
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
File: _fbWlYIK89Dw56dNs0RTLFfa7kA.mft (raw, json)
Hash identifier: 0j6fADCtCj7uEfBjPscT6dL7UKG1G3iySiDzoLeYalk=
Subject key identifier: 6E:82:55:CC:86:D1:63:F6:74:CD:F5:92:47:E5:FC:22:0C:80:13:BA
Authority key identifier: FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40
Certificate issuer: /CN=A9125864/serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
Certificate serial: 3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
Manifest number: 37
Signing time: Fri 17 Apr 2026 08:16:42 +0000
Manifest this update: Fri 17 Apr 2026 08:16:42 +0000
Manifest next update: Fri 24 Apr 2026 08:16:42 +0000
Files and hashes: 1: _fbWlYIK89Dw56dNs0RTLFfa7kA.crl (hash: QeR/JXN4L5rMV1/kE0mAY1n1U56fj7dWCEDIccw26Ww=)
2: 0BE73752ED1C11F0A0F1907B416F56BC.roa (hash: wnHDSrJ1lNjniUVeFmGkrnIaI5zcmuj8d7YV4WvUiMk=)
3: 7B57CA16ED1C11F09DBA53AB416F56BC.roa (hash: zWp6TDXFrmD5/NSfTk8YdIj2drPaBuTNuJsIqnk6a6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl
rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:16:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125864, serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
Validity
Not Before: Apr 17 08:16:42 2026 GMT
Not After : Apr 24 08:16:42 2026 GMT
Subject: CN=69e1ec6a-04ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0c:40:87:26:73:ab:34:9e:0e:25:a6:c7:e9:
83:d0:7c:cd:e8:6c:37:b5:30:aa:f2:05:d3:b5:c8:
69:33:6e:02:45:8d:50:86:76:e5:97:73:80:0d:ea:
2f:26:2d:0e:b2:5d:93:9e:06:fe:67:cf:d3:4a:db:
b3:bf:7d:c0:56:50:96:05:68:d6:71:5e:1d:67:73:
f3:63:59:a6:0c:ec:7a:90:ed:32:aa:6e:35:1e:11:
65:0b:76:d0:79:23:e0:59:82:76:35:00:05:91:5c:
ba:c8:97:85:bc:f0:21:6f:1a:df:75:74:7a:66:b2:
75:0d:35:2f:76:39:1f:51:6e:8f:cb:9c:09:29:6d:
b6:28:3f:94:8b:35:28:ea:2f:43:da:39:aa:85:ad:
90:74:10:9a:02:25:89:b2:2f:d6:5e:ed:6d:2c:d6:
e2:d8:8a:b1:9c:6b:4a:4e:51:0b:98:7b:5c:de:0d:
e1:9a:a2:6e:a9:c4:ce:8f:a3:3f:68:b4:70:4c:e5:
de:cb:cb:f2:99:0a:60:f8:8f:30:e8:fb:0e:ab:c0:
cc:7d:64:59:79:4e:f1:f1:96:24:ea:c8:a8:76:61:
1f:ae:fd:f8:08:4b:ff:cd:9a:2d:ff:0c:67:85:26:
08:9f:f7:1c:c9:2a:10:72:3c:22:5a:05:19:2c:c0:
7f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:82:55:CC:86:D1:63:F6:74:CD:F5:92:47:E5:FC:22:0C:80:13:BA
X509v3 Authority Key Identifier:
keyid:FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:c7:78:e0:2c:97:5e:c3:9f:0d:c3:7a:d7:bc:da:b0:cb:96:
ff:92:ad:9b:19:ab:fd:41:e4:80:16:16:ad:44:a2:a1:62:ec:
26:e8:7a:ac:39:6e:58:cf:bf:71:78:48:b6:d1:f1:8d:49:20:
d7:80:bb:75:bb:c6:f5:7d:42:e8:be:d4:cb:a0:c6:ff:ef:2c:
13:d2:ec:aa:03:28:f5:32:a9:ea:5d:2b:71:96:9f:b3:c4:6c:
84:25:02:64:41:55:c6:f1:71:47:96:bf:bb:e8:d1:a4:fa:82:
3e:7e:f9:8a:5d:d1:9b:28:df:f6:1a:26:8c:cf:d4:f5:cb:d9:
6a:50:6a:0d:81:24:fc:de:47:c8:50:2a:c9:79:0d:a4:cf:51:
fa:53:ca:15:82:cc:3a:0c:72:69:0a:bd:1d:e3:b3:d0:e7:2e:
b1:57:f1:75:6e:a2:16:15:59:04:c3:d3:3d:34:fb:f8:43:8a:
7c:af:7e:64:cb:7d:38:19:59:6d:e4:3c:ef:09:38:61:c7:4b:
f3:1d:ea:99:56:e9:c4:66:b3:31:80:ad:c7:1a:3d:42:f3:10:
aa:7a:6f:ea:db:39:2d:1c:db:df:65:87:b7:ad:52:25:9e:e5:
00:25:be:1b:f6:be:4c:df:56:da:c2:8d:3e:01:b9:c9:3d:fb:
ea:75:60:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 18:26:10 2026 by rpki-client