
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
File: fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft (raw, json)
Hash identifier: 4q6E5FVZlp6Hdm+77Cz72XVeJtA4XV8QD/aYjZUqD2k=
Subject key identifier: B3:A7:37:43:CD:9E:7F:FB:6E:99:37:EB:9E:8E:F5:3D:2F:8E:C9:C3
Authority key identifier: 7F:06:7A:22:A4:A9:E0:96:FD:86:A6:BA:35:5A:59:24:90:67:D8:0C
Certificate issuer: /CN=A918CC02/serialNumber=7F067A22A4A9E096FD86A6BA355A59249067D80C
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
Manifest number: 0149
Signing time: Sat 05 Sep 2026 05:10:47 +0000
Manifest this update: Sat 05 Sep 2026 05:10:46 +0000
Manifest next update: Sat 12 Sep 2026 05:10:46 +0000
Files and hashes: 1: fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl (hash: P9pxOdyfp3zFdhHYJAIaX48jqCM7OBxRiIinQqOuO74=)
2: AF9A0636B86B11EFA561215AC4F9AE02.roa (hash: YXgcQSkLUKZDwiDglhpy7R/9d2DcUAeT2Wp6iWZ+BWw=)
3: 34B9DBFAC5C011EF88F56A0AC4F9AE02.roa (hash: EbfBHidljZ2gLeTQHKxBHFBHeGxEqlyHSzXcfx3YSkU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl
rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 04:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CC02, serialNumber=7F067A22A4A9E096FD86A6BA355A59249067D80C
Validity
Not Before: Sep 5 05:10:46 2026 GMT
Not After : Sep 12 05:10:46 2026 GMT
Subject: CN=6a9ba457-749f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fb:20:d6:df:fd:52:75:10:64:1f:64:88:29:
fe:8e:64:13:23:ba:22:4d:ef:fc:4d:12:bb:8d:c0:
84:02:97:b6:3a:46:6e:de:04:c0:9c:e9:ba:9d:bd:
e3:0f:84:12:7b:80:4e:5a:50:fc:a0:3c:de:52:1e:
d9:f8:59:19:ff:ab:98:bb:fd:26:cc:7d:b0:c8:5e:
cd:86:ff:e6:55:c8:f9:95:92:1d:3f:97:61:b3:68:
f0:2d:42:a7:3a:63:48:e7:d0:8c:36:d3:af:33:82:
a7:b7:a5:dc:a8:88:1a:9a:89:0b:c1:5e:e4:99:06:
c1:95:37:ea:f1:84:1c:3c:09:a8:fa:5c:00:75:b0:
95:59:3e:d4:f2:2f:a1:0e:d7:a6:fc:b1:71:c1:22:
c5:1a:db:24:ae:1b:13:71:22:f8:bc:56:e4:3a:9c:
b7:f4:f6:ae:34:86:cb:87:0f:54:6b:2f:49:e1:7a:
0d:0e:37:16:e9:a7:be:70:54:5e:60:be:fd:6a:d0:
fd:71:33:34:90:a2:d0:df:ca:58:03:1f:b2:4a:51:
a5:18:1e:29:5f:3d:a3:b5:c7:27:2f:94:f3:45:f3:
52:f4:95:c1:1f:c3:16:b5:84:cc:2c:72:df:4e:69:
b1:75:16:b5:38:22:65:82:f3:37:31:77:d1:fe:1f:
cc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A7:37:43:CD:9E:7F:FB:6E:99:37:EB:9E:8E:F5:3D:2F:8E:C9:C3
X509v3 Authority Key Identifier:
keyid:7F:06:7A:22:A4:A9:E0:96:FD:86:A6:BA:35:5A:59:24:90:67:D8:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:96:d1:9a:70:86:53:a1:fa:f0:cb:5b:ca:cf:a8:40:39:2e:
43:14:65:83:d6:6e:10:4b:20:4e:dd:7d:e8:69:da:83:0b:45:
90:44:50:0c:c0:a1:bf:82:07:1d:bc:8c:56:40:c8:db:34:6c:
31:c7:95:0f:a5:63:9a:a8:76:07:dc:c4:d7:c6:0b:f1:7f:e7:
81:cd:d2:97:e9:42:96:10:56:e5:90:57:df:d4:2c:51:15:9e:
e2:3e:45:85:a2:e3:11:0b:4a:c3:3b:00:5e:20:5d:3a:64:6a:
99:72:1a:c1:0c:46:6b:82:83:72:7e:36:c7:0a:db:49:de:e3:
36:aa:b6:a8:79:d7:9d:e6:c1:b2:33:44:46:52:25:1e:d4:75:
43:08:e9:bb:94:56:46:06:ab:6f:e2:e6:d9:1e:d0:c8:31:16:
45:e3:65:23:8c:c2:0e:6b:11:b0:86:36:bb:09:a3:f9:31:58:
13:f4:bd:08:24:b7:e1:1e:3f:a6:39:44:51:83:2f:06:db:44:
81:88:70:25:3f:b2:1c:54:ef:f6:82:b8:f3:66:dc:3e:52:a0:
05:db:f8:25:c0:fe:39:be:9e:a3:9f:12:c0:84:2d:c8:3c:48:
f5:9f:17:c7:f6:ac:76:04:c9:b5:b5:25:83:01:2d:91:50:15:
04:74:8d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:54:09 2026 by rpki-client