
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
File: FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json)
Hash identifier: O2ljatjZHAxngA/dTNSWLp4dUYiqR4v0N3LRtHiXGak=
Subject key identifier: 1F:27:0B:F0:66:3E:1D:B1:3C:26:A5:B8:58:FC:90:1E:4E:77:EF:2C
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial: 060F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
Manifest number: 05CA
Signing time: Fri 06 Mar 2026 22:57:10 +0000
Manifest this update: Fri 06 Mar 2026 22:57:10 +0000
Manifest next update: Fri 13 Mar 2026 22:57:10 +0000
Files and hashes: 1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: rBFwYNdkGFH4m3rfA/wdDMepQI5QnGrqbN89+vujzSA=)
2: F6DBFB92B3F311F0929DA35BC4F9AE02.roa (hash: bGSs+GuQ8roH3KjNYjFOeAuN1jZZUS7buyDDBU1Jy+0=)
3: 9DF3BC14E48011F0AC3D40BC426F56BC.roa (hash: 34Y8hUwkkH6eRmIMWTovUQbEQ5leyxSbVRWa0szDZH0=)
4: 06E8BCB4B3F411F0874AC55BC4F9AE02.roa (hash: HMO8+hILpX40jIXBPLdsHDVWASlEOQyWg25odthKBWQ=)
5: 48811D22EBB411F0A3585372626F56BC.roa (hash: cW9BhUWSf1eWBWfw/7wY1Z34c7OQiu9inYmolk+51Jc=)
6: B589332C498611EF90B46962C4F9AE02.roa (hash: qQDURXc4miq6wSpyJJAXvi86X+8AWTAJoPUGTUH+F/w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 22:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1551 (0x60f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Validity
Not Before: Mar 6 22:57:10 2026 GMT
Not After : Mar 13 22:57:10 2026 GMT
Subject: CN=69ab5bc6-a3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:91:5e:a0:28:b5:77:8f:22:c4:7f:df:7c:20:
8d:b0:00:e6:8e:0a:d1:be:00:b1:9f:27:8a:68:5d:
fd:c4:02:8d:a7:80:ce:30:98:d5:cf:9d:e0:eb:e7:
6c:8d:3f:39:82:34:43:d1:74:b8:4b:bb:16:99:ed:
d6:80:4b:0e:07:be:7f:65:04:4d:90:59:a5:d2:c2:
37:94:43:40:20:38:9b:ca:fa:03:1f:97:95:12:42:
83:a1:73:10:15:68:83:02:41:bd:11:f4:e5:9c:ec:
a0:ba:56:96:0e:3c:ae:3e:cc:bb:59:6b:70:73:3c:
67:20:5e:86:3a:83:06:ed:95:18:27:09:16:65:e9:
e5:63:e6:1b:98:37:ab:93:a7:14:53:35:63:db:77:
a2:f0:52:a3:bb:39:df:65:a1:5c:b1:55:2f:6d:06:
6e:74:2b:02:e6:51:d7:23:7d:49:5e:78:e7:85:1c:
2a:5e:c0:3e:35:e8:aa:75:fa:c4:94:61:ce:b2:cb:
d2:9e:6d:a3:d5:32:8a:ff:d9:66:98:1b:aa:b5:d9:
80:d8:b4:89:fe:c3:c3:f8:4e:d7:da:56:02:b2:15:
03:c1:b0:fe:56:e2:9d:4a:07:92:3f:8a:8f:02:27:
91:38:7b:f3:87:60:92:6a:b5:49:7b:85:5f:45:f1:
54:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:27:0B:F0:66:3E:1D:B1:3C:26:A5:B8:58:FC:90:1E:4E:77:EF:2C
X509v3 Authority Key Identifier:
keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:c2:1c:06:de:87:ed:0d:e9:87:91:01:eb:95:ab:36:69:f1:
d7:d6:f1:43:86:69:99:b8:e5:a3:96:b7:16:ce:51:ef:cc:95:
d1:a1:95:15:e3:bc:bd:ba:14:31:79:6e:84:ae:60:4d:13:c0:
b1:b4:e9:4c:ca:2c:41:78:a6:3d:92:a5:2c:69:cf:0c:d4:eb:
5c:6e:ff:f1:eb:fe:5a:73:ce:3c:59:be:1f:09:84:fe:f7:de:
0d:34:3a:cf:e0:e8:3a:25:f2:61:f7:04:f8:4c:de:5e:98:be:
71:85:8f:6f:88:18:cd:6d:83:a7:2a:58:09:19:e8:57:a4:86:
4d:37:8a:31:da:dd:db:6e:02:b7:82:c3:cc:ac:4a:9f:9b:71:
ae:7c:be:f0:9c:a3:7c:7c:2a:4b:08:92:d9:75:5c:04:b6:3c:
c8:fe:51:d4:38:f2:70:6c:e3:4c:87:ed:9f:f6:04:75:34:b7:
04:dc:db:26:11:30:98:1f:36:e4:1e:d7:cd:46:b6:e0:1e:3e:
d9:74:8d:50:7c:43:06:7e:36:b5:b6:93:4c:de:e0:21:70:03:
45:95:1a:d3:64:09:80:4e:d8:67:70:4e:2d:9d:28:d6:64:35:
df:d9:43:5f:d9:41:33:33:f5:cd:7d:c2:90:72:a6:bb:e2:6f:
f7:e9:e8:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0
NERCMjZFOTEwHhcNMjYwMzA2MjI1NzEwWhcNMjYwMzEzMjI1NzEwWjAYMRYwFAYD
VQQDEw02OWFiNWJjNi1hM2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxZFeoCi1d48ixH/ffCCNsADmjgrRvgCxnyeKaF39xAKNp4DOMJjVz53g6+ds
jT85gjRD0XS4S7sWme3WgEsOB75/ZQRNkFml0sI3lENAIDibyvoDH5eVEkKDoXMQ
FWiDAkG9EfTlnOygulaWDjyuPsy7WWtwczxnIF6GOoMG7ZUYJwkWZenlY+YbmDer
k6cUUzVj23ei8FKjuznfZaFcsVUvbQZudCsC5lHXI31JXnjnhRwqXsA+NeiqdfrE
lGHOssvSnm2j1TKK/9lmmBuqtdmA2LSJ/sPD+E7X2lYCshUDwbD+VuKdSgeSP4qP
AieROHvzh2CSarVJe4VfRfFUfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB8nC/Bm
Ph2xPCaluFj8kB5Od+8sMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx
NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli
cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEJGQS8wNEEyNEMzNDExNDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJi
S1VnNXZKZ1ZaVlpFMnlicEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANcIcBt6H7Q3ph5EB65WrNmnx19bxQ4Zpmbjlo5a3Fs5R78yV0aGVFeO8vboU
MXluhK5gTRPAsbTpTMosQXimPZKlLGnPDNTrXG7/8ev+WnPOPFm+HwmE/vfeDTQ6
z+DoOiXyYfcE+EzeXpi+cYWPb4gYzW2DpypYCRnoV6SGTTeKMdrd224Ct4LDzKxK
n5txrny+8JyjfHwqSwiS2XVcBLY8yP5R1DjycGzjTIftn/YEdTS3BNzbJhEwmB82
5B7XzUa24B4+2XSNUHxDBn42tbaTTN7gIXADRZUa02QJgE7YZ3BOLZ0o1mQ139lD
X9lBMzP1zX3CkHKmu+Jv9+nonw==
-----END CERTIFICATE-----
Generated at Sat Mar 7 19:04:36 2026 by rpki-client