
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft
File: FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft (raw, json)
Hash identifier: JMrJiLNg4iNqpja9ZrqB5qLtB170OVo8uaLylwxI95Y=
Subject key identifier: B8:12:25:1D:60:AB:3B:73:F5:09:80:0F:9E:AA:3B:7B:48:AB:77:FC
Authority key identifier: 16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5
Certificate issuer: /CN=A9187208/serialNumber=16144C8235B4519F50EDD555368118844D1711A5
Certificate serial: 0259
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft
Manifest number: 0251
Signing time: Wed 19 Aug 2026 02:55:08 +0000
Manifest this update: Wed 19 Aug 2026 02:55:08 +0000
Manifest next update: Wed 26 Aug 2026 02:55:08 +0000
Files and hashes: 1: FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl (hash: O48t3NCDOkjtW0Y1+7S/Mu3v1yuLzSlqD+L/hO2i7Os=)
2: 7F5C2CFA1A1B11EEBC083487C4F9AE02.roa (hash: JE24oniJbQVxxodyFN24JXWITITn2VbsMd/nb3d9xUc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl
rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:55:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 601 (0x259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187208, serialNumber=16144C8235B4519F50EDD555368118844D1711A5
Validity
Not Before: Aug 19 02:55:08 2026 GMT
Not After : Aug 26 02:55:08 2026 GMT
Subject: CN=6a851b0c-8727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:ea:bd:1b:b9:36:d1:50:63:0e:2a:c3:11:
5b:e4:d0:71:b8:51:fc:db:bd:20:b3:4e:b8:dd:e6:
91:90:c5:83:fe:96:b7:42:f5:3a:71:d9:a4:da:ee:
41:ef:5d:55:6a:c5:6b:13:ec:9a:b3:54:56:63:d7:
c1:d5:0d:bf:b1:e0:55:01:ee:d0:7b:28:c0:80:cc:
ab:79:60:6b:4b:3f:18:8a:f2:7a:40:c7:cb:2e:72:
52:b8:74:c0:56:e6:9f:53:5d:51:0d:86:88:c1:56:
3c:77:12:2f:71:b0:d7:ab:1d:1c:a2:00:48:c6:91:
af:aa:0a:9d:2a:36:ea:9c:2f:91:77:44:fe:b4:b2:
05:d1:c5:45:0d:d8:cd:07:1c:d2:b6:78:86:d3:51:
0c:98:82:58:85:42:f4:9b:50:ac:1f:f3:a0:ec:96:
1b:89:8b:bb:2d:e9:6b:42:4a:7c:6f:c4:4c:3c:c2:
57:b9:a5:d3:7b:f4:ff:fd:4c:c0:74:be:ec:d2:0a:
d4:dc:c4:1a:2a:4a:b0:c1:1b:20:62:a2:64:f2:99:
98:a4:d2:e4:2e:d9:2f:16:5d:75:da:36:e9:54:65:
6e:fe:98:d5:6a:5b:f8:9a:90:c6:0d:fa:5f:f8:14:
c3:e3:ed:17:00:10:3b:ef:a3:5c:4d:2f:0e:0d:cf:
2e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:12:25:1D:60:AB:3B:73:F5:09:80:0F:9E:AA:3B:7B:48:AB:77:FC
X509v3 Authority Key Identifier:
keyid:16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:84:f0:a5:e5:ec:90:dc:d7:05:ce:d3:37:9c:45:85:06:2b:
06:79:f2:97:0a:29:8e:c8:79:20:d9:21:1b:93:49:a2:b8:14:
08:dc:a3:4e:2d:5e:f9:02:c9:b5:1d:21:f8:f8:23:79:be:82:
22:d3:3a:95:15:1d:34:8f:b7:a1:c1:c1:77:e1:75:a3:d8:57:
d3:5b:75:ab:30:cf:0d:4a:0f:95:5a:06:73:6f:a3:e4:5c:4d:
08:28:e5:56:8c:3d:cd:e5:d2:ff:d9:c0:8a:9a:37:6d:2e:85:
8e:fa:35:dd:51:d5:71:b6:d9:cc:e3:2c:15:05:7e:9c:1d:50:
7e:de:82:15:d2:fc:69:b3:99:32:4a:07:f1:ad:a0:38:fe:b1:
2c:7a:c3:ff:16:b4:58:46:62:c5:1e:49:6b:fe:7d:4d:9b:e6:
ff:73:cf:9b:e4:e2:bc:f9:33:96:1e:9c:a1:0c:63:29:6f:65:
af:7e:4a:d3:60:b4:eb:11:88:66:d0:98:e2:db:7d:ad:e5:3f:
7f:dd:ca:0d:39:73:32:e6:81:72:3f:b2:79:3a:d1:bd:43:0c:
f2:2b:91:6f:67:c8:ac:55:ed:36:16:dd:e9:95:df:25:13:63:
6e:51:77:88:b8:d1:b0:3a:b3:e2:c4:85:49:5d:cf:86:5d:6f:
1a:53:83:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:12 2026 by rpki-client