
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
File: FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft (raw, json)
Hash identifier: PXSSap4C6o3L/sEtS7mh37MliY5xOWSH0FrhZ9NemxI=
Subject key identifier: 72:81:D0:E1:DD:36:A0:22:7F:A3:72:5D:7B:5E:4D:19:87:76:0B:D8
Authority key identifier: 14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45
Certificate issuer: /CN=A9173CF2/serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745
Certificate serial: 0721
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
Manifest number: 0719
Signing time: Wed 20 May 2026 21:58:07 +0000
Manifest this update: Wed 20 May 2026 21:58:06 +0000
Manifest next update: Wed 27 May 2026 21:58:06 +0000
Files and hashes: 1: FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl (hash: GN7f5N2CBRcjpTGm1v3P8SB2bTvpzrVCFKxKWGFUxGg=)
2: D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa (hash: dTa5Sv3QyKZeyYh7kTFM/PjTqogHVEan9r70oy/WWU0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl
rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1825 (0x721)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CF2, serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745
Validity
Not Before: May 20 21:58:06 2026 GMT
Not After : May 27 21:58:06 2026 GMT
Subject: CN=6a0e2e6f-6e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:08:9d:27:04:98:58:9d:51:64:65:82:e0:67:
5d:ef:07:09:fd:cf:8d:2a:62:6b:9d:c7:e7:25:ad:
0e:fe:e2:21:5d:c4:a4:d0:ce:2e:55:bb:5e:71:80:
ea:c8:88:ed:20:72:60:a5:03:b2:7b:29:85:6e:64:
a9:25:39:60:94:e0:00:97:bf:8b:e3:df:e8:30:6c:
28:5c:13:41:93:a3:ac:aa:0c:c4:19:80:a7:0d:b7:
40:8f:bf:6d:09:40:f7:49:be:0c:b8:b3:22:c4:a7:
bc:55:b9:e4:2c:97:96:7c:e0:7b:cd:f9:72:30:b5:
92:99:42:c9:7f:5c:fa:eb:8c:26:fd:b3:bf:27:e8:
eb:10:f1:52:e2:e0:a2:de:4c:7f:7d:77:4f:05:b1:
07:f2:d3:b5:ca:87:13:f8:6b:93:81:64:4a:a7:5d:
37:f3:c1:92:4d:0e:a3:26:33:e4:16:13:d9:f9:66:
0f:b9:25:a9:6d:cb:2c:3b:96:93:3b:2b:9e:df:88:
bd:a2:61:46:fb:07:f8:d2:79:c8:4b:f0:9c:5f:ed:
e5:50:43:98:ac:55:93:0b:db:ec:86:16:f4:8f:89:
ff:41:f3:66:4a:e0:7f:66:bc:8b:4d:37:f5:19:5f:
aa:44:49:b4:8a:86:f2:9a:d8:d3:ef:c3:5a:0e:fb:
cc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:81:D0:E1:DD:36:A0:22:7F:A3:72:5D:7B:5E:4D:19:87:76:0B:D8
X509v3 Authority Key Identifier:
keyid:14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:f2:cd:ac:4c:c3:60:89:59:c5:42:aa:63:76:7c:04:ea:f8:
fa:8c:5f:79:b3:a4:cd:4a:1f:91:e8:13:26:4d:6d:5a:1f:f1:
bb:04:e1:5e:9a:2a:45:50:8c:70:a8:fa:5f:92:e1:c0:87:66:
57:d2:ac:dd:5a:a2:0d:1c:2d:48:47:7b:cb:a0:9a:bc:3c:7e:
95:e8:45:98:4f:2d:dd:7a:15:56:8e:89:91:6f:a9:d4:f0:64:
3a:82:39:3c:24:44:c8:7c:bf:78:5b:ed:8f:1a:a2:b6:87:07:
45:1d:5a:ef:de:29:9f:0c:ec:6b:2c:78:2c:1f:2f:2b:67:fd:
64:ce:44:5d:6d:90:a8:a9:fb:3b:53:27:2a:17:a4:b1:d8:c9:
d5:f4:68:b9:46:49:23:b8:c7:b2:4e:20:3a:27:0d:8c:30:d7:
01:7b:10:c2:f5:4d:29:1c:12:60:e6:4c:f9:99:fa:e0:70:9a:
fa:ed:c8:62:8f:c8:b1:b5:8d:35:71:45:ff:9a:94:b2:e6:68:
ba:8e:e0:e5:dc:78:e8:38:64:cf:6a:ba:6f:1d:0e:4a:15:99:
18:c3:7c:7d:e0:d5:95:27:09:40:78:2a:e7:f7:b4:62:55:6b:
78:ed:f1:58:dc:b3:5c:c1:0e:05:12:93:e7:ef:e9:0e:de:cb:
03:16:83:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:25 2026 by rpki-client