
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
File: fCqWpakDTN8qeG9kvfJ_2KxRySs.mft (raw, json)
Hash identifier: MGLpE0c6WjQO+0PZMwCMwSns4c6jol55t9EqvMArZhQ=
Subject key identifier: 60:F4:1F:76:15:DE:E0:D8:AF:29:C5:A7:44:D7:03:95:7C:FD:37:85
Authority key identifier: 7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B
Certificate issuer: /CN=A9125E89/serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B
Certificate serial: 06CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
Manifest number: 06C3
Signing time: Mon 20 Jul 2026 23:00:57 +0000
Manifest this update: Mon 20 Jul 2026 23:00:56 +0000
Manifest next update: Mon 27 Jul 2026 23:00:56 +0000
Files and hashes: 1: fCqWpakDTN8qeG9kvfJ_2KxRySs.crl (hash: trVm4fAIMbEDmJSCLfnw+WLmCGpjKpzpyGpgkbR/3IY=)
2: 12CC9D1857A711EDB284106DC4F9AE02.roa (hash: BveT190IYa4IZx/c6x7to7FKf5iRH7eeNb+xgKFxkXc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl
rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1739 (0x6cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125E89, serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B
Validity
Not Before: Jul 20 23:00:56 2026 GMT
Not After : Jul 27 23:00:56 2026 GMT
Subject: CN=6a5ea8a9-40cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:30:f1:af:23:c4:67:69:af:6a:a4:88:37:
1b:cc:2c:c9:21:97:4c:49:33:01:ce:3f:1b:b8:f5:
ea:b3:13:c8:71:f8:fe:cc:56:1f:27:c8:65:ba:b3:
2b:e2:da:29:30:8f:a1:71:bd:45:08:9c:6a:ce:1c:
38:42:3a:10:3f:86:d9:74:99:f5:a7:6f:ee:ba:8e:
4d:1b:f0:e0:08:28:14:5d:e1:a0:5e:a2:55:c7:39:
db:c2:d2:c7:12:30:63:6f:70:c0:14:33:cf:64:d1:
8a:6f:05:14:ff:ee:85:c9:fa:15:56:e1:8e:41:df:
d3:d0:e1:6a:0c:56:6f:ce:1a:15:6b:1b:af:91:3f:
4c:e8:ac:aa:86:39:56:29:48:ca:cc:69:4f:df:a8:
37:9b:c4:b7:aa:fa:17:25:c7:23:15:66:ed:49:7b:
cd:9c:a0:e0:b3:cd:95:e2:23:b3:e4:24:4e:a1:99:
d6:91:8c:60:26:08:4b:fd:96:c5:ec:16:05:9b:77:
31:9d:0a:81:bd:f1:97:bf:16:ea:c3:b4:01:61:79:
49:5e:c3:b0:6c:f9:b0:24:68:5c:4b:d0:f0:ca:9a:
8a:c0:72:0c:0e:19:c2:7a:62:80:fd:68:f0:e4:fe:
1b:fd:44:df:fe:f9:2e:a6:e1:19:80:d8:fb:32:a0:
5a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F4:1F:76:15:DE:E0:D8:AF:29:C5:A7:44:D7:03:95:7C:FD:37:85
X509v3 Authority Key Identifier:
keyid:7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:0c:78:7f:17:66:ad:a2:30:3a:af:4f:69:be:23:03:a2:2c:
a3:e1:14:f1:94:95:62:a2:e2:36:58:75:92:df:ef:a9:ac:63:
38:6f:ba:6a:44:07:76:5c:cf:98:e8:a4:4c:80:c1:54:f8:8e:
63:40:95:03:38:3b:0c:81:55:ad:4c:63:ac:3a:36:0c:7a:69:
ff:32:27:7c:dc:51:d8:21:c0:c7:bd:c7:8c:43:02:d9:40:48:
a4:d4:b0:98:9a:92:8c:18:6f:77:fa:44:54:80:0f:5c:46:0e:
1a:1a:f0:99:2d:e2:dd:df:d8:82:de:29:87:9e:ce:5c:2f:8a:
b7:31:36:8a:bd:00:34:8d:f3:5f:48:92:10:9e:a3:e4:59:67:
e0:74:22:5a:3e:84:ad:af:13:c2:54:1f:2b:cb:1c:02:5f:c9:
6f:5a:c2:f9:68:c2:5c:84:68:8d:23:49:6e:2f:8f:58:ed:63:
5b:1f:ae:43:c7:73:9c:21:22:c1:a9:9e:5e:1f:2d:13:0c:b2:
ba:ac:18:05:7e:fd:b2:8f:67:22:91:6f:fb:29:ab:93:e0:70:
4c:d8:b2:73:b0:a9:39:79:e9:b2:6e:77:8a:36:dd:91:e5:2d:
e1:a4:fd:19:a2:39:cf:ad:ff:1b:be:d6:20:68:3d:16:19:7b:
35:17:a5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:29:32 2026 by rpki-client