
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft
File: f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft (raw, json)
Hash identifier: DutR1a0yhJSjXmqPM6DludwcZVsNEXiOMvbuUKaEmJ4=
Subject key identifier: 3B:A5:8E:29:FB:CF:1C:EB:97:73:9F:E8:D8:C0:14:80:C3:3C:C3:3F
Authority key identifier: 7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF
Certificate issuer: /CN=A9190992/serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF
Certificate serial: 053E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft
Manifest number: 052F
Signing time: Tue 18 Aug 2026 23:55:41 +0000
Manifest this update: Tue 18 Aug 2026 23:55:40 +0000
Manifest next update: Tue 25 Aug 2026 23:55:40 +0000
Files and hashes: 1: f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl (hash: uITWsi4EWRhJ9zbIqxQN8exb5fs04s2J1Mhu1Tki4hE=)
2: 5B24C51A60ED11EC874B903BC4F9AE02.roa (hash: 4w0TogS+2atxTCMCzPs6c9BF71e/45vAMcdgv3e+SKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl
rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1342 (0x53e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190992, serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF
Validity
Not Before: Aug 18 23:55:40 2026 GMT
Not After : Aug 25 23:55:40 2026 GMT
Subject: CN=6a84f0fd-7856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1b:d6:41:c3:b2:be:ac:36:f4:1f:42:0f:67:
b5:d1:4b:86:ef:f6:36:61:38:c2:aa:d8:7d:76:84:
aa:73:e7:35:68:c1:59:b2:dc:66:d6:96:45:d3:24:
6a:ba:ef:e1:0d:32:65:3a:11:38:e3:4b:54:11:1a:
b1:1a:19:cc:48:99:32:98:4b:36:c2:7d:74:48:a9:
dc:d2:d6:6e:d2:6f:75:e7:56:54:2a:ab:bc:9d:71:
f3:d7:ea:a4:c9:3d:e9:04:a4:7a:cc:89:d6:8f:2a:
67:b6:3f:d8:0a:f3:9f:bb:47:4f:73:95:74:b2:95:
f8:db:ec:d0:fb:7f:67:90:89:b8:51:25:8f:1c:c2:
7c:12:2f:02:4d:16:c4:c7:73:47:53:46:23:bd:f3:
db:6d:70:99:a0:d9:c3:d1:30:82:a8:4f:a9:f5:63:
97:ba:44:98:a2:ec:cf:72:6b:00:c9:ae:a0:a0:7d:
c5:79:9f:10:bf:c1:28:82:77:97:2f:7d:db:a1:59:
0a:fc:e7:65:69:0a:72:03:66:07:fb:f5:e3:ab:f7:
87:75:ba:41:fc:8b:32:8d:16:b2:ce:b5:d5:cf:f0:
10:81:90:d7:73:ab:6c:6a:8b:33:07:bf:f6:23:5b:
3a:1f:e3:73:0f:34:04:23:1c:33:6d:cd:9c:2a:41:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A5:8E:29:FB:CF:1C:EB:97:73:9F:E8:D8:C0:14:80:C3:3C:C3:3F
X509v3 Authority Key Identifier:
keyid:7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0b:7b:05:dc:50:ba:c1:1e:86:86:ad:58:fd:af:fb:c9:1d:
0c:ea:cc:51:5b:fb:7d:db:c1:28:70:a2:e6:e7:31:dc:3e:a6:
0c:ff:64:54:42:ce:d2:5c:36:92:6e:c5:38:27:30:04:b5:7d:
91:ed:2d:bd:8f:a4:64:46:ff:66:d4:de:bf:1c:ea:a0:65:40:
f9:f6:02:3a:e7:39:05:85:b8:c2:b1:c2:b7:fb:3e:52:14:1f:
01:20:03:f8:19:90:b4:3c:21:9a:b3:25:a2:61:7b:9b:4f:5a:
77:e1:36:28:93:e6:25:d0:fc:e9:be:7e:63:28:89:c7:4b:3e:
cf:0a:fb:17:b1:a9:1c:5f:17:a1:4b:f2:c9:c6:5e:b7:00:dc:
9a:bc:a4:da:12:b5:94:07:01:51:56:de:a1:d9:e3:b7:6e:6c:
94:06:aa:6e:bf:11:47:1b:83:dd:94:b7:cc:51:50:f7:8a:ae:
7b:5e:97:da:71:af:04:2f:8d:a9:4a:0e:99:75:02:42:92:62:
fe:b0:fe:8d:2f:e5:57:12:01:83:8f:be:72:d8:13:ff:b6:5d:
96:ed:cb:35:2a:0c:51:fa:ef:a1:11:03:fa:37:5a:e0:1a:6f:
1e:9c:4d:39:d9:19:99:d6:cb:1b:f8:ea:a3:90:2e:e1:d5:b7:
60:24:2a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:07 2026 by rpki-client