
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
File: FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json)
Hash identifier: MNHuLjyU0KFO+cqTCG6NBhKhmiV0k1nlo8R4m7iRvYE=
Subject key identifier: 09:F3:53:1D:88:4C:C9:C8:91:AE:93:CB:FF:38:4A:9E:32:8B:86:FD
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial: 0692
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
Manifest number: 0648
Signing time: Sat 24 Oct 2026 22:52:07 +0000
Manifest this update: Sat 24 Oct 2026 22:52:06 +0000
Manifest next update: Sat 31 Oct 2026 22:52:06 +0000
Files and hashes: 1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: fpCpownWphYVaO9VIRR4y9T2WwKKciekt7+n47ZvXRk=)
2: F5DFB1A6CD1B11F19D97589A0666CEF9.roa (hash: 1z3U6r7srJMsG9DhVTJU+5Mt7lHfVXl6uNKmn6SG2QA=)
3: CE7C5CB68D7111F199777AC57111F970.roa (hash: GfLxsqqj8OHM9JcOwSeCnw3ScXddEC0QU7of3bUAy9Y=)
4: F6DBFB92B3F311F0929DA35BC4F9AE02.roa (hash: bGSs+GuQ8roH3KjNYjFOeAuN1jZZUS7buyDDBU1Jy+0=)
5: B589332C498611EF90B46962C4F9AE02.roa (hash: qQDURXc4miq6wSpyJJAXvi86X+8AWTAJoPUGTUH+F/w=)
6: 9DF3BC14E48011F0AC3D40BC426F56BC.roa (hash: 34Y8hUwkkH6eRmIMWTovUQbEQ5leyxSbVRWa0szDZH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 22:52:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1682 (0x692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Validity
Not Before: Oct 24 22:52:06 2026 GMT
Not After : Oct 31 22:52:06 2026 GMT
Subject: CN=6add3697-47d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:9f:a7:8c:fd:9a:e4:ba:c5:1d:ea:6b:83:
e4:51:b8:14:b7:4d:10:0a:6a:46:f8:1d:72:c0:c8:
a5:ca:53:bd:bf:f3:0b:e1:e0:6c:4c:9e:13:dd:e8:
76:23:34:af:09:ab:6d:4d:12:40:83:1f:81:2d:2b:
58:4c:d6:6d:48:ed:00:3e:03:9e:02:0d:eb:11:65:
d9:cd:12:ae:d5:70:e9:3e:f0:09:aa:96:9d:a4:4c:
01:77:9c:c9:00:17:cb:93:78:6c:3f:06:d3:77:b3:
eb:83:3e:17:37:a2:0b:22:15:50:66:31:39:77:16:
74:3d:ce:b5:7d:cf:27:14:bd:ae:0d:51:e0:af:65:
1c:96:f0:cf:85:42:21:2d:a5:e5:3f:78:48:31:4d:
f0:a3:d1:60:04:f0:7f:b3:b5:78:1c:54:3f:c1:93:
c4:93:90:45:bc:18:3d:3c:24:01:0f:56:04:c1:aa:
99:9e:e1:48:c6:2d:c6:59:58:cd:5e:16:2f:88:16:
26:3a:e2:8d:74:b8:f6:d0:d6:ef:4a:62:05:e3:1a:
ff:5b:8e:54:89:46:42:31:94:81:85:61:7c:ed:cf:
b9:30:ce:72:13:6d:df:9f:98:6d:ef:83:96:ec:d0:
3d:69:e6:98:e2:10:ff:07:90:9e:93:a4:2e:15:ed:
26:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F3:53:1D:88:4C:C9:C8:91:AE:93:CB:FF:38:4A:9E:32:8B:86:FD
X509v3 Authority Key Identifier:
keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:51:94:c2:2d:43:39:e2:f4:1a:aa:d0:8e:78:16:e8:9b:ce:
ac:05:98:38:25:8d:17:2c:a9:d6:c0:d0:8a:0f:b7:f7:bd:60:
23:a6:3e:bb:f4:d6:9d:8a:63:de:88:9d:a4:d6:1c:5e:1a:22:
2f:8f:fb:9d:e5:e3:d6:9c:29:ab:9a:fe:86:f3:86:82:36:c6:
c5:f3:26:31:06:a4:b2:85:07:8d:83:39:67:b1:af:d6:f3:13:
27:6f:8f:d2:81:e5:86:49:60:58:d7:da:7d:70:e1:ca:3d:e4:
45:98:73:88:a7:59:b9:b1:d4:13:5f:05:d8:1f:c0:87:f1:11:
08:7b:9f:37:79:2f:ec:aa:cd:4b:11:8e:ba:b2:ac:c0:4d:ab:
b7:89:a5:e1:ae:73:a5:67:2d:9e:59:28:9e:12:70:af:fe:c7:
ee:62:cc:fe:77:5c:6a:1d:19:0a:05:5f:f7:e6:de:2c:97:28:
0b:42:d3:25:2f:d6:a8:b5:d6:7d:90:f1:82:cb:39:6d:50:1f:
79:a5:17:91:77:61:89:f4:67:ee:dc:bf:ca:c6:0b:17:3c:67:
9c:01:32:5f:00:38:92:df:30:36:cb:2e:65:e1:75:0b:c0:e3:
73:9c:83:04:b6:8d:f0:db:a9:a9:63:5a:39:6a:17:4c:9f:18:
cb:71:e5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:54:21 2026 by rpki-client