
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
File: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft (raw, json)
Hash identifier: 16m6II9b9sJvKcVuADIFti10YUQjqGF+JX1k2a8W53Q=
Subject key identifier: E9:36:CA:53:AD:F9:79:A7:93:37:BE:BF:EA:78:8F:E3:D1:F3:52:3E
Authority key identifier: 7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B
Certificate issuer: /CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
Certificate serial: 0741
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
Manifest number: 0738
Signing time: Tue 06 Oct 2026 22:06:21 +0000
Manifest this update: Tue 06 Oct 2026 22:06:21 +0000
Manifest next update: Tue 13 Oct 2026 22:06:21 +0000
Files and hashes: 1: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl (hash: EfKp7nv385gaxvh5v95o6TxJ1N7Ga8fZVpLgp1f/EEI=)
2: AB791BEE7BC711F0B0A56A74C4F9AE02.roa (hash: 3IS8d9rNNKC3jMPLm6E3NCIukY1W1nIbd5hU2y+Tzyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl
rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 22:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1857 (0x741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152A4E, serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
Validity
Not Before: Oct 6 22:06:21 2026 GMT
Not After : Oct 13 22:06:21 2026 GMT
Subject: CN=6ac570dd-5215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:52:6e:11:82:61:53:93:1e:df:96:c6:13:2c:
9e:bc:52:1c:5b:9e:00:f4:cc:83:e7:94:5d:c3:3d:
32:5b:af:d2:b0:18:59:bb:38:9b:9b:9b:94:c8:b0:
c9:3e:cc:1e:b0:3f:17:9c:fe:fe:9e:f9:6e:fb:2c:
9c:13:12:be:ea:78:11:7f:49:15:37:61:25:d3:0a:
68:6d:57:5e:36:41:42:82:99:ce:19:82:ed:e5:6b:
ed:1e:52:92:27:c9:7b:1a:5c:69:30:9b:27:1d:f0:
4a:85:7f:96:af:4f:1e:f3:3a:76:05:f2:3b:37:aa:
ae:64:0e:51:04:b5:75:e0:7a:0b:eb:bd:d2:0a:92:
b6:ba:f0:e4:b8:f0:bc:b8:a8:6e:7a:ca:13:4e:25:
94:40:39:ff:b1:03:4a:c8:6a:a2:43:57:6a:10:a4:
a7:67:c9:2e:6a:7a:52:60:2d:34:19:a9:b6:ea:68:
81:47:b4:d3:22:cc:4d:48:df:d8:13:27:c1:9c:45:
c5:bd:f2:0c:14:0f:4e:15:24:23:80:2e:8f:c0:14:
97:16:6a:d6:1c:05:f9:28:41:ff:81:3b:f4:8f:5f:
9c:93:46:90:53:d0:a3:1a:b9:79:51:32:e6:bb:c8:
06:b0:e1:9e:d9:88:f2:b5:e1:f6:2e:19:74:74:93:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:36:CA:53:AD:F9:79:A7:93:37:BE:BF:EA:78:8F:E3:D1:F3:52:3E
X509v3 Authority Key Identifier:
keyid:7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:27:c4:49:b8:c6:84:10:19:80:ee:f4:42:4e:fe:c3:a6:8e:
64:a6:6e:c6:4f:f5:36:32:70:1d:02:34:a4:7c:78:11:8f:0d:
34:aa:a6:48:f9:2e:c4:fe:ec:1a:ce:49:71:80:02:bb:69:8d:
ab:64:22:e0:83:72:be:29:d1:46:cc:e0:f5:fd:db:b4:aa:86:
01:d1:98:e8:2b:0b:c8:82:28:bb:15:8a:b7:1e:dc:94:74:5b:
b2:33:24:77:31:8d:c5:d7:1d:e3:0c:86:1a:de:ca:b8:b9:34:
0f:02:c5:c9:11:6b:11:9d:00:42:32:5e:de:96:03:43:63:d3:
b4:54:13:21:f1:8f:7b:5e:6a:3d:63:a4:c5:32:66:b2:9d:0e:
6b:6c:03:ab:c1:13:58:d8:6f:f5:f8:48:89:72:48:49:5c:c2:
e7:ad:17:b7:75:83:a0:9e:f0:93:87:6a:6c:d2:32:eb:93:29:
0f:27:b9:60:cf:62:d2:e6:a0:1a:fd:7f:9c:fd:ce:12:16:87:
c3:c9:a8:2c:c9:f1:20:a4:32:c1:41:ee:78:44:57:74:3a:a1:
60:91:2d:57:50:4e:79:13:93:c7:32:78:1a:74:28:25:4a:22:
60:cc:e8:6a:7e:3c:51:35:e4:0b:03:ef:f7:7f:e1:bf:98:d5:
46:0d:41:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:29:26 2026 by rpki-client