
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
File: fwOXxqlOUll2g0u_1YAvFbeV-44.mft (raw, json)
Hash identifier: BGzze4DmLtalDB5Q6ijZWeUCCGiw6F6r98pLNc6pSCo=
Subject key identifier: CD:76:3B:D8:99:4C:C5:A1:C5:62:2E:89:95:71:C8:D3:73:49:52:0F
Authority key identifier: 7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E
Certificate issuer: /CN=A9189D9B/serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
Manifest number: F0
Signing time: Mon 27 Jul 2026 08:33:14 +0000
Manifest this update: Mon 27 Jul 2026 08:33:14 +0000
Manifest next update: Mon 03 Aug 2026 08:33:14 +0000
Files and hashes: 1: fwOXxqlOUll2g0u_1YAvFbeV-44.crl (hash: RXJ0z3XamiQnEN+Qc/n/L8P+LJvVOi844WeXSmqws2o=)
2: 552F0C342E2011F0AF4AB70CC4F9AE02.roa (hash: +6GhLzBq26qZLSAXHkP4lRMwMkM4IDi1gjQptQ2nnL4=)
3: C865C1BC8D2E11F0A977AE41C4F9AE02.roa (hash: z/pF1TiSSvu2UaCDjXshPW7+WO39dYPms0u7Umk74/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl
rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:33:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189D9B, serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E
Validity
Not Before: Jul 27 08:33:14 2026 GMT
Not After : Aug 3 08:33:14 2026 GMT
Subject: CN=6a6717ca-19a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:52:eb:a3:15:96:22:d2:58:ce:0c:20:2b:66:
f5:11:7a:b3:50:f9:92:92:a3:cc:75:ab:36:4e:46:
46:9d:13:b8:e3:dc:57:66:03:7b:ba:11:d6:8f:ac:
c5:14:06:23:4c:1c:38:97:d6:44:52:62:fc:38:ce:
7c:45:5f:f5:1d:d6:86:ba:2c:e9:d3:7d:ff:a1:55:
d6:6f:eb:bc:31:64:20:9c:53:10:00:67:c2:7f:8b:
a2:35:89:50:72:6a:5b:2e:d6:3f:d9:23:12:68:ac:
e8:7c:ef:a2:ea:79:74:82:d7:2d:d2:06:92:73:ff:
bb:e7:1c:7b:d9:07:d2:9c:2f:ef:91:49:af:81:3c:
0a:f7:de:be:9b:42:14:a5:39:90:c9:7a:80:c4:37:
39:b8:a4:55:43:ac:71:b4:41:d1:e1:30:76:5b:b4:
d8:d7:c0:1d:b4:0e:7f:14:13:f0:b8:49:ba:5a:b9:
b2:0f:4a:d6:41:54:30:50:5c:8d:e9:c5:fa:70:e6:
68:74:6d:95:34:45:ff:f7:8d:54:1d:7b:61:68:14:
c9:72:0e:56:41:cc:37:56:9c:bf:f1:e3:c5:31:45:
47:39:86:19:87:fd:4c:ed:6c:00:0d:2e:89:16:7e:
91:a2:43:21:5d:d6:a6:6a:40:d1:37:62:a7:8b:68:
08:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:76:3B:D8:99:4C:C5:A1:C5:62:2E:89:95:71:C8:D3:73:49:52:0F
X509v3 Authority Key Identifier:
keyid:7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a2:b5:fb:fa:f5:5a:e9:1c:53:5e:43:1b:76:82:20:00:16:
2a:05:43:91:fc:5c:b3:ef:7e:a6:8a:6e:9c:4f:d5:e2:c7:16:
96:54:e3:5d:03:0c:73:6d:65:a7:8f:be:12:12:cd:81:a4:9d:
76:93:8d:68:2a:de:25:50:29:35:95:c4:ff:91:95:59:b7:16:
3e:e2:a2:fc:15:c7:fd:64:31:79:20:d0:40:2d:90:e2:9e:2f:
a7:60:05:05:4d:3a:2b:66:a3:2c:e9:89:6f:0a:98:3b:1c:7e:
dd:a7:a1:ea:17:59:ac:82:a2:e6:75:75:47:68:0d:0b:c0:9b:
3b:6a:b0:b1:dd:e8:af:15:72:28:34:78:6e:74:23:24:89:7e:
01:fa:dd:28:14:78:3b:65:0f:e2:5f:65:c8:de:79:df:db:13:
d0:7b:2f:42:39:90:5b:9d:34:8d:44:1a:99:1d:c8:28:ed:37:
3c:0f:cb:4f:b6:45:a5:4d:76:92:e1:79:ef:13:5d:e8:1b:5b:
ae:93:19:e0:a4:36:b5:a2:21:10:f8:92:a6:6c:ce:19:10:ef:
84:cd:3f:98:31:a6:f7:64:96:9f:01:52:cc:ee:27:11:1f:a3:
08:36:ef:36:b8:c7:6b:31:ca:cf:9e:4f:22:29:d9:14:ec:af:
67:3f:38:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODlEOUIxMTAvBgNVBAUTKDdGMDM5N0M2QTk0RTUyNTk3NjgzNEJCRkQ1ODAyRjE1
Qjc5NUZCOEUwHhcNMjYwNzI3MDgzMzE0WhcNMjYwODAzMDgzMzE0WjAYMRYwFAYD
VQQDEw02YTY3MTdjYS0xOWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkFLroxWWItJYzgwgK2b1EXqzUPmSkqPMdas2TkZGnRO449xXZgN7uhHWj6zF
FAYjTBw4l9ZEUmL8OM58RV/1HdaGuizp033/oVXWb+u8MWQgnFMQAGfCf4uiNYlQ
cmpbLtY/2SMSaKzofO+i6nl0gtct0gaSc/+75xx72QfSnC/vkUmvgTwK996+m0IU
pTmQyXqAxDc5uKRVQ6xxtEHR4TB2W7TY18AdtA5/FBPwuEm6WrmyD0rWQVQwUFyN
6cX6cOZodG2VNEX/941UHXthaBTJcg5WQcw3Vpy/8ePFMUVHOYYZh/1M7WwADS6J
Fn6RokMhXdamakDRN2Kni2gImwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM12O9iZ
TMWhxWIuiZVxyNNzSVIPMB8GA1UdIwQYMBaAFH8Dl8apTlJZdoNLv9WALxW3lfuO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUQ5Qi9CMkE1NzdDMjI3
NDUxMUYwQUVEMkI0NjlDNEY5QUUwMi9md09YeHFsT1VsbDJnMHVfMVlBdkZiZVYt
NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z3T1h4cWxPVWxsMmcwdV8xWUF2RmJlVi00NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OUQ5Qi9CMkE1NzdDMjI3NDUxMUYwQUVEMkI0NjlDNEY5QUUwMi9md09YeHFsT1Vs
bDJnMHVfMVlBdkZiZVYtNDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfqK1+/r1WukcU15DG3aCIAAWKgVDkfxcs+9+popunE/V4scWllTjXQMMc21l
p4++EhLNgaSddpONaCreJVApNZXE/5GVWbcWPuKi/BXH/WQxeSDQQC2Q4p4vp2AF
BU06K2ajLOmJbwqYOxx+3aeh6hdZrIKi5nV1R2gNC8CbO2qwsd3orxVyKDR4bnQj
JIl+AfrdKBR4O2UP4l9lyN5539sT0HsvQjmQW500jUQamR3IKO03PA/LT7ZFpU12
kuF57xNd6BtbrpMZ4KQ2taIhEPiSpmzOGRDvhM0/mDGm92SWnwFSzO4nER+jCDbv
NrjHazHKz55PIinZFOyvZz84+Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:55 2026 by rpki-client