
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
File: fwOXxqlOUll2g0u_1YAvFbeV-44.mft (raw, json)
Hash identifier: zKF4ehu7jpj70ujlOyRm2XpLefuNQWv2JEPREmP15KE=
Subject key identifier: 57:18:0A:F9:43:BA:DA:61:CB:57:03:1B:F0:00:58:61:DD:50:D1:8B
Authority key identifier: 7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E
Certificate issuer: /CN=A9189D9B/serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E
Certificate serial: D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
Manifest number: CE
Signing time: Sat 23 May 2026 06:54:47 +0000
Manifest this update: Sat 23 May 2026 06:54:46 +0000
Manifest next update: Sat 30 May 2026 06:54:46 +0000
Files and hashes: 1: fwOXxqlOUll2g0u_1YAvFbeV-44.crl (hash: c2rHaXRWHcqBg+ZCMarCh2ZFjQq+w3qm2ogn65jd7N4=)
2: 552F0C342E2011F0AF4AB70CC4F9AE02.roa (hash: Os32lL30yxnI+rMD5Up4IutqeJR0LoJ837R4MBPxXs4=)
3: C865C1BC8D2E11F0A977AE41C4F9AE02.roa (hash: Fw/j+y8H8YzLuAy+NNQ6vU7kAdtmWkerdqp60DAL/h4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl
rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 06:54:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189D9B, serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E
Validity
Not Before: May 23 06:54:46 2026 GMT
Not After : May 30 06:54:46 2026 GMT
Subject: CN=6a114f37-5097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:cd:21:27:f7:44:85:5e:d6:d5:2f:d5:4c:
02:8a:a7:e0:c4:61:e0:f6:df:57:ee:87:aa:cd:1b:
e1:a8:7b:6d:7c:94:03:fe:b0:8c:76:fd:60:87:d9:
4c:dc:3e:b9:8c:2d:01:28:ad:a7:06:6a:1a:89:ae:
f8:3d:fa:54:15:c3:96:83:00:58:2b:23:cb:f2:ef:
7e:06:27:f8:70:53:3a:8f:81:21:b3:01:e1:d8:3e:
ac:b3:4c:3b:a2:31:04:5d:0e:c8:ed:fc:33:4b:61:
ed:3c:c8:2d:b3:23:c3:1c:46:16:46:1b:00:d2:6c:
dc:73:d2:dc:38:96:29:da:00:df:e7:b8:f4:d2:a8:
c3:01:ee:c1:99:6b:ae:b9:0b:3c:f1:54:81:e8:40:
cf:0e:24:93:9b:35:de:74:af:06:05:b6:9d:c0:20:
d5:de:8f:43:73:b4:ef:d4:50:9f:79:9e:cc:ca:fd:
31:c0:2c:ce:9c:b6:23:aa:69:0a:58:4f:5b:3a:be:
b1:2c:0c:95:2b:32:a6:a8:a8:95:27:36:83:f8:af:
10:9e:f7:ee:18:32:f4:8e:31:96:f0:a1:c1:95:d5:
1f:69:3b:da:3c:7a:68:df:ba:91:82:aa:27:55:97:
58:60:2b:11:75:91:98:f2:45:e9:c1:03:02:c9:05:
9b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:18:0A:F9:43:BA:DA:61:CB:57:03:1B:F0:00:58:61:DD:50:D1:8B
X509v3 Authority Key Identifier:
keyid:7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f2:1e:04:74:ff:ed:0b:91:2a:d6:a6:8c:9b:70:4a:ab:8e:
ef:68:d4:e7:6a:bd:63:82:0c:81:7b:30:86:86:4e:90:68:77:
95:5e:4f:cf:ef:b8:d2:6b:7b:cb:89:e5:bc:96:72:b1:7b:52:
33:22:f1:c8:72:ea:00:1f:a7:c6:9a:b9:40:16:ae:f7:a4:54:
b5:b2:bb:95:de:f0:82:a1:78:db:81:32:3e:c5:62:5c:60:40:
02:5e:c5:c5:99:a5:cd:bd:a7:b3:74:52:07:1d:dc:17:bd:b6:
9f:49:79:ff:29:ae:53:f5:f4:c1:de:d7:da:cd:6b:bb:15:16:
07:64:07:60:e5:e9:2e:19:d7:a9:46:07:1f:b3:fe:52:c1:c5:
d9:6d:4e:14:4c:45:cd:8d:84:84:86:9c:39:c2:1a:76:34:99:
c0:bb:b8:d6:12:cf:98:ca:56:42:fd:5e:f9:64:f0:55:3e:f7:
d3:2b:10:cf:49:9e:80:e6:2b:31:f6:9b:57:ac:51:74:0f:da:
d1:ba:59:f5:18:09:e3:c0:a2:29:14:da:e0:8b:1d:c6:ea:4c:
c4:9a:8c:34:8e:db:ef:ae:95:3f:1c:73:57:e6:5b:8b:44:eb:
e4:bd:e2:aa:b1:b8:da:6a:0c:88:cc:7d:2f:4f:2d:2e:09:48:
8a:85:eb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 06:12:17 2026 by rpki-client