
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft
File: FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft (raw, json)
Hash identifier: uT7wQnZtrRoM4DDCQwuAkjbkl+Ku6B7EV8Cbyfdfp0Y=
Subject key identifier: D3:41:AB:E9:EF:12:75:E2:F1:51:27:20:0F:A7:82:60:CF:A5:D7:2E
Authority key identifier: 16:02:38:49:B9:C6:4D:56:DE:DC:AE:9B:12:86:3D:07:31:88:AC:2E
Certificate issuer: /CN=A9197FBD/serialNumber=16023849B9C64D56DEDCAE9B12863D073188AC2E
Certificate serial: 0220
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft
Manifest number: 0220
Signing time: Mon 27 Jul 2026 04:18:48 +0000
Manifest this update: Mon 27 Jul 2026 04:18:47 +0000
Manifest next update: Mon 03 Aug 2026 04:18:47 +0000
Files and hashes: 1: FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl (hash: 8C8rv9OsTSKs4QHfyemKAovSKtqV9OLtcPyp0TlGNxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl
rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:18:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197FBD, serialNumber=16023849B9C64D56DEDCAE9B12863D073188AC2E
Validity
Not Before: Jul 27 04:18:47 2026 GMT
Not After : Aug 3 04:18:47 2026 GMT
Subject: CN=6a66dc27-7964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:04:88:49:84:5c:56:75:60:5a:7d:ba:4b:a8:
a6:26:78:dd:bb:4d:32:32:63:c8:15:44:cb:73:56:
1b:0c:de:29:33:42:57:05:3b:47:78:a3:0f:8e:56:
f4:4f:49:34:29:ab:9f:58:a0:1f:e1:54:89:08:2c:
4e:47:e0:87:f7:55:3d:81:25:e7:5c:fd:f7:f4:c5:
50:13:76:fc:1b:b9:79:ed:3f:e2:76:9b:dc:86:53:
f3:18:b6:92:9c:e9:9b:56:b6:32:04:14:f9:41:12:
6f:7f:cb:e8:86:04:5f:43:c3:38:4f:90:eb:ec:a4:
95:07:f7:8f:89:3d:12:a2:ba:15:20:ad:9e:1b:0c:
4a:2e:c0:40:60:f6:61:be:d2:1e:1d:e2:6b:31:18:
97:ad:c0:5d:01:0a:98:30:79:d3:3c:52:3c:e6:32:
46:62:ec:7d:7f:b5:d5:27:78:aa:09:d2:8b:80:c2:
6b:a6:71:1f:e3:e8:9c:35:6c:9f:c6:ba:bc:93:7c:
9b:59:dc:09:37:2f:a7:6a:9e:81:77:77:e3:f0:f5:
06:88:c3:c1:0f:81:0e:c6:35:a3:da:98:55:ac:85:
d1:4c:52:e8:8b:f1:16:8d:ef:35:03:af:7c:78:9a:
15:18:80:a2:12:fe:59:e8:3f:b6:0e:87:25:25:5e:
d7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:41:AB:E9:EF:12:75:E2:F1:51:27:20:0F:A7:82:60:CF:A5:D7:2E
X509v3 Authority Key Identifier:
keyid:16:02:38:49:B9:C6:4D:56:DE:DC:AE:9B:12:86:3D:07:31:88:AC:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:58:d3:80:e3:37:cc:94:32:56:da:99:91:cd:60:fb:b9:95:
b8:fa:be:9a:fa:de:b7:ac:07:78:b4:c2:2f:f5:34:6f:34:1b:
7c:99:7a:17:be:5d:dc:a7:0e:eb:b7:c0:a2:dd:de:59:a1:26:
be:eb:15:e6:cd:cb:71:9a:a4:58:b5:2a:36:ff:c5:7e:d1:46:
4e:f3:af:f3:d4:b6:a0:d6:0e:89:f5:50:70:6e:c2:96:9d:c1:
96:e6:ed:cc:99:d9:eb:ec:d9:5e:bb:1a:5c:f0:67:47:e5:65:
c3:e0:ae:a2:cb:67:b7:15:29:c7:d0:02:04:c4:d4:b3:50:0c:
ec:59:98:84:61:59:cb:6f:88:6d:e6:fb:44:f4:06:83:bb:ea:
47:39:a1:36:87:1b:b3:5c:61:3e:f1:fc:fa:17:2b:03:e1:17:
19:8a:cc:a1:0d:27:61:2d:2d:cf:b5:db:ce:86:51:5e:e7:cb:
fd:09:67:3f:9b:61:8e:97:4f:14:ee:7c:d3:29:71:99:55:1c:
34:31:c6:b8:df:e2:db:31:8a:a9:80:9c:40:c0:2e:cb:82:1c:
95:e0:61:95:14:fc:2a:4f:fc:0d:b8:fc:cf:8c:8c:3c:58:e1:
25:c7:93:17:fb:c4:ae:4d:d2:cb:c6:69:a3:49:00:a9:9b:21:
64:fd:8b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:44:50 2026 by rpki-client