
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
File: f32FZbsEGDw68czSI-nEYR8VCAY.mft (raw, json)
Hash identifier: ndgwELvlxJjwr0Q+ngSxnW7U5ZA5O74vUakrZ/2bWNs=
Subject key identifier: A2:52:B2:8E:DA:FB:07:F1:E2:84:8F:2F:56:91:F8:6E:9F:8D:65:22
Authority key identifier: 7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06
Certificate issuer: /CN=A9194004/serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
Certificate serial: 0252
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
Manifest number: 024D
Signing time: Mon 21 Sep 2026 02:22:54 +0000
Manifest this update: Mon 21 Sep 2026 02:22:53 +0000
Manifest next update: Mon 28 Sep 2026 02:22:53 +0000
Files and hashes: 1: f32FZbsEGDw68czSI-nEYR8VCAY.crl (hash: hmvLrAqZQHEcChk/QMurk4bFtKBKZW6kq3Ln0HuFZJo=)
2: 4A6E97AC311E11EE85C30E3BC4F9AE02.roa (hash: eZZ6OFwcrcrXTZgOQDhlIiXfyLs/tMt4GT83cZsLk+s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl
rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194004, serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
Validity
Not Before: Sep 21 02:22:53 2026 GMT
Not After : Sep 28 02:22:53 2026 GMT
Subject: CN=6ab094fe-f6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b0:d6:7f:5d:8b:87:11:93:c3:35:57:3f:f0:
47:bc:d5:bf:ec:57:b9:20:3c:98:5e:d6:fa:d5:b3:
53:c6:7a:f4:35:f1:b5:a6:64:23:21:cd:ae:99:12:
87:e8:58:a9:40:c8:82:df:c6:c7:47:36:70:51:aa:
56:6d:bb:dc:b7:a7:71:d8:b5:d1:a2:10:c6:29:fa:
d6:bd:a2:81:42:b9:b8:71:e3:68:83:d8:88:30:d1:
e3:9d:68:da:2f:41:fb:f8:c3:1f:c5:1a:df:0c:8c:
d7:cc:95:3f:82:bd:a7:f9:f6:71:aa:f2:2b:ec:8e:
a5:51:47:e1:18:89:95:7e:63:a4:d9:e6:19:a1:9a:
0c:18:53:93:e6:f5:0a:79:bb:82:e6:78:f1:e0:44:
2c:f6:b0:d1:d0:f9:68:f5:dd:06:a6:12:1d:f0:eb:
09:f7:5f:cc:5c:e2:c6:1c:c5:34:8b:14:ab:5e:fc:
6d:32:22:4d:ef:06:d4:47:a4:a7:6f:35:45:8f:f5:
d7:45:8b:3c:0b:00:4e:49:31:00:f4:08:df:90:0e:
61:e3:88:b1:36:51:80:b7:34:89:5c:e6:33:a7:bc:
57:b5:0d:7d:3f:3f:7e:bd:4a:8c:9b:04:67:7d:43:
01:49:6f:ea:07:0b:33:10:3d:72:df:73:71:31:66:
0b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:52:B2:8E:DA:FB:07:F1:E2:84:8F:2F:56:91:F8:6E:9F:8D:65:22
X509v3 Authority Key Identifier:
keyid:7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:9c:d0:f1:5f:5b:97:0b:18:73:24:4e:e4:cb:c6:82:c2:79:
5b:b8:e4:56:0e:e2:b2:c1:a7:60:a2:a0:4d:d1:cc:cd:41:98:
d6:25:23:b4:e1:d3:86:b4:52:a4:f9:c5:f2:14:d9:a2:11:a0:
da:af:f2:a7:13:19:4c:8a:04:be:27:ef:cb:2e:ee:96:1e:f9:
65:a8:72:1a:5b:77:25:18:af:dc:e5:da:28:26:60:9a:53:93:
1b:df:c7:04:4c:09:3d:33:a2:0e:99:5e:81:a6:05:0b:b5:03:
a4:ad:71:af:19:f0:ba:71:aa:8b:f3:72:e5:b3:f4:78:09:85:
0c:e0:a4:c0:8a:f3:cc:51:84:50:e0:7d:2a:7e:cc:5d:7b:90:
61:dd:cb:e4:4d:4e:e8:c9:12:34:2f:9b:0d:bc:25:0d:44:83:
31:f4:ef:20:55:2f:30:f2:9b:26:7f:bd:57:54:4c:1a:a0:d7:
c1:ae:fd:19:2e:31:66:38:5c:df:c0:06:f8:e8:a4:75:ce:5e:
7b:54:86:66:79:1e:1a:34:84:89:c5:db:7e:fa:8d:b1:c0:36:
01:62:56:93:8f:f5:35:d6:cb:08:0e:dd:82:7c:4e:c5:49:4a:
c7:c1:cb:77:97:aa:ca:6e:35:92:22:3c:0e:fb:e7:8c:b3:66:
30:84:5c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:58:29 2026 by rpki-client