
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
File: f32FZbsEGDw68czSI-nEYR8VCAY.mft (raw, json)
Hash identifier: Bprhe7gjNnJPSgA+O9hfZ4VSOHEh6Abip6hsDlh6G/k=
Subject key identifier: 8F:DF:62:4A:59:28:EB:16:1B:D4:34:9A:C0:5E:A9:EE:98:A9:93:B4
Authority key identifier: 7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06
Certificate issuer: /CN=A9194004/serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
Certificate serial: 0200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
Manifest number: 01FC
Signing time: Fri 17 Apr 2026 02:51:57 +0000
Manifest this update: Fri 17 Apr 2026 02:51:57 +0000
Manifest next update: Fri 24 Apr 2026 02:51:57 +0000
Files and hashes: 1: f32FZbsEGDw68czSI-nEYR8VCAY.crl (hash: Co8NucV9FySq//SaSZb1JcDbIPrdg5uuKyTN7t/9R70=)
2: 4A6E97AC311E11EE85C30E3BC4F9AE02.roa (hash: 4JCactL0wKyyb6kHrdtWQhFXW9eMMbWcCVYpKnjwk3M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl
rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194004, serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
Validity
Not Before: Apr 17 02:51:57 2026 GMT
Not After : Apr 24 02:51:57 2026 GMT
Subject: CN=69e1a04d-b5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2d:00:76:1c:fa:8e:b8:00:2e:db:d4:4b:ef:
fd:a5:4e:fb:8b:7b:34:38:fa:22:44:55:55:7b:ab:
82:e0:86:36:f3:56:05:ca:1a:af:04:60:20:75:80:
b7:ba:94:67:4c:13:63:09:97:ef:b2:cc:b1:e9:a7:
57:38:7c:89:48:c2:ef:d6:11:15:a8:e0:81:75:00:
a0:b8:58:69:a6:a2:88:c1:b1:36:a5:18:c8:cf:10:
a4:60:70:27:df:e7:bb:9b:f8:ff:55:3b:72:8b:78:
26:e9:6c:7f:5a:7a:00:3e:1e:d9:c0:84:b4:90:1d:
9c:c3:35:6b:b6:c9:76:5c:59:c2:f4:c9:23:a9:ff:
65:dd:8c:b3:fa:86:36:38:1e:dc:f2:61:7d:98:b3:
fc:e6:e2:f2:a1:28:68:4b:1a:21:79:4a:93:b6:75:
c0:b2:ea:e8:20:d8:85:e0:2d:e5:c5:78:4c:01:16:
83:26:ed:50:b5:c7:89:3a:ca:2c:9a:25:1e:5c:01:
da:fd:d1:0b:e4:e2:e9:8f:25:d7:58:14:ac:7d:6c:
9f:63:4c:90:70:81:49:33:6d:30:90:e3:ff:e1:1c:
cd:7e:d2:67:af:45:25:0d:5b:2e:a1:3d:5a:61:a9:
b3:c1:52:88:0c:ef:f9:9e:6b:e8:3c:f7:2f:02:5b:
8b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DF:62:4A:59:28:EB:16:1B:D4:34:9A:C0:5E:A9:EE:98:A9:93:B4
X509v3 Authority Key Identifier:
keyid:7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0c:76:ea:76:08:54:61:ae:71:2f:c4:8a:29:5c:56:56:da:
e8:d9:7c:fc:2e:89:61:50:83:31:5c:d9:dd:e9:06:46:b2:7a:
60:8d:10:e8:65:fd:3c:a4:86:67:a7:f2:c4:38:df:91:fb:90:
d4:26:d8:4a:87:99:0d:9e:d8:f1:79:61:a4:99:e4:38:ab:33:
ec:16:87:f2:08:3c:1b:04:1d:10:67:e8:28:7f:39:85:a7:18:
1c:34:08:fc:50:ad:ee:40:17:50:dc:6e:80:89:32:6d:39:b6:
7b:c9:90:11:2c:b1:1e:78:1f:4c:2b:0c:90:02:bc:20:72:83:
d1:0c:61:51:03:34:5d:28:c7:65:30:26:91:91:7a:ce:9e:cc:
48:19:cf:63:ec:d5:e0:f3:ab:6f:5f:bf:20:46:05:27:da:98:
4e:4b:42:b7:b3:d0:d5:46:22:cb:9e:dd:e9:24:25:1f:f0:b4:
2a:0b:83:62:d5:bc:47:40:6f:e1:16:2f:d4:10:fb:43:f0:54:
d5:e1:5b:cf:2f:6c:c1:65:43:fd:83:ce:a2:68:1b:68:c3:3b:
54:69:4e:d0:da:5c:4b:8e:2f:a8:c4:42:9b:da:ab:30:c8:38:
0e:2c:46:dc:f6:5f:f9:ca:b0:f5:0d:1e:c6:5a:4e:4b:9e:26:
6f:a3:87:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:58:19 2026 by rpki-client