
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft
File: FYOTMKge2Jkgc6I4BMn1kFOPudI.mft (raw, json)
Hash identifier: po3TVj9LYz9oyys2oK3vpoFBrU2xHInaKmvo01pKiCw=
Subject key identifier: 5D:83:7B:3A:58:ED:3E:2B:82:9A:A8:9E:40:C5:5D:D5:03:9F:4E:F7
Authority key identifier: 15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2
Certificate issuer: /CN=A9159B6F/serialNumber=15839330A81ED8992073A23804C9F590538FB9D2
Certificate serial: 01A3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft
Manifest number: 0193
Signing time: Sun 05 Apr 2026 03:52:55 +0000
Manifest this update: Sun 05 Apr 2026 03:52:55 +0000
Manifest next update: Sun 12 Apr 2026 03:52:55 +0000
Files and hashes: 1: FYOTMKge2Jkgc6I4BMn1kFOPudI.crl (hash: Obe8Yzo154nh6vC8x/KDGqsITM+4RhSqIfCn3Fie/P8=)
2: FFE844FA9A4111F0A04F703EC4F9AE02.roa (hash: U+gjpyEkhJuKYB1uPF7RjtfdMVvhM9E4YBQrtGcnfv4=)
3: FF5BF8249A4111F0A04F703EC4F9AE02.roa (hash: FgMnGGxYcOkrgsXBrsW+IcK5qUF9rL9FnEJI3VGsE4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl
rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419 (0x1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159B6F, serialNumber=15839330A81ED8992073A23804C9F590538FB9D2
Validity
Not Before: Apr 5 03:52:55 2026 GMT
Not After : Apr 12 03:52:55 2026 GMT
Subject: CN=69d1dc97-c304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:74:5c:0d:58:7d:06:5b:41:16:7b:f1:96:
c0:e5:0d:d5:67:a3:9e:aa:4c:55:0e:b8:bf:d2:c9:
4f:c3:24:ed:59:a9:11:87:d2:46:c4:a7:38:e2:74:
68:dd:11:b0:ad:d5:6b:47:18:c3:37:38:cc:25:e9:
27:0c:2c:4b:e3:8e:16:cc:c7:db:77:45:62:e8:92:
c9:fa:5d:8f:67:32:fa:ba:b5:c7:e1:10:ec:a1:0d:
39:4d:81:75:d8:b8:0a:86:42:78:d1:73:d0:ce:a7:
48:d2:a5:48:0c:8c:b7:72:52:98:61:10:84:6d:e7:
b1:46:9c:8d:7d:fb:56:f0:7a:24:03:02:5f:e6:cb:
2b:61:79:75:73:fc:a4:3e:4e:1f:b2:05:95:dc:de:
93:39:05:d6:06:fb:41:5d:4e:c1:0c:7e:db:93:fd:
a6:4d:5d:2a:fd:40:c2:a2:42:65:a6:40:52:62:65:
f1:22:9b:96:45:64:b6:3e:c1:83:8f:ca:d1:be:8e:
f2:f1:ed:17:88:e2:db:4d:4f:f3:12:fb:11:31:f5:
08:52:2e:9a:c8:7c:36:37:70:2b:f0:a9:48:8a:f1:
5f:d5:98:a3:af:88:f1:9e:21:d3:c2:9b:38:e8:7b:
5f:46:ed:e6:e4:0a:ec:58:9e:dd:16:e5:11:b6:68:
c4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:83:7B:3A:58:ED:3E:2B:82:9A:A8:9E:40:C5:5D:D5:03:9F:4E:F7
X509v3 Authority Key Identifier:
keyid:15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b7:c4:1b:de:04:91:b9:a3:66:76:32:a3:9f:5c:3b:ce:fb:
7c:d9:20:19:54:7f:81:fa:65:54:cb:48:b3:64:ea:4b:25:29:
85:8c:89:24:d3:27:af:26:25:4b:f8:30:b4:be:af:97:cf:dd:
6a:dc:7f:d6:32:33:d3:f3:1f:72:2f:8c:f8:c0:0e:67:c2:57:
54:ac:1d:13:99:c8:e2:0c:4f:fd:c5:f5:93:90:ee:62:97:96:
25:51:ca:be:ca:e4:ff:71:e0:8e:b6:aa:88:65:33:80:b6:6f:
d3:d5:85:9f:cc:da:99:b6:27:1d:5d:f6:ff:86:89:a4:59:11:
18:16:61:20:4d:6b:36:94:f5:5c:89:2d:05:a7:ce:1c:fb:27:
c6:09:1d:6b:34:79:e0:f8:43:08:cd:1c:a7:f8:47:84:ae:5b:
33:e6:d4:a5:14:71:82:9e:97:fa:6e:cb:76:a3:60:d0:b7:64:
63:77:37:70:61:12:4a:15:ef:5a:83:e0:a4:fe:c1:09:d4:65:
15:92:95:f6:cb:a8:e2:a3:28:83:4a:d4:a6:91:7f:c1:31:e7:
19:75:1a:b1:c5:16:4f:be:c2:3a:08:93:17:55:60:41:34:99:
72:bb:4c:e5:4f:d6:4e:13:a3:c7:c4:81:7f:49:bb:35:a1:49:
a4:ad:6b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:36:38 2026 by rpki-client