
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
File: FyftFR9AiSEOw-Nopaae45SE4-Y.mft (raw, json)
Hash identifier: QKMkkof0+/1fAQR6QJdJB2tcFpR+8K2nmMHlZZOqxnc=
Subject key identifier: 79:57:C1:88:F4:51:4D:E9:5F:A2:FB:4F:AC:D3:29:9C:87:38:76:FC
Authority key identifier: 17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6
Certificate issuer: /CN=A9145B5E/serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
Manifest number: 014C
Signing time: Fri 17 Apr 2026 04:55:16 +0000
Manifest this update: Fri 17 Apr 2026 04:55:15 +0000
Manifest next update: Fri 24 Apr 2026 04:55:15 +0000
Files and hashes: 1: FyftFR9AiSEOw-Nopaae45SE4-Y.crl (hash: wH/yFZd6x827Pc6HBcNf7S7gvwVUNvRW80bSq2twsUI=)
2: F149E6BE45B611EFA10B0632C4F9AE02.roa (hash: bqsTbppKfYtZ0JdNe12QWrEbSqhH/2XezTCIMzAba6g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl
rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145B5E, serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6
Validity
Not Before: Apr 17 04:55:15 2026 GMT
Not After : Apr 24 04:55:15 2026 GMT
Subject: CN=69e1bd34-7487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a8:4b:b8:c3:f0:96:85:1c:70:8f:2c:bb:3b:
f6:83:05:83:1c:47:f4:1c:c4:e2:da:af:34:30:2f:
66:61:d4:8d:61:53:04:4f:30:f1:08:ae:dc:91:c0:
63:1d:ba:36:07:50:4d:3f:79:6a:ae:c4:72:f9:99:
94:09:b1:39:46:12:fc:3b:7e:5d:2f:47:48:6e:1f:
83:b5:92:42:e9:a8:77:ee:03:c3:8e:a2:23:c5:24:
87:7e:82:89:a0:fa:5f:fb:e4:bf:41:2b:09:95:18:
14:27:9a:9f:f2:12:8f:6a:68:ed:fd:74:10:fa:6f:
b6:ec:26:ff:be:b7:c6:de:bd:4a:7a:17:d0:5e:a2:
b9:04:d3:c4:9d:e2:b2:2f:f3:3c:a5:8f:6b:6f:00:
9b:1f:6d:06:1b:a1:e6:14:40:cd:e0:6f:85:d3:62:
b8:73:89:d3:93:0c:e2:68:9b:26:e8:88:1d:98:de:
56:1b:dc:c1:a5:36:0e:01:5f:a4:38:d9:eb:9d:59:
8f:15:7d:ae:f3:a4:76:56:e8:7b:b5:27:b2:fb:d3:
2c:cf:bc:15:4e:ce:76:ad:86:ec:5b:96:12:93:41:
13:32:3b:f7:fd:04:64:bd:96:bd:93:b6:78:e8:07:
21:e5:43:ab:7e:a2:2b:0f:72:d8:ca:17:4f:cc:6c:
49:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:57:C1:88:F4:51:4D:E9:5F:A2:FB:4F:AC:D3:29:9C:87:38:76:FC
X509v3 Authority Key Identifier:
keyid:17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:cc:5a:27:71:b7:eb:91:56:9f:b4:d1:69:57:88:40:66:c9:
21:1b:d2:d7:ee:ff:e0:ec:26:b9:8b:1e:7c:f0:3c:9f:44:a2:
36:da:f2:24:da:e6:59:54:23:c2:b6:ef:cc:89:5f:88:cc:c2:
49:13:ab:c6:dc:cc:8a:bb:77:94:fd:6b:6a:9e:d6:0e:35:6a:
91:11:e2:32:d7:61:6e:ca:41:90:b9:f7:57:3e:9d:c0:50:4d:
53:7e:a5:66:31:9c:a7:a7:85:c5:6d:c3:55:f5:e7:4c:a6:06:
fe:26:3c:68:9e:43:9b:d2:fa:d6:eb:b5:94:13:43:6f:d9:2f:
b5:71:b8:7f:d8:68:33:67:ce:29:fe:a7:1f:c8:eb:dc:e3:a1:
bf:d5:45:34:0a:0b:01:ff:40:a6:79:69:01:77:6c:fb:81:79:
ef:9d:70:23:12:e9:76:6c:90:67:54:d8:4c:58:14:96:3e:1f:
f9:b6:70:16:0e:a2:97:72:e9:a9:17:17:4a:86:a5:44:42:88:
d5:dd:4f:cd:a0:d1:4e:f4:1c:3f:7a:2d:92:aa:e0:0f:af:55:
5e:5c:a9:a3:b6:8f:f1:11:2b:aa:4d:65:9b:af:ba:ad:dd:d0:
90:53:4c:89:a8:50:f0:1d:c9:27:fc:f5:71:b6:f5:27:bf:89:
4f:b5:41:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:05:49 2026 by rpki-client