef:0b:db:
59:cf:9e:47:50:19:53:00:0e:f8:1d:1e:19:0c:fd:
91:26:e4:47:01:82:3d:d9:d0:d5:b1:78:1d:ea:1e:
a9:e5:12:8b:b6:e9:f1:1c:95:9e:49:75:76:bc:42:
d4:12:2b:dd:bd:e1:23:21:3e:ca:92:a6:45:43:a1:
7e:a5:c8:c6:ff:5e:8c:a6:2e:89:b9:45:43:17:fe:
d8:48:fd:0d:ba:91:91:48:8f:40:a6:67:d2:58:5f:
bb:90:02:5a:08:cc:0c:21:5f:22:34:3a:95:1b:50:
08:5f:dd:5e:89:cc:11:13:a9:34:8e:6d:0d:b9:ff:
db:6e:c2:32:ba:e1:ea:b0:db:6a:8f:ea:3d:31:a1:
c2:fc:47:02:6c:02:56:bc:83:e4:60:7c:f2:26:a9:
b6:8b:9d:89:54:5b:29:d5:e2:66:58:a6:49:c3:e2:
f4:c1:3b:b6:cc:24:0b:39:1a:cb:18:0a:7a:82:66:
ef:89:a6:91:ac:64:8d:ba:1d:55:00:c4:5c:24:57:
ac:f4:ab:0a:60:eb:65:e7:f0:19:51:eb:e5:29:7e:
d4:b6:9f:94:33:7a:3b:ee:0f:97:e5:aa:92:bb:dc:
bd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:97:B4:74:07:59:9E:46:2B:A4:85:58:13:1E:D4:58:C0:EB:9A:E2
X509v3 Authority Key Identifier:
keyid:15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:04:8d:0b:e4:e4:2a:fa:2f:11:bc:83:6f:15:06:00:2d:3c:
57:14:89:42:c3:c9:93:c2:ec:71:a8:62:52:4e:b9:aa:58:38:
f3:3c:83:38:e6:55:e9:8c:60:b1:50:84:d1:81:f3:18:92:da:
93:13:f6:f5:88:2c:9a:e0:ca:14:e8:a2:c1:b0:91:bc:8b:b3:
42:c9:7d:5b:69:90:bb:b4:38:a3:ad:75:e6:8c:8e:8a:04:97:
9d:d4:ed:d2:00:74:54:0f:38:b2:34:68:87:1b:2c:7e:42:90:
57:85:44:a9:2c:81:62:e7:b3:c9:75:d7:c4:f0:10:c2:b8:e4:
01:36:88:6f:52:7e:a3:f0:34:25:49:9b:60:89:6d:17:fb:49:
29:3c:2c:3c:1f:fc:a3:5e:4c:1c:fd:9c:f9:8c:4b:00:fd:fd:
49:b1:74:e2:bb:da:d2:f9:cf:02:b1:bd:85:99:c4:53:bb:36:
f3:78:7e:df:9f:dc:73:b2:39:bb:f5:2b:c7:4f:d7:0f:1e:92:
86:5a:fb:4b:cd:bd:c6:f1:eb:1a:59:75:fb:5d:6f:15:e1:95:
8b:61:67:43:b1:a6:4f:dc:56:73:53:85:c7:d5:40:7c:a6:dd:
a4:0c:0f:db:62:11:10:cb:25:c5:e8:81:2b:50:85:c6:ec:c9:
b4:10:e3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:04 2026 by rpki-client