
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft
File: f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft (raw, json)
Hash identifier: +eN6IVswG77ZcNLt708DNd/31MKM8ihpODrGXvZHaic=
Subject key identifier: 7A:6D:5F:09:D3:F2:85:4D:5A:21:65:63:D8:67:E1:5F:15:E0:B0:59
Authority key identifier: 7F:49:35:89:5C:2D:6C:B6:2C:41:75:C4:8E:6E:D9:5D:C1:68:19:7E
Certificate issuer: /CN=A9153F90/serialNumber=7F4935895C2D6CB62C4175C48E6ED95DC168197E
Certificate serial: 48
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft
Manifest number: 46
Signing time: Fri 17 Jul 2026 09:45:26 +0000
Manifest this update: Fri 17 Jul 2026 09:45:26 +0000
Manifest next update: Fri 24 Jul 2026 09:45:26 +0000
Files and hashes: 1: f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl (hash: xGk2FT7RSGOa/Z/RrBmV1YeM05U7AJzvVWdCC5ulwxM=)
2: A1369C781C3B11F1A9F167973A3D8C67.roa (hash: Ln2S+wJ8y0nN9Ehuf580iL5liKxjlD5bK/WsoPCx1Ew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl
rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153F90, serialNumber=7F4935895C2D6CB62C4175C48E6ED95DC168197E
Validity
Not Before: Jul 17 09:45:26 2026 GMT
Not After : Jul 24 09:45:26 2026 GMT
Subject: CN=6a59f9b6-0e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fd:05:f0:b9:68:29:c0:95:3e:88:d7:d0:4d:
f4:6a:c9:5f:e1:64:06:bd:ce:5f:4d:e4:a5:1d:49:
98:02:a2:5c:7a:4d:2f:5f:4c:ea:63:a0:ff:b7:9e:
65:69:53:96:1f:8a:c4:66:a3:ad:a8:1a:18:a0:86:
63:8f:9f:b9:9c:41:de:d9:2d:89:30:73:04:ca:41:
af:a0:3c:22:86:48:53:77:9b:73:df:19:02:58:9c:
5c:fa:e6:f9:27:ae:8e:4b:10:54:12:8a:af:72:8c:
fe:18:ac:1e:05:26:60:72:b1:9f:cf:42:dc:e2:f0:
16:c7:91:7e:6f:2f:35:6d:2e:5d:03:67:6d:8c:0d:
4e:60:a5:9d:46:6d:11:95:82:77:53:5e:80:05:95:
76:c0:28:31:ec:4a:4d:44:08:55:40:80:53:a9:65:
80:a8:54:60:3f:86:0b:30:b1:47:9a:b2:ea:ff:b2:
b0:d9:54:41:6c:55:51:55:d3:45:82:44:28:19:fe:
c2:4c:ff:a0:f0:da:71:bf:ec:27:4d:c6:a2:7e:44:
61:5b:9d:ef:b6:70:c1:27:e2:2d:7e:05:62:80:6b:
f9:54:8c:f4:2c:89:82:a4:12:9e:9e:4d:28:a2:c0:
c5:eb:01:87:5e:b2:1f:4d:7d:07:f9:21:ae:90:e3:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6D:5F:09:D3:F2:85:4D:5A:21:65:63:D8:67:E1:5F:15:E0:B0:59
X509v3 Authority Key Identifier:
keyid:7F:49:35:89:5C:2D:6C:B6:2C:41:75:C4:8E:6E:D9:5D:C1:68:19:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:7b:5b:48:96:b6:ce:02:bd:5a:52:87:75:e8:cb:d6:96:fe:
0b:df:4a:80:86:1d:1e:ea:7e:85:67:ae:f1:e8:40:63:24:ae:
1d:a3:f4:8c:2c:74:49:d6:a7:04:74:e7:0b:f4:b8:b2:21:7c:
4e:a9:ed:8d:f9:45:1d:27:76:b1:96:85:04:86:f0:4c:fa:fc:
bd:52:12:df:ad:d0:cd:95:3b:86:1c:80:eb:ec:aa:6f:80:e4:
be:68:c6:48:7b:d6:a4:99:fb:ec:e1:ba:36:a5:ab:1a:e1:1e:
7e:99:e8:a4:a1:5e:d8:9e:64:fc:db:40:d7:ff:c3:3a:68:91:
c5:fe:0a:71:c4:e9:36:57:e2:27:63:12:fe:db:3e:ed:80:0f:
ac:4b:b1:47:72:96:7b:99:e6:5b:59:33:57:09:80:0a:3e:9e:
2e:42:5d:3c:5d:27:67:3c:f4:0f:09:19:52:cf:5e:c6:06:5d:
4c:51:dc:99:33:54:53:d7:1a:13:18:55:0b:83:23:f0:3c:3c:
a1:4c:02:57:19:05:f1:94:aa:16:09:df:9d:a4:a7:bb:28:89:
98:e7:96:fd:c0:a9:e7:f7:76:3a:56:78:f0:28:a1:f5:27:89:
69:5b:2e:5d:4c:e3:f1:ea:5b:be:9e:2a:2d:22:7e:4a:06:bd:
6f:d2:d3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:54 2026 by rpki-client