
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft
File: fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft (raw, json)
Hash identifier: K9GxhU31gLKjwt6BbTfh6imtXtsmYIcyWJrChtyrzSw=
Subject key identifier: 3E:BD:90:CA:38:F8:05:F9:AB:1C:1C:ED:99:8C:0C:12:33:CB:A5:65
Authority key identifier: 7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97
Certificate issuer: /CN=A9187E80/serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597
Certificate serial: 06CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft
Manifest number: 06B7
Signing time: Tue 10 Mar 2026 21:56:04 +0000
Manifest this update: Tue 10 Mar 2026 21:56:04 +0000
Manifest next update: Tue 17 Mar 2026 21:56:04 +0000
Files and hashes: 1: fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl (hash: AJuXRXLwLzUgwMO8EHhMmtBFu9nbs19b7LequR4leyI=)
2: 1B120B6E563B11EE9C93E334C4F9AE02.roa (hash: zx3SfNrsBStmAGKK4PT2fic35nMh12b91cF9VkyjT2E=)
3: 9F68F54067EF11F09584C157C4F9AE02.roa (hash: UzDPn/plAnRycbk9Qz1NVyr/2jrEf/+GzQ2KgWJxmuQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl
rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 16:55:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1738 (0x6ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187E80, serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597
Validity
Not Before: Mar 10 21:56:04 2026 GMT
Not After : Mar 17 21:56:04 2026 GMT
Subject: CN=69b09374-26a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:c3:4c:ae:d4:90:84:95:da:2b:c9:56:70:
a6:f6:18:ff:44:f4:33:b5:2d:ad:2c:78:fd:90:60:
1e:0f:7a:b6:15:43:af:9f:a1:33:e7:83:71:30:51:
8a:f9:83:93:76:d5:db:df:ee:e2:64:bb:c7:f2:88:
c8:02:98:47:b0:ef:b5:1b:1a:7c:8b:65:09:0c:69:
ee:85:e3:cc:70:09:41:49:23:1d:65:7f:98:03:ea:
34:4b:dc:5f:ea:73:c7:32:1e:3b:71:56:62:47:89:
f9:fa:13:ed:60:28:c4:6e:80:36:96:d5:9f:4e:09:
f7:1b:9a:1a:4f:18:75:bd:f8:2d:a1:37:a2:a4:93:
b5:44:06:df:25:10:e2:55:40:50:6e:7e:6b:99:06:
a6:06:40:82:27:13:b1:b4:6e:b5:18:4a:87:7a:a7:
38:48:92:33:d0:46:2b:a9:9b:98:5b:c5:47:84:b8:
a4:b1:57:c7:7a:83:77:c4:1e:f5:a9:c0:02:49:16:
2c:4d:f6:6d:05:14:ba:19:87:51:cf:e0:3c:21:31:
b2:4b:2d:7b:4c:c5:6a:86:e8:0f:db:c0:a4:40:b7:
20:28:cd:00:54:83:3c:34:df:d5:ea:b5:7a:34:b2:
d4:7f:ef:f6:ce:34:07:20:1c:65:77:f9:2f:bf:67:
1e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BD:90:CA:38:F8:05:F9:AB:1C:1C:ED:99:8C:0C:12:33:CB:A5:65
X509v3 Authority Key Identifier:
keyid:7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f9:cd:99:86:06:fc:ac:11:27:f9:00:b5:7d:95:95:4f:2f:
12:b5:33:cb:af:d7:cd:6b:a1:37:c3:94:40:a9:b3:82:26:bb:
e4:2e:03:db:2a:08:88:6d:de:26:64:ae:c5:65:3d:be:56:a2:
3e:47:d0:fa:47:5a:e2:7b:0f:5e:cd:46:4d:89:51:43:46:ff:
f2:79:cb:f8:1a:76:ef:39:ee:50:e9:ad:09:ff:58:29:b2:41:
54:c7:f4:04:79:ef:7a:f8:af:00:31:71:61:09:85:2d:a5:3c:
e3:9e:06:0c:0f:a2:95:7b:92:e4:59:41:f0:0a:30:c5:f1:d2:
df:bd:15:c1:72:4c:e4:7c:42:fe:1c:29:df:0a:ba:31:37:b5:
9d:d5:6f:0e:4a:ff:a9:21:72:ae:20:37:85:a5:5d:aa:82:65:
7f:7f:ef:22:41:5c:50:15:ba:97:e5:6a:77:23:a3:c6:42:65:
5a:ab:f4:81:d0:ba:83:00:e1:b1:04:8e:e5:48:c5:a8:65:ea:
4d:06:6b:5c:a5:f4:11:28:f1:d9:a8:71:a8:3e:bb:c7:3d:d3:
cd:e0:0b:0e:61:22:45:02:16:f3:94:b9:e6:f9:f4:de:64:6d:
81:4d:87:38:81:87:41:ff:af:f5:ba:a9:bf:b8:cd:90:29:90:
79:74:64:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 00:43:27 2026 by rpki-client