
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
File: _fz0IvXEZi3h5GQ6JxwEax4hxK0.mft (raw, json)
Hash identifier: 4lV8sN10DpxUfYMna2ZeyijfhMbFi8wPaS3ckyVUWQQ=
Subject key identifier: 8B:3B:A3:BF:DE:FB:26:F8:93:55:41:2C:6C:20:B0:01:59:CF:D5:68
Authority key identifier: FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD
Certificate issuer: /CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD
Certificate serial: 0535
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
Manifest number: 052E
Signing time: Sun 04 Oct 2026 23:34:35 +0000
Manifest this update: Sun 04 Oct 2026 23:34:34 +0000
Manifest next update: Sun 11 Oct 2026 23:34:34 +0000
Files and hashes: 1: _fz0IvXEZi3h5GQ6JxwEax4hxK0.crl (hash: pS5QfcBNMS7GUST36vyzjaKe/zK3RVLkdmykDB9CZE4=)
2: AF506F14630811EC97879243C4F9AE02.roa (hash: 957JN3cduwRqZhBkt9zySk9smfI+Ua9et4xDRT3DRKs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl
rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 23:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1333 (0x535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125A95, serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD
Validity
Not Before: Oct 4 23:34:34 2026 GMT
Not After : Oct 11 23:34:34 2026 GMT
Subject: CN=6ac2e28b-aa4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e4:f0:e3:59:c9:12:07:b4:2a:0c:42:c9:fa:
bd:ea:c1:ae:7d:55:ea:24:81:94:6b:fc:7a:0d:08:
1b:77:13:83:39:d6:ee:eb:96:dc:04:5d:86:28:97:
59:91:36:b5:3a:f8:69:7d:07:83:96:60:39:be:2f:
c3:b4:39:91:09:2f:a3:ff:ad:74:a4:06:c1:67:6c:
50:e9:eb:65:c0:9b:74:c0:e4:88:9a:32:cd:6b:2f:
4c:8a:eb:03:be:95:bb:d6:e2:40:4a:de:48:a8:98:
8f:9d:72:8e:ec:90:28:f3:b2:c9:ff:7a:e1:86:01:
a9:02:32:7b:1b:f8:83:77:d8:56:c5:80:4b:89:21:
b0:6c:47:07:f1:50:f1:23:4b:fe:f7:bb:1e:5a:5c:
23:6b:40:0e:8d:36:16:b5:d1:ca:9c:44:75:6f:9b:
3a:50:cd:c1:86:50:34:47:9a:6e:bd:85:91:ad:68:
96:ca:8f:65:fe:e6:5c:75:56:bb:7b:15:4f:28:a9:
8b:55:46:d6:6c:92:10:2a:d6:01:0f:3a:62:16:5e:
b2:0f:5f:ab:10:71:fe:4c:08:d8:ab:35:ea:ec:13:
ae:fb:b6:c8:68:18:50:6c:6c:e6:4e:fc:d9:26:bd:
2a:64:4c:d9:a1:57:1b:7c:3b:3f:83:50:ac:8d:ff:
55:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3B:A3:BF:DE:FB:26:F8:93:55:41:2C:6C:20:B0:01:59:CF:D5:68
X509v3 Authority Key Identifier:
keyid:FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:a6:39:44:1e:b3:49:48:05:4f:b3:46:1b:7e:2f:6d:21:32:
99:aa:15:d6:d1:25:79:23:1d:e4:57:45:d2:26:27:9d:82:47:
bd:bf:36:27:0a:8b:7e:df:4a:70:40:8f:dc:82:7d:51:d9:46:
6b:20:0a:17:4e:a5:6c:8d:1d:c9:54:0f:fa:c6:38:4f:70:3f:
84:9e:cb:27:06:18:82:e1:3b:1b:72:2a:4c:9a:e1:3a:6b:35:
f7:14:38:73:6e:ca:88:17:d4:7e:96:be:e6:fe:af:34:c0:9f:
90:c2:ce:88:73:1f:c1:4f:fa:6b:92:dd:25:c4:41:35:9d:d0:
52:5e:29:3a:23:5e:2f:c7:7c:8f:5c:fe:71:5c:70:58:da:46:
19:04:e0:c4:df:c6:b2:77:14:4c:aa:49:81:47:a4:38:84:82:
90:28:78:aa:56:ec:a5:f7:9c:1d:22:78:83:e7:4f:45:2f:cf:
b2:64:30:40:9b:74:2f:8c:d7:01:e8:54:8b:b4:dc:ca:2e:0d:
f8:3d:09:40:88:80:54:17:0b:26:41:97:44:c3:2d:3b:df:03:
e7:b9:c1:fb:29:fc:65:2a:d3:5f:3d:b7:d9:e0:aa:9a:32:05:
e9:93:53:45:93:c8:7b:1f:21:8f:af:32:c1:63:ee:3a:6a:2f:
2e:03:b2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:18:10 2026 by rpki-client