
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
File: f32FZbsEGDw68czSI-nEYR8VCAY.mft (raw, json)
Hash identifier: MJsFIK4jwI8Y1dTXtxPKghhzvw4XRDll6MuUsf0gFow=
Subject key identifier: 12:52:13:C9:18:5B:24:1C:A6:E1:0C:2E:AF:94:25:49:D1:3B:99:5E
Authority key identifier: 7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06
Certificate issuer: /CN=A9194004/serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
Certificate serial: 0232
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
Manifest number: 022D
Signing time: Tue 21 Jul 2026 03:53:47 +0000
Manifest this update: Tue 21 Jul 2026 03:53:46 +0000
Manifest next update: Tue 28 Jul 2026 03:53:46 +0000
Files and hashes: 1: f32FZbsEGDw68czSI-nEYR8VCAY.crl (hash: 8Onr4SiasPCnFqZbyQAMqu9VQP5aL0cwGW3AyltslyY=)
2: 4A6E97AC311E11EE85C30E3BC4F9AE02.roa (hash: eZZ6OFwcrcrXTZgOQDhlIiXfyLs/tMt4GT83cZsLk+s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl
rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 03:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562 (0x232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194004, serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
Validity
Not Before: Jul 21 03:53:46 2026 GMT
Not After : Jul 28 03:53:46 2026 GMT
Subject: CN=6a5eed4a-8988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4c:aa:f1:11:36:76:36:57:95:d1:60:05:e1:
7f:2d:0f:07:75:22:16:f0:56:08:af:49:f9:2a:b3:
1e:f6:26:4a:e2:01:af:41:0f:4f:e9:30:af:0d:49:
56:99:4b:e4:4f:a3:89:e0:5f:0a:3b:a9:f7:bf:04:
ef:6a:fb:4a:63:32:8b:2a:7a:57:28:7b:c4:f7:1a:
6a:24:25:fc:ed:34:9c:ef:37:95:35:3d:0e:80:b6:
b0:8c:5f:33:98:60:5b:8b:2b:48:f2:a8:d3:d6:63:
0a:9f:69:9f:41:17:a4:1a:e6:74:a4:74:11:80:89:
a6:b6:75:95:41:d6:58:e8:bf:fe:0a:b8:c2:05:ac:
c3:83:86:44:23:4d:5d:ec:c2:78:d7:39:38:58:d7:
b4:d8:0a:45:ed:08:90:79:2e:65:47:2d:ec:ea:63:
6b:8a:20:e5:03:53:f3:03:19:56:65:a6:47:ca:63:
9a:02:46:55:75:f2:a1:80:4f:3e:02:83:d5:77:96:
6a:07:f9:f7:c4:dd:8f:83:56:31:98:60:24:04:89:
19:6a:24:50:0c:6f:d1:82:a3:0d:88:c7:7b:12:4a:
e7:dc:28:e4:c9:f1:b8:da:03:29:d5:c5:17:15:bc:
78:5d:bd:ff:b7:ca:47:93:3e:99:60:9f:1c:ee:38:
00:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:52:13:C9:18:5B:24:1C:A6:E1:0C:2E:AF:94:25:49:D1:3B:99:5E
X509v3 Authority Key Identifier:
keyid:7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8d:fb:63:2f:8d:8f:a7:21:bb:47:b3:32:68:76:98:0c:f7:
96:a0:d7:8f:8d:f3:df:30:eb:68:c5:b6:d9:c3:ef:4d:b5:1e:
9b:dd:09:b4:cc:f0:da:e0:6e:c6:5b:1d:68:5c:ab:cc:03:77:
b8:a2:95:af:c8:b3:6f:10:9b:21:2b:ef:2a:33:f9:b0:9a:66:
e6:a8:77:e3:f2:aa:d5:2a:6a:01:0b:3e:df:71:d2:fc:72:54:
11:8c:b9:52:c6:82:8a:5c:05:54:59:ce:f4:0d:a6:1e:08:15:
79:5f:83:2f:ea:34:53:45:28:93:ba:25:8a:e8:8c:9c:b8:49:
16:46:ab:2f:b6:cc:46:79:51:d4:e5:2c:98:7c:4b:43:f6:87:
12:36:50:20:1e:ef:35:3c:7c:86:e8:48:4c:42:7c:d8:d3:40:
a9:58:93:e2:fa:96:6b:1e:75:ed:9b:f0:f1:42:84:19:f8:3a:
fc:c9:05:d1:d9:76:d7:18:f4:b9:e4:3d:ab:db:ef:b5:f3:80:
71:4b:63:ac:ae:0b:db:64:1f:bd:cd:38:a2:f1:95:6a:0b:f0:
2a:99:02:72:55:04:0a:cc:8b:b6:eb:17:c7:6d:75:e7:93:98:
01:9b:80:d1:eb:c0:b8:bf:10:61:e9:f4:ed:25:8e:5e:06:1e:
f2:7e:c6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:48:11 2026 by rpki-client