
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
File: fONyLR7LAIObJGf9XDmmrUamImE.mft (raw, json)
Hash identifier: Ps+aSKZPoJLsd02Kl2C9xIAhUL6qeW/22qHpSrMZW54=
Subject key identifier: 7D:9B:07:4E:34:43:D9:77:C8:CA:A0:5A:C8:89:1A:C8:E9:55:E7:2C
Authority key identifier: 7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61
Certificate issuer: /CN=A9156E6F/serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261
Certificate serial: 0D14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
Manifest number: 0D09
Signing time: Mon 22 Jun 2026 18:15:44 +0000
Manifest this update: Mon 22 Jun 2026 18:15:44 +0000
Manifest next update: Mon 29 Jun 2026 18:15:44 +0000
Files and hashes: 1: fONyLR7LAIObJGf9XDmmrUamImE.crl (hash: zl/mgqTWgvAsWcGAO9kbEef1tuaNT4MsL4Yfu8ks1eY=)
2: ABD61D2E06D611EA8EBBEA50C4F9AE02.roa (hash: taMg9ABZmz3UBA8VdUB5OiDUtv+I/OZVxR13yJafYfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl
rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 18:15:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3348 (0xd14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156E6F, serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261
Validity
Not Before: Jun 22 18:15:44 2026 GMT
Not After : Jun 29 18:15:44 2026 GMT
Subject: CN=6a397bd0-d1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:eb:0b:81:15:2d:67:ed:b3:4e:35:f5:34:
71:32:ea:ab:a5:77:d5:e1:93:f1:6b:eb:40:fd:a9:
e5:1f:74:59:a2:de:99:3f:e4:4c:68:dd:b8:86:d4:
21:c0:e6:4b:f6:44:54:aa:e2:77:32:e3:4d:29:2a:
54:4f:db:d7:64:b7:38:d3:a8:82:8b:40:d0:d6:7b:
6c:53:5d:d5:d9:31:f4:96:45:12:a8:90:08:d5:04:
ff:de:89:e5:99:be:48:39:c1:4f:4a:1d:88:e2:e2:
a1:9c:fa:ad:17:9d:ea:ad:f8:7a:fc:6f:6e:85:89:
f4:d1:a3:d4:86:31:64:e8:76:23:1b:1f:16:18:9d:
13:d1:81:c3:ba:d1:b5:ce:e0:ed:ed:73:55:d8:6d:
6f:e7:58:10:9a:b2:b2:63:a0:2f:fa:de:58:d9:13:
b7:23:fa:3c:5a:53:32:56:34:00:31:9f:b9:9c:d3:
2d:0b:47:dd:16:97:e8:db:7b:21:93:7c:a8:1e:9d:
25:31:fc:58:ae:9e:60:60:42:d9:8a:aa:49:70:92:
d7:4c:00:11:c3:4e:69:3b:44:16:26:f9:4c:b4:03:
e9:83:8f:f7:4a:64:84:fe:d7:67:03:bf:8f:13:e7:
81:43:9d:59:90:a5:9f:89:82:52:b1:f3:34:71:20:
ed:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9B:07:4E:34:43:D9:77:C8:CA:A0:5A:C8:89:1A:C8:E9:55:E7:2C
X509v3 Authority Key Identifier:
keyid:7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a4:57:39:4c:75:d7:4f:42:91:9e:ae:db:9e:4c:d5:b0:1c:
43:05:c7:bf:28:15:c4:4e:12:ee:fc:56:79:7d:40:21:05:33:
ec:67:32:48:95:79:83:14:e4:3e:3e:97:35:ed:6b:4e:f9:4b:
2a:86:61:47:23:17:3d:23:5a:49:de:0d:78:86:b4:27:6b:be:
eb:bc:a4:de:cd:02:a7:bb:97:84:55:d0:21:6c:79:b5:26:e6:
23:0c:2b:a6:55:5e:71:23:52:54:4b:1e:a9:b9:8b:50:dc:32:
32:24:f8:c3:d5:25:f6:11:19:1b:27:7d:c3:62:fb:96:aa:41:
a4:2a:a5:13:bc:3e:29:96:f0:72:40:ad:5d:44:d4:e8:65:8f:
06:cc:c0:86:ab:cd:9a:b1:65:86:58:d9:c8:2e:d2:9e:e9:6f:
d4:57:ba:f8:3e:46:03:b9:3a:c0:41:74:c2:8a:95:ec:a0:6d:
8e:d8:b0:6e:c1:d5:e4:0a:ab:80:aa:80:9f:76:64:d0:06:73:
f2:ca:5a:06:0e:26:f2:fb:d1:50:4c:41:3f:2e:2c:76:e2:2e:
4a:72:2c:26:39:d3:e8:3b:3b:fb:a6:91:7a:5e:8a:ee:3e:7d:
4e:fa:73:79:38:8c:d8:b8:89:be:15:29:b4:93:1e:8c:6c:f6:
e4:2c:1d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:16:14 2026 by rpki-client