
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
File: FyftFR9AiSEOw-Nopaae45SE4-Y.mft (raw, json)
Hash identifier: ME5QDcWoEMVCjtLQ59Lfq4rAolsfzuL67wcKPs7owBI=
Subject key identifier: 5A:93:2D:B8:C2:85:76:58:DE:F2:33:33:2E:D6:14:1A:35:D7:70:EE
Authority key identifier: 17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6
Certificate issuer: /CN=A9145B5E/serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6
Certificate serial: 013A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
Manifest number: 0135
Signing time: Tue 03 Mar 2026 05:06:00 +0000
Manifest this update: Tue 03 Mar 2026 05:05:59 +0000
Manifest next update: Tue 10 Mar 2026 05:05:59 +0000
Files and hashes: 1: FyftFR9AiSEOw-Nopaae45SE4-Y.crl (hash: foV6oLO/kk5MTmX8CJN5WuyKoiG8nllgvMwz0f2uVkw=)
2: F149E6BE45B611EFA10B0632C4F9AE02.roa (hash: bqsTbppKfYtZ0JdNe12QWrEbSqhH/2XezTCIMzAba6g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl
rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:05:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145B5E, serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6
Validity
Not Before: Mar 3 05:05:59 2026 GMT
Not After : Mar 10 05:05:59 2026 GMT
Subject: CN=69a66c38-775a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:67:ae:a9:3f:2c:f1:76:bf:03:a6:22:9b:aa:
7b:6f:a4:93:be:3e:d4:b7:d3:20:a5:59:9e:bd:7e:
07:41:43:4b:83:a2:bb:82:c0:d9:13:cc:ac:1e:df:
77:31:67:25:53:a9:f3:35:09:af:ee:f8:b6:f8:74:
5b:5d:e3:00:65:00:d7:55:43:85:31:dd:32:0f:45:
68:cc:0d:13:7f:b9:17:9a:10:dd:b1:3c:1f:62:db:
fa:ef:f9:26:e4:2c:af:f8:6f:ae:b0:5e:f4:ba:0c:
3d:95:91:c4:8d:82:ea:a4:90:49:4b:97:89:ff:1c:
fb:48:9a:78:71:1b:3c:8a:f6:59:ac:db:16:12:66:
25:3f:d7:90:87:0f:4f:0f:fa:3e:57:1f:69:35:c9:
3a:1e:ee:2c:ef:a6:1c:5c:da:cf:5b:3e:8d:54:d0:
fb:e2:6c:1d:b1:f9:98:cf:2e:30:54:19:9f:ab:56:
e7:4f:c2:5c:af:83:78:92:42:81:f0:dd:3a:42:0e:
f8:ad:7a:ce:02:ea:04:dc:ef:45:67:9c:37:d7:a5:
48:30:b8:65:09:bf:e3:e6:ff:94:f5:e2:b0:54:23:
f7:e0:54:5c:e0:70:58:9f:6c:38:2b:71:5c:03:4c:
c6:98:a7:d1:80:7d:46:81:4f:b6:74:95:e1:94:0c:
99:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:93:2D:B8:C2:85:76:58:DE:F2:33:33:2E:D6:14:1A:35:D7:70:EE
X509v3 Authority Key Identifier:
keyid:17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:16:93:0a:b1:de:41:89:9f:d4:a1:fa:de:20:ee:56:38:64:
a5:6d:9f:4f:cf:49:2b:1e:93:7d:d8:f0:00:65:ae:13:55:9d:
52:74:ec:58:de:88:c8:20:ac:2a:23:ad:a2:8b:e1:ca:6f:2a:
5e:d1:97:75:85:f6:f7:14:01:3c:70:68:82:7e:d5:61:9b:66:
c2:d8:45:df:06:8b:58:8f:29:95:74:95:ab:da:05:56:88:1f:
86:15:82:f0:a3:99:a1:62:84:c9:97:51:ab:cd:bf:81:e5:2b:
2f:9a:dd:59:b6:99:75:2c:8a:17:68:67:f3:66:14:ec:e0:4f:
c6:d2:37:e9:7c:a3:af:7d:be:1a:83:34:0e:f0:46:81:82:4d:
9e:59:84:84:c1:2a:37:79:97:ff:f6:61:8b:83:bd:5f:ca:18:
4c:b9:6e:75:30:a3:30:e7:12:a1:62:d9:df:35:24:f7:8b:b6:
ce:c4:0e:da:7f:9b:d9:db:55:3b:b4:bb:70:4d:ac:ee:7b:be:
04:8d:09:e4:fa:01:91:29:ff:5c:2f:d9:e5:63:06:ba:57:aa:
02:6f:e5:d3:c8:b0:80:1f:2b:6f:8b:d2:10:97:28:57:e3:c3:
33:86:47:13:b4:b0:f5:3f:29:36:6e:bd:9e:44:51:07:ec:aa:
fa:03:63:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDVCNUUxMTAvBgNVBAUTKDE3MjdFRDE1MUY0MDg5MjEwRUMzRTM2OEE1QTY5RUUz
OTQ4NEUzRTYwHhcNMjYwMzAzMDUwNTU5WhcNMjYwMzEwMDUwNTU5WjAYMRYwFAYD
VQQDEw02OWE2NmMzOC03NzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnmeuqT8s8Xa/A6Yim6p7b6STvj7Ut9MgpVmevX4HQUNLg6K7gsDZE8ysHt93
MWclU6nzNQmv7vi2+HRbXeMAZQDXVUOFMd0yD0VozA0Tf7kXmhDdsTwfYtv67/km
5Cyv+G+usF70ugw9lZHEjYLqpJBJS5eJ/xz7SJp4cRs8ivZZrNsWEmYlP9eQhw9P
D/o+Vx9pNck6Hu4s76YcXNrPWz6NVND74mwdsfmYzy4wVBmfq1bnT8Jcr4N4kkKB
8N06Qg74rXrOAuoE3O9FZ5w316VIMLhlCb/j5v+U9eKwVCP34FRc4HBYn2w4K3Fc
A0zGmKfRgH1GgU+2dJXhlAyZFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFqTLbjC
hXZY3vIzMy7WFBo113DuMB8GA1UdIwQYMBaAFBcn7RUfQIkhDsPjaKWmnuOUhOPm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUI1RS83REQ3QkJCQzQ1
QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9GeWZ0RlI5QWlTRU93LU5vcGFhZTQ1U0U0
LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0Z5ZnRGUjlBaVNFT3ctTm9wYWFlNDVTRTQtWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NUI1RS83REQ3QkJCQzQ1QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9GeWZ0RlI5QWlT
RU93LU5vcGFhZTQ1U0U0LVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALBaTCrHeQYmf1KH63iDuVjhkpW2fT89JKx6TfdjwAGWuE1WdUnTsWN6IyCCs
KiOtoovhym8qXtGXdYX29xQBPHBogn7VYZtmwthF3waLWI8plXSVq9oFVogfhhWC
8KOZoWKEyZdRq82/geUrL5rdWbaZdSyKF2hn82YU7OBPxtI36Xyjr32+GoM0DvBG
gYJNnlmEhMEqN3mX//Zhi4O9X8oYTLludTCjMOcSoWLZ3zUk94u2zsQO2n+b2dtV
O7S7cE2s7nu+BI0J5PoBkSn/XC/Z5WMGuleqAm/l08iwgB8rb4vSEJcoV+PDM4ZH
E7Sw9T8pNm69nkRRB+yq+gNjlw==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:20:45 2026 by rpki-client