
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
File: _fbWlYIK89Dw56dNs0RTLFfa7kA.mft (raw, json)
Hash identifier: 5svM9qvgzgEh0y1ft6dpuJodO3mLJD2IUDc/ilQouF0=
Subject key identifier: D2:1B:5A:AE:19:CD:C4:EB:4E:B3:20:61:87:63:E9:4E:33:10:6A:3D
Authority key identifier: FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40
Certificate issuer: /CN=A9125864/serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
Certificate serial: 24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
Manifest number: 20
Signing time: Tue 03 Mar 2026 08:31:43 +0000
Manifest this update: Tue 03 Mar 2026 08:31:43 +0000
Manifest next update: Tue 10 Mar 2026 08:31:43 +0000
Files and hashes: 1: _fbWlYIK89Dw56dNs0RTLFfa7kA.crl (hash: DCPG8r3oGAHOmkBtQ8hTtMVzESCAlD2tsGOHO7p/5II=)
2: 7B57CA16ED1C11F09DBA53AB416F56BC.roa (hash: zWp6TDXFrmD5/NSfTk8YdIj2drPaBuTNuJsIqnk6a6U=)
3: 0BE73752ED1C11F0A0F1907B416F56BC.roa (hash: wnHDSrJ1lNjniUVeFmGkrnIaI5zcmuj8d7YV4WvUiMk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl
rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125864, serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
Validity
Not Before: Mar 3 08:31:43 2026 GMT
Not After : Mar 10 08:31:43 2026 GMT
Subject: CN=69a69c6f-36df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:23:a2:5d:ba:93:04:f8:ff:af:9f:c5:8c:
56:bf:5a:73:32:a7:de:ed:0f:af:0a:20:75:3d:2a:
cf:ef:4c:d1:8e:f2:6c:26:9d:a9:1c:c6:de:e6:0b:
e2:ef:d8:de:b5:23:fb:5e:3d:5b:e9:06:a9:dc:60:
de:bb:78:5f:b0:1a:43:52:87:34:7c:10:48:79:a6:
ee:e5:9d:14:0e:02:81:41:9e:70:0b:4c:4b:7f:8e:
82:31:77:e2:f7:1c:1f:60:78:60:9b:70:6e:4e:96:
f6:b4:20:e9:51:b2:f7:9b:24:7f:9f:71:96:2c:10:
6c:13:fa:37:37:fb:b5:83:ef:49:20:9f:85:60:67:
9e:6d:18:99:77:92:f3:e1:08:1d:66:10:b6:df:ce:
c9:8e:b8:84:4d:c0:e9:5e:8e:17:12:bd:a5:48:f9:
51:77:6b:22:20:d0:81:73:8a:07:13:9f:15:13:62:
a0:a4:4e:09:1c:41:33:02:a1:fc:f2:28:05:a2:73:
74:4f:c1:f7:01:96:2a:bf:2e:7f:c9:22:81:82:28:
fe:4b:68:7a:3c:57:17:54:27:ef:80:51:fd:c7:39:
7a:ea:4c:ad:d7:06:ff:97:3b:80:d7:2a:05:de:44:
71:21:5e:46:c4:46:ff:00:e5:7b:3e:3a:e7:50:1a:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1B:5A:AE:19:CD:C4:EB:4E:B3:20:61:87:63:E9:4E:33:10:6A:3D
X509v3 Authority Key Identifier:
keyid:FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:e3:78:c3:3b:2f:20:d3:de:7b:77:c5:cb:97:a7:0c:cf:fc:
fe:3e:b3:34:c7:e6:91:1b:70:1c:0c:b2:73:08:f4:81:3e:fa:
1d:07:4b:67:68:0b:11:f7:bd:a4:41:3d:89:44:b1:16:e9:70:
ed:c0:b6:3b:05:ac:43:51:a9:c1:17:dc:d3:a5:24:37:0f:d5:
88:ad:52:42:4d:c0:0c:4a:ae:64:26:b5:7f:b0:50:77:1b:8f:
b3:6c:0a:f0:53:d5:ad:9f:bc:e9:bb:da:b8:41:22:4c:dc:83:
6e:1e:69:7b:b3:c5:9c:5b:48:3d:b7:95:a9:0a:6c:45:04:ba:
13:58:80:43:0d:57:b4:93:e0:f1:1d:56:af:19:4f:ef:cc:eb:
80:8f:af:d9:0a:0c:10:71:43:cd:cc:83:3f:aa:7d:6f:ba:7e:
70:41:ab:4e:36:29:53:f6:ff:8c:ec:41:1f:3d:af:54:48:4e:
51:8f:d1:96:5d:59:eb:3c:fc:12:53:93:51:0f:4d:22:c0:65:
0d:24:b6:13:a9:e9:d8:87:2f:58:43:0a:9c:fe:7f:5e:3b:91:
e0:da:80:e8:fa:70:e9:2f:10:e9:91:d5:f8:47:4d:ba:a9:e0:
a4:32:4d:03:a6:1e:62:6c:b2:84:d5:b5:be:27:2d:4e:37:59:
3b:ab:b0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:05:50 2026 by rpki-client