
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
File: FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json)
Hash identifier: 4oN96crjWLh8AXFMV0aPLhfX7GUppCiQ1ybc7fUyBfg=
Subject key identifier: E4:F5:58:24:1A:2F:11:68:1F:61:18:38:9D:43:1A:1B:9D:DE:3A:E0
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial: 0626
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
Manifest number: 05E1
Signing time: Mon 20 Apr 2026 23:05:45 +0000
Manifest this update: Mon 20 Apr 2026 23:05:45 +0000
Manifest next update: Mon 27 Apr 2026 23:05:45 +0000
Files and hashes: 1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: wC8xpsfimMoiwhVyYQjohjDei7Uck8RFiHsfy/W6Wvs=)
2: 06E8BCB4B3F411F0874AC55BC4F9AE02.roa (hash: HMO8+hILpX40jIXBPLdsHDVWASlEOQyWg25odthKBWQ=)
3: 9DF3BC14E48011F0AC3D40BC426F56BC.roa (hash: 34Y8hUwkkH6eRmIMWTovUQbEQ5leyxSbVRWa0szDZH0=)
4: F6DBFB92B3F311F0929DA35BC4F9AE02.roa (hash: bGSs+GuQ8roH3KjNYjFOeAuN1jZZUS7buyDDBU1Jy+0=)
5: 48811D22EBB411F0A3585372626F56BC.roa (hash: cW9BhUWSf1eWBWfw/7wY1Z34c7OQiu9inYmolk+51Jc=)
6: B589332C498611EF90B46962C4F9AE02.roa (hash: qQDURXc4miq6wSpyJJAXvi86X+8AWTAJoPUGTUH+F/w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 23:05:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1574 (0x626)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Validity
Not Before: Apr 20 23:05:45 2026 GMT
Not After : Apr 27 23:05:45 2026 GMT
Subject: CN=69e6b149-a86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:15:95:17:33:60:63:e5:cb:cb:86:6e:43:bc:
94:84:76:d0:1d:67:3a:68:62:a3:36:2c:f0:b5:bd:
50:59:c9:3e:96:44:e2:ee:85:2b:d5:78:ef:f2:c4:
b8:16:02:b3:9d:3c:97:cf:6d:30:34:df:a6:01:44:
d4:dc:93:f0:ef:57:d1:cd:0a:fe:46:b4:fe:6a:cf:
e2:27:72:54:3a:ee:56:51:41:1c:0b:eb:c3:16:05:
e0:96:9c:18:2a:60:1a:56:58:70:3e:6a:4d:d3:20:
86:6b:db:96:83:f5:8b:a3:24:62:f3:40:69:69:de:
fb:65:24:83:44:93:9d:90:b8:11:6a:40:d4:3a:d7:
9b:51:ed:ae:e2:18:5d:fa:07:1a:34:3b:c9:8b:fc:
db:1a:d3:a4:90:28:7c:74:ad:3a:6d:52:10:10:d3:
1d:82:6f:25:f0:e4:65:36:0d:20:89:52:ab:e2:3a:
bc:85:cf:cf:b1:a4:81:1e:2a:83:3e:73:32:37:0e:
66:17:66:56:98:71:55:5c:1e:56:0b:09:49:7f:02:
b5:04:68:05:79:38:e2:83:0d:ab:b1:b2:66:bd:c0:
29:f1:89:da:fc:3f:25:fe:2d:5d:44:40:a6:a8:19:
ce:d7:26:d2:53:05:19:15:3e:f8:27:a7:28:34:77:
cc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F5:58:24:1A:2F:11:68:1F:61:18:38:9D:43:1A:1B:9D:DE:3A:E0
X509v3 Authority Key Identifier:
keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:de:d1:01:47:d8:81:8b:66:f8:d7:7d:f2:b4:d6:f2:fc:78:
6c:b9:fc:01:56:73:66:53:d2:cf:5e:09:de:1c:fd:fb:2b:f1:
66:da:4a:26:71:f6:df:02:a4:3a:88:71:eb:7d:34:a9:b1:28:
2a:6e:f3:e2:f2:f0:67:70:fe:c4:5b:46:b2:c0:1e:f2:d4:bc:
22:9d:6e:5e:36:c5:7c:31:fe:86:88:a2:11:84:99:ba:e2:a8:
66:aa:5e:4f:ec:c6:a1:ca:5d:ac:63:20:7a:f5:7b:97:ca:3c:
b9:0c:37:d8:44:25:29:2b:0c:1d:3a:e7:7b:bb:6b:e7:42:09:
60:66:ef:12:6d:3e:a0:56:49:35:40:b7:98:1c:06:06:bc:70:
9b:8f:1c:dc:6b:f0:80:c8:ef:cb:f0:53:45:34:e0:89:de:51:
97:6c:7e:1a:e5:52:32:83:76:41:00:59:0d:6c:e0:50:29:26:
d0:72:c9:ef:a5:70:47:79:28:ed:41:0d:9a:4a:26:eb:3d:4e:
32:db:ee:a6:e4:e4:b8:58:95:7e:19:eb:c2:4c:ae:ac:b9:c4:
4f:b2:c5:0e:9f:73:32:99:b4:bb:c7:a5:d2:9c:a4:e3:33:d4:
42:24:ad:14:36:83:4e:02:e2:58:26:c6:ff:83:35:e3:6c:0e:
a4:85:c4:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0
NERCMjZFOTEwHhcNMjYwNDIwMjMwNTQ1WhcNMjYwNDI3MjMwNTQ1WjAYMRYwFAYD
VQQDEw02OWU2YjE0OS1hODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2xWVFzNgY+XLy4ZuQ7yUhHbQHWc6aGKjNizwtb1QWck+lkTi7oUr1Xjv8sS4
FgKznTyXz20wNN+mAUTU3JPw71fRzQr+RrT+as/iJ3JUOu5WUUEcC+vDFgXglpwY
KmAaVlhwPmpN0yCGa9uWg/WLoyRi80Bpad77ZSSDRJOdkLgRakDUOtebUe2u4hhd
+gcaNDvJi/zbGtOkkCh8dK06bVIQENMdgm8l8ORlNg0giVKr4jq8hc/PsaSBHiqD
PnMyNw5mF2ZWmHFVXB5WCwlJfwK1BGgFeTjigw2rsbJmvcAp8Yna/D8l/i1dRECm
qBnO1ybSUwUZFT74J6coNHfMwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOT1WCQa
LxFoH2EYOJ1DGhud3jrgMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx
NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli
cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEJGQS8wNEEyNEMzNDExNDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJi
S1VnNXZKZ1ZaVlpFMnlicEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl97RAUfYgYtm+Nd98rTW8vx4bLn8AVZzZlPSz14J3hz9+yvxZtpKJnH23wKk
Oohx6300qbEoKm7z4vLwZ3D+xFtGssAe8tS8Ip1uXjbFfDH+hoiiEYSZuuKoZqpe
T+zGocpdrGMgevV7l8o8uQw32EQlKSsMHTrne7tr50IJYGbvEm0+oFZJNUC3mBwG
Brxwm48c3GvwgMjvy/BTRTTgid5Rl2x+GuVSMoN2QQBZDWzgUCkm0HLJ76VwR3ko
7UENmkom6z1OMtvupuTkuFiVfhnrwkyurLnET7LFDp9zMpm0u8el0pyk4zPUQiSt
FDaDTgLiWCbG/4M142wOpIXEBA==
-----END CERTIFICATE-----
Generated at Tue Apr 21 23:46:10 2026 by rpki-client