
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
File: FrgD2zk43LFdxZooyXcZ2h_yClM.mft (raw, json)
Hash identifier: Xg5IsHaG/QrOqHDDie1dzKhSYsIca0/+YcPC/BT/+E8=
Subject key identifier: 27:49:7E:2C:25:38:A4:39:0C:9D:54:B6:43:F6:95:36:A8:B6:47:E8
Authority key identifier: 16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53
Certificate issuer: /CN=A9149E0D/serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53
Certificate serial: 0C15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
Manifest number: 0C08
Signing time: Mon 22 Jun 2026 18:50:43 +0000
Manifest this update: Mon 22 Jun 2026 18:50:43 +0000
Manifest next update: Mon 29 Jun 2026 18:50:43 +0000
Files and hashes: 1: FrgD2zk43LFdxZooyXcZ2h_yClM.crl (hash: ELSuJw2fvQkLfrB1VhT3w1Dfmb19nR7lXzcY3pn1ICc=)
2: C8FB48F808AF11EBAB78DF6BC4F9AE02.roa (hash: mSjl0ibvEOuCK6DB5KHjDY/U2WKZFdSr/+i3luIa4aI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl
rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 18:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3093 (0xc15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149E0D, serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53
Validity
Not Before: Jun 22 18:50:43 2026 GMT
Not After : Jun 29 18:50:43 2026 GMT
Subject: CN=6a398403-d5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:64:03:98:61:08:6b:84:f2:62:5c:d2:57:cd:
ca:77:f2:1d:37:ea:8c:8d:96:0b:be:27:7c:e8:4f:
e6:71:e0:66:2a:44:cd:f1:b9:0c:64:3f:ab:a3:14:
cd:00:f4:0f:59:cb:bb:91:66:74:3f:1a:ba:c8:09:
3e:81:06:3a:d3:98:0a:ce:17:2b:7b:53:f6:1f:1a:
b1:60:cf:67:32:f6:1f:82:e8:64:4e:57:ab:ce:b4:
cb:dd:e4:24:26:93:a2:d0:a8:e8:99:0a:45:f2:e8:
22:0a:15:79:c9:76:75:24:17:ea:4d:d8:9f:57:1d:
a2:e1:32:ed:9c:4e:46:88:0a:89:2f:8d:90:54:47:
1a:ab:49:2b:12:a3:5f:81:13:aa:9e:91:42:88:49:
ef:ab:1e:79:00:ac:9b:ef:f8:fd:c1:78:7d:f4:65:
ba:07:88:22:a4:2c:2a:12:e5:fa:86:39:84:ec:6a:
bc:70:cc:f6:ab:b4:04:b4:2a:97:be:87:b9:b2:a0:
d7:4a:5f:d0:d6:a0:39:6d:8a:c6:f6:4c:4f:53:68:
51:40:c0:e6:ea:1c:50:9f:de:21:91:cc:32:31:a8:
26:3b:c1:e7:a1:88:6c:da:9f:59:d4:89:84:4c:3c:
b7:d3:ff:78:8b:ed:ec:41:1c:5a:aa:bb:87:88:e4:
d7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:49:7E:2C:25:38:A4:39:0C:9D:54:B6:43:F6:95:36:A8:B6:47:E8
X509v3 Authority Key Identifier:
keyid:16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:92:e0:24:92:8f:bd:01:fd:dc:9f:19:0a:02:48:68:6f:c0:
5e:22:c0:c2:8d:11:e2:0c:d7:46:c6:9c:17:c9:e4:97:86:e5:
51:eb:0e:25:ca:36:a4:1a:d2:c6:26:c6:2b:c7:69:0b:1e:db:
e0:64:62:53:c7:06:87:5e:57:95:5a:58:d3:20:6a:ed:e6:3c:
8e:85:51:a5:69:02:7e:ab:3f:04:e1:cc:13:81:0d:a1:fe:91:
a9:82:66:0c:4c:25:7a:f3:76:ae:bc:fc:8d:24:70:91:29:e8:
3a:6f:24:3f:a4:84:76:5d:12:c7:7f:f4:a9:b0:8d:4f:ff:4b:
11:37:14:14:ae:87:c4:72:54:a9:f7:31:a2:f2:84:69:55:15:
f9:bb:f4:9e:52:6f:da:10:42:bb:04:18:37:1e:6b:ce:f8:3e:
8b:04:c5:13:f4:43:3f:a4:45:85:35:d8:bc:a6:a2:d8:41:e4:
e4:3b:1c:fd:60:7d:01:b8:ca:29:a2:43:2a:82:6b:24:e6:dd:
9a:b8:b1:0c:89:93:29:3e:c5:d4:4d:10:7e:77:cf:3d:8d:57:
c9:b0:d2:a1:58:56:1b:76:95:df:57:7c:ec:fa:93:f5:49:a7:
ee:05:df:83:81:a9:af:74:3f:b1:68:34:d0:a8:29:b0:95:c4:
31:b2:9e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:57 2026 by rpki-client