
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft
File: f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft (raw, json)
Hash identifier: koZCxGIPnJu2fs33NGiJuKVdzYQ8Z0MsY2rA4OinP08=
Subject key identifier: BF:02:88:E7:DF:98:B8:3F:C0:C5:FA:AA:4C:48:34:2E:57:45:17:4D
Authority key identifier: 7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF
Certificate issuer: /CN=A9190992/serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF
Certificate serial: 0532
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft
Manifest number: 0523
Signing time: Mon 27 Jul 2026 00:35:12 +0000
Manifest this update: Mon 27 Jul 2026 00:35:11 +0000
Manifest next update: Mon 03 Aug 2026 00:35:11 +0000
Files and hashes: 1: f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl (hash: Z1bWPXb61rMc8J6mmV9Bd/pCCqPbVdT8HSK6YD9F/wA=)
2: 5B24C51A60ED11EC874B903BC4F9AE02.roa (hash: 4w0TogS+2atxTCMCzPs6c9BF71e/45vAMcdgv3e+SKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl
rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1330 (0x532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190992, serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF
Validity
Not Before: Jul 27 00:35:11 2026 GMT
Not After : Aug 3 00:35:11 2026 GMT
Subject: CN=6a66a7c0-83ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:73:81:cf:a0:1b:11:18:19:2c:1d:27:46:4d:
da:b7:ed:b7:5f:40:b4:33:59:fd:96:67:ba:6b:ca:
cc:a0:a0:f9:1e:55:a8:fe:67:0e:57:2c:e5:fe:3d:
98:1a:98:4a:04:60:21:13:1a:a1:e7:22:ad:e9:ac:
15:ff:ec:36:80:95:6a:7d:c6:9d:89:6c:21:78:9b:
77:b0:37:81:96:a4:80:ed:78:3c:e6:54:e8:dd:11:
f6:02:5a:f5:c4:4c:ae:07:fd:20:6b:97:43:7d:f6:
6f:7f:27:79:4f:4e:a1:9f:83:4c:75:66:f2:dc:d1:
bc:38:d2:44:bd:e8:0d:ff:90:3f:3e:5d:09:45:ba:
29:42:87:c0:73:d1:32:ed:67:09:d6:af:05:7c:a8:
b8:8d:54:3c:58:d9:e1:93:3a:1a:36:a8:5f:df:09:
42:d7:e9:e0:77:72:dd:22:ae:06:25:86:8b:42:41:
06:da:35:e7:08:22:d9:5f:de:85:b4:c0:bd:1e:b5:
61:e7:19:6e:77:c9:d7:fb:6e:2e:6b:82:f3:51:db:
94:d7:46:32:eb:05:81:e4:ea:87:64:fd:74:25:9c:
75:24:34:08:4d:4a:4b:07:28:cd:c3:14:92:82:78:
76:58:13:a8:c2:2b:e8:ec:31:72:b6:99:ba:37:ec:
b2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:02:88:E7:DF:98:B8:3F:C0:C5:FA:AA:4C:48:34:2E:57:45:17:4D
X509v3 Authority Key Identifier:
keyid:7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:9e:f5:40:35:bf:2e:67:9c:69:4b:8b:d2:e3:c2:eb:89:46:
02:a9:26:eb:83:71:7e:59:fa:6b:9b:a1:b1:00:1d:e3:29:8c:
cc:e5:e9:dd:80:f4:0b:5f:52:fd:d4:4a:14:43:14:eb:ef:f1:
19:97:f7:db:ac:cc:bc:18:0a:5a:35:eb:a2:53:33:f0:90:16:
f9:a3:8e:98:61:b4:7f:9e:e1:cb:e0:35:4d:66:92:27:54:54:
45:c7:6d:5d:13:c3:6f:b5:7d:7d:82:23:11:de:c5:19:13:d9:
05:01:02:be:c8:5f:73:f5:e8:5e:6d:4f:ac:2a:c0:1d:c7:fb:
4d:8d:75:8b:cf:3f:2a:9a:69:7b:b6:57:37:9c:c4:27:9e:34:
33:12:25:00:1b:25:4c:55:1b:88:a5:db:79:7f:30:8c:07:05:
19:be:9f:b2:db:89:05:d3:48:cc:c1:1b:37:d1:14:d6:5a:2f:
f9:84:31:2e:08:d4:03:5f:33:41:6b:8e:ac:29:40:46:dc:87:
da:1e:bd:85:c5:2d:91:15:e5:2a:f4:7c:a1:fe:47:74:75:09:
bb:bc:64:a2:11:fd:a0:c0:46:0c:26:97:aa:6a:4d:98:fa:23:
f8:06:44:c3:c0:37:48:80:ad:9e:45:7f:15:44:70:99:f9:37:
99:59:10:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:06:54 2026 by rpki-client