
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
File: -Fr9bnRbCjR8ppbujrwWfQikT1Y.mft (raw, json)
Hash identifier: 6Afm31fDHSwiyRUCzw7B1HRwReoNJV7N+mLmUa09Btg=
Subject key identifier: 92:0B:F3:81:C5:34:15:95:A8:95:44:05:0F:66:D0:A0:44:AA:FD:DD
Authority key identifier: F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56
Certificate issuer: /CN=A9192B84/serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
Manifest number: 0125
Signing time: Sun 01 Mar 2026 06:44:15 +0000
Manifest this update: Sun 01 Mar 2026 06:44:14 +0000
Manifest next update: Sun 08 Mar 2026 06:44:14 +0000
Files and hashes: 1: -Fr9bnRbCjR8ppbujrwWfQikT1Y.crl (hash: RBkQZCFQNmCNIyt5ARGlhMGj1O06tVqu5ED1XJxv1SQ=)
2: A1F4D8F6ABF111F0AC423B0DC4F9AE02.roa (hash: FHyNixxbqeOTH/ABuTSjy9voXrVO6M51CKZjHghUlc4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl
rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:44:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192B84, serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56
Validity
Not Before: Mar 1 06:44:14 2026 GMT
Not After : Mar 8 06:44:14 2026 GMT
Subject: CN=69a3e03f-b6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:3c:11:2f:a6:cb:9a:09:38:56:09:ba:4e:
ad:33:b0:0a:07:cf:ac:e3:9e:25:25:9a:16:2f:d3:
61:3c:fe:d5:6e:9b:b2:12:42:7d:4e:0f:5c:be:c0:
46:69:91:0b:e5:ef:42:f0:f6:a4:a9:60:c3:66:4d:
d1:27:09:7e:a3:a1:81:4e:04:4d:2a:3b:e3:8d:aa:
07:63:d6:16:10:d2:a0:18:2f:9d:9d:55:ab:26:50:
77:2f:4b:b9:a2:52:15:84:9b:4f:fb:07:93:c1:9f:
0e:82:6d:57:32:56:12:a1:82:7d:5c:6c:f8:02:3f:
f6:95:61:3a:d9:65:b0:f6:0c:2e:66:50:3c:36:82:
a7:75:66:8e:12:4d:28:4d:73:d6:79:6a:f3:00:3a:
5f:ef:5d:10:9d:7c:0a:7b:8c:95:ea:28:a5:1c:ff:
da:8e:c6:62:61:0f:31:1a:95:96:8e:a1:db:d6:41:
84:ef:03:c6:b8:22:32:b0:75:f2:c3:8a:b2:93:bd:
ec:d5:dd:3a:d7:78:7a:aa:ea:5b:54:7b:14:f3:0c:
77:ef:03:b1:6d:dd:62:e4:22:f9:69:61:c0:d9:8d:
7c:20:62:4d:a6:9a:67:8e:76:06:da:3b:77:7a:ca:
41:fc:d7:28:68:38:da:f9:0f:89:35:d6:a5:9c:d7:
23:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0B:F3:81:C5:34:15:95:A8:95:44:05:0F:66:D0:A0:44:AA:FD:DD
X509v3 Authority Key Identifier:
keyid:F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:f9:91:e8:07:91:07:18:94:32:cb:1c:9a:24:a3:75:72:34:
be:46:fd:88:3a:38:cb:23:16:21:88:5f:78:8f:1c:71:8d:21:
87:df:75:13:60:12:fd:ef:51:71:e8:9d:28:6a:ee:a5:e8:b4:
12:15:2a:5e:bd:1c:68:9a:f1:12:ea:af:3f:98:2e:93:42:4c:
3f:4b:19:ac:da:b6:0a:35:cc:59:d7:14:91:33:96:09:c3:2c:
2d:65:d8:63:cf:99:e6:cf:b9:90:d6:60:51:7b:e1:79:1a:68:
3a:9f:89:c6:ee:6b:44:e5:5e:d7:21:6a:11:69:ad:0c:b4:ce:
f0:58:a6:43:82:3f:5d:e9:83:5a:12:86:7e:a4:47:c6:96:67:
1b:41:03:d6:bf:90:3b:0b:91:e7:09:40:d7:2c:68:a5:f7:fe:
fe:71:46:ae:d1:d7:1d:b2:83:93:f9:c4:a8:ce:41:5b:a1:63:
cc:4a:ca:4e:9b:fb:a7:d2:bf:c7:2d:25:af:71:dc:a7:13:50:
4c:64:04:a6:fc:15:77:15:4c:23:b3:07:b1:10:36:28:18:db:
76:93:ac:20:6b:5f:31:38:c2:2e:5e:40:81:33:1d:1f:a6:fd:
2c:75:27:60:cb:fd:b9:97:c1:95:06:6c:20:5f:dc:e9:73:4a:
18:26:4c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:24:58 2026 by rpki-client