
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
File: FWbBYbuz41NHqXrE1YFtjt5UIY4.mft (raw, json)
Hash identifier: JJTxmzuykH4in50V4/AYtwQNPKsZEuucUxlhdMkOumE=
Subject key identifier: 02:45:F6:41:74:91:29:A0:3F:73:8B:A3:60:57:2C:89:94:E8:34:52
Authority key identifier: 15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E
Certificate issuer: /CN=A9134FAF/serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E
Certificate serial: 91
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
Manifest number: 8E
Signing time: Tue 03 Mar 2026 07:09:20 +0000
Manifest this update: Tue 03 Mar 2026 07:09:19 +0000
Manifest next update: Tue 10 Mar 2026 07:09:19 +0000
Files and hashes: 1: FWbBYbuz41NHqXrE1YFtjt5UIY4.crl (hash: dOZSGf8LkKJxj8CbNqfLJ63xpCzi29iubv3HFDZ5gl4=)
2: 4CB714B644AA11F0B7FB6E72C4F9AE02.roa (hash: Kpi2lExwMtUBB90ubhO2BgOMUMkDluldZJCK6di+564=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl
rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134FAF, serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E
Validity
Not Before: Mar 3 07:09:19 2026 GMT
Not After : Mar 10 07:09:19 2026 GMT
Subject: CN=69a6891f-d9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:f3:69:9a:6d:2f:17:a8:6d:e1:67:10:05:
43:51:98:69:e0:fe:4a:72:e6:25:3f:66:f3:b2:ab:
36:02:25:4b:67:5f:0f:a2:b5:50:ee:3c:99:b6:6b:
e1:98:6c:e0:5e:7b:03:27:40:d2:af:b8:ef:47:73:
02:32:44:5b:04:e2:c4:d7:35:95:66:ee:a2:77:eb:
f3:7c:d5:64:a2:58:ed:e2:c2:7a:9f:e5:c9:76:42:
43:ed:ed:8f:71:c1:15:85:4f:35:5b:ba:75:d4:78:
75:91:06:5f:96:39:e8:73:9f:9b:88:02:71:eb:ef:
c3:17:e8:12:6a:2d:2a:ab:fb:13:9a:81:6b:f8:5f:
6f:54:79:ad:3b:b0:e2:57:80:ca:ec:99:83:ba:14:
ba:ed:74:af:3a:66:f9:06:1e:64:0b:0f:79:af:93:
e9:a7:87:92:73:fa:59:3f:46:ad:f6:7b:20:10:7a:
7d:42:3d:cd:81:81:00:1b:e1:a5:05:d0:62:80:fc:
8e:11:9b:81:87:39:33:89:84:23:fc:b6:42:72:35:
ab:e1:df:91:13:45:dc:80:44:7e:80:64:61:3e:84:
9f:3b:95:58:b0:04:80:be:7c:30:92:e5:b8:0b:ce:
ad:a9:bf:df:fa:ad:ff:bc:8a:eb:b5:bc:a1:81:27:
b2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:45:F6:41:74:91:29:A0:3F:73:8B:A3:60:57:2C:89:94:E8:34:52
X509v3 Authority Key Identifier:
keyid:15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:58:8c:7a:44:aa:5a:66:39:1a:79:51:43:87:59:65:40:57:
34:64:d4:f1:6b:fd:84:7c:bb:e9:26:dd:24:aa:3f:cb:29:8e:
58:01:0e:f9:85:8a:d7:48:fa:41:d6:d8:d7:97:dc:3e:f4:e1:
fb:d3:f5:3a:6c:5a:59:61:9e:be:b9:df:fc:cc:b5:b2:59:71:
7b:8c:5a:e2:c1:1f:66:43:84:eb:77:3b:81:02:ab:74:04:3d:
86:0b:d0:ab:72:1c:b6:cf:12:f5:fe:37:9d:6e:84:e7:6c:f9:
5e:7d:3b:42:ee:78:dd:9e:b6:b3:17:9a:9f:12:8f:b2:91:24:
58:9a:b9:c6:08:77:0a:ea:60:f8:ec:30:24:9d:57:74:64:c1:
05:d1:90:50:05:17:0d:cb:1a:99:24:ac:88:02:b3:20:03:d4:
9c:2d:ef:e2:e5:43:56:f4:ad:48:ff:a0:0d:fa:f4:03:80:30:
5a:49:5d:8d:ef:1f:eb:09:7f:15:72:06:9e:7a:67:d1:87:72:
09:dc:90:f1:29:05:a6:b0:1f:f8:a4:63:e2:42:34:8c:f8:35:
1a:ef:67:cd:fb:d9:60:48:db:f3:c2:13:51:c8:9c:db:ff:12:
56:be:e0:01:5b:52:8c:32:bf:41:ae:67:da:15:5a:28:c2:98:
f8:60:92:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:41:21 2026 by rpki-client