
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
File: FN2GhClPGzOjE6-48OuhyKADeAk.mft (raw, json)
Hash identifier: hpdSlsZ/mr9dcmW6e8qePyDhlGeg4PSAgfaRsClz75M=
Subject key identifier: 7F:0D:5E:62:E4:78:19:6C:EE:10:68:3D:10:94:31:32:9F:A3:E8:16
Authority key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
Certificate issuer: /CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
Certificate serial: 0139
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
Manifest number: 0126
Signing time: Sun 05 Apr 2026 05:09:26 +0000
Manifest this update: Sun 05 Apr 2026 05:09:25 +0000
Manifest next update: Sun 12 Apr 2026 05:09:25 +0000
Files and hashes: 1: FN2GhClPGzOjE6-48OuhyKADeAk.crl (hash: AJ57SYxxoEeSeEm6MY93DgGGwTf9aqbimMyH2LD0AV4=)
2: E9B0903AF38811EF81B8CE39C4F9AE02.roa (hash: SSKa739rT23rOpIYYisZx12/v/K7+nclE63wWrbXXlU=)
3: F7981812F38811EFAC05053AC4F9AE02.roa (hash: EK3pUqrH9H4fquoX1peOlD1L2xEfn/Ee2ouiE9JS3Uk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl
rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:09:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160A05, serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
Validity
Not Before: Apr 5 05:09:25 2026 GMT
Not After : Apr 12 05:09:25 2026 GMT
Subject: CN=69d1ee86-5a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1e:d5:23:60:1a:79:d1:bf:e9:ba:af:8c:97:
ef:c1:22:73:77:d2:fe:fe:e7:2e:5a:d7:64:57:bd:
c5:44:33:93:52:0a:6c:73:05:c2:41:39:11:d7:72:
32:53:a5:e1:df:a4:d6:22:d8:da:dc:08:eb:30:6c:
58:19:78:2a:04:fe:12:49:f3:20:31:31:b3:03:1d:
8b:1c:26:83:39:b6:ab:07:ae:d3:c6:27:e1:64:7d:
5d:24:19:61:78:83:48:79:0f:1f:b3:cd:bb:2e:9a:
44:95:b3:5a:6e:ef:3d:d3:b1:d6:ab:27:88:88:9e:
07:ce:88:1e:73:47:f3:9e:f1:8b:be:71:8c:5b:04:
35:36:7f:12:08:13:dc:ae:94:72:49:ee:46:36:c9:
57:0e:64:36:95:72:a5:da:5e:b2:1f:bc:7a:55:b5:
64:66:b3:d2:bc:6e:62:86:9d:d0:59:f9:76:c4:89:
7c:f6:05:64:13:eb:f9:31:12:44:92:fc:56:e7:67:
09:44:85:bb:d3:c8:2c:cd:27:18:93:b3:38:8f:4f:
0d:ae:c1:3a:0a:20:7c:60:97:b5:0e:94:ce:47:be:
98:21:d5:26:db:e1:f4:20:6c:5b:98:86:04:48:0c:
30:90:bb:38:82:1c:99:ff:7f:f0:81:b7:d5:02:15:
bf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0D:5E:62:E4:78:19:6C:EE:10:68:3D:10:94:31:32:9F:A3:E8:16
X509v3 Authority Key Identifier:
keyid:14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:33:e6:77:c9:b2:ea:c7:4e:d8:5d:46:f4:22:f9:66:3c:df:
c7:83:90:9c:c1:d1:eb:e7:f5:9b:9e:1b:68:d1:ba:59:d3:80:
f6:1f:fa:47:eb:3c:45:84:2a:ac:b7:da:67:e0:03:74:50:0d:
59:bf:0d:a9:94:25:99:2b:6e:4d:99:81:d3:ee:18:da:6e:6b:
e5:ae:93:aa:a0:c5:8d:41:db:9f:dd:59:62:fa:fd:29:d0:63:
df:3b:5e:6c:6e:c9:50:df:40:64:b9:57:ac:5f:f7:5c:0a:cc:
44:b4:0c:c8:50:4e:21:5c:f7:e3:46:35:74:9d:9f:d1:01:da:
f5:9a:1a:3f:58:f3:a1:51:e6:cc:d5:6d:95:3e:0a:ce:23:ce:
86:19:03:8c:6a:e6:8b:17:ca:3e:08:c5:40:9c:66:a0:75:a5:
17:e9:91:a5:61:6d:db:71:a5:52:0e:d9:7d:d6:fd:41:3f:d4:
18:07:84:c7:ef:4c:f5:df:3b:e8:ca:fc:66:63:81:cd:d7:c2:
8e:53:8b:c0:31:dd:c6:f6:5e:89:3d:8a:14:bc:52:63:ca:e1:
c6:23:98:f2:f9:f2:2e:ce:c6:e0:a4:9e:b2:96:99:69:a4:a1:
5a:27:e7:c1:c2:44:83:7d:43:38:94:55:75:7c:13:53:dd:36:
1e:59:4a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:15:56 2026 by rpki-client