
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft
File: f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft (raw, json)
Hash identifier: cLIunQOKJQ5Bgf2QglAhX8nJOPRZkSu7Xtzxalc5BMw=
Subject key identifier: B5:A5:0D:97:EC:B5:88:EF:42:6C:21:94:87:79:33:E3:1A:F3:45:8D
Authority key identifier: 7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF
Certificate issuer: /CN=A9190992/serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF
Certificate serial: 04F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft
Manifest number: 04EA
Signing time: Sat 04 Apr 2026 23:34:20 +0000
Manifest this update: Sat 04 Apr 2026 23:34:19 +0000
Manifest next update: Sat 11 Apr 2026 23:34:19 +0000
Files and hashes: 1: f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl (hash: RL+8oMIHDHn+vFFWc+sXMaQJ+n7NBINNJ7nNGQ5AOnU=)
2: 5B24C51A60ED11EC874B903BC4F9AE02.roa (hash: 4w0TogS+2atxTCMCzPs6c9BF71e/45vAMcdgv3e+SKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl
rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1273 (0x4f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190992, serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF
Validity
Not Before: Apr 4 23:34:19 2026 GMT
Not After : Apr 11 23:34:19 2026 GMT
Subject: CN=69d19ffc-9697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d5:59:5c:64:7e:6c:82:b7:c9:26:d3:c2:bc:
06:4a:cd:71:f0:61:39:69:ef:55:1b:bb:c0:2c:93:
3c:be:f6:51:7b:a6:57:c7:0d:dd:58:0f:95:46:2c:
6c:36:60:e4:15:25:51:bf:d9:de:7d:64:4e:96:15:
f6:82:e4:f0:50:5f:46:8d:46:bd:b9:6c:2c:27:f8:
a9:84:bb:05:cc:c1:a4:ea:2b:cd:1b:35:a5:4c:72:
a6:65:7d:69:0d:ec:67:ac:ec:fe:b6:87:cb:1c:af:
48:7f:cb:ce:f5:0b:b6:b4:00:30:da:5c:08:cd:b9:
3a:9c:54:95:e5:13:4a:f9:bf:40:36:4d:a3:c0:c1:
7b:8f:cc:21:d8:f9:ed:6c:59:3d:c8:6d:2b:64:91:
62:03:cf:dd:ff:8c:ad:48:68:60:0e:5d:3a:1d:16:
13:e5:8c:22:ba:a9:30:8e:cf:d0:8f:2b:7a:5b:53:
1a:7d:bf:6b:e5:ee:db:b7:6d:af:ef:b7:a6:6f:60:
89:da:5b:c1:4e:cf:9f:2f:59:32:bf:64:54:8b:f0:
94:2c:5a:34:6a:d5:1b:ec:2c:ec:c1:52:40:98:af:
cf:56:cd:75:c7:e0:92:1b:0c:ee:db:03:ec:5d:19:
82:ff:6f:43:73:d1:0f:9d:53:f0:36:5b:15:3e:73:
25:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A5:0D:97:EC:B5:88:EF:42:6C:21:94:87:79:33:E3:1A:F3:45:8D
X509v3 Authority Key Identifier:
keyid:7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:ba:d6:f7:f6:a3:24:f3:d4:7e:62:ea:61:40:6c:cd:a8:8b:
40:3c:52:eb:7c:49:7e:cb:0e:7e:36:4a:d5:c8:56:e4:f8:ba:
2e:4f:82:32:9c:b3:df:48:b5:1f:2b:77:be:16:c2:38:57:5e:
4c:3b:69:19:01:6c:db:00:a3:ce:23:12:ce:f1:45:8e:7a:2c:
a1:a7:db:3e:f3:f0:f4:37:a9:0d:da:ff:26:37:9d:f9:f3:f4:
98:7e:c0:c2:5b:a4:3b:04:43:8c:49:70:71:34:d0:c4:a7:fc:
98:43:a1:f7:63:30:0a:b1:bf:66:e2:f5:3c:a1:42:4c:5e:07:
1c:0c:88:e8:74:59:cb:e7:fb:17:04:fc:eb:b0:94:e1:10:cd:
65:27:7e:71:af:ae:15:49:06:2b:a7:c6:0b:a5:bf:1a:9a:fb:
db:f5:06:a7:7f:14:18:0e:50:9e:ac:2a:5d:9b:d4:3b:06:12:
4e:b1:a6:e9:bd:df:65:62:70:cc:86:e5:17:61:1c:c6:db:ce:
ec:2a:92:2d:45:e9:45:ad:c2:38:b2:09:6f:28:17:fc:8f:d8:
59:0f:f9:ad:e6:3f:5f:eb:7c:07:d4:0d:ad:96:ff:9e:65:6f:
e8:ed:5e:fd:39:fa:03:eb:6f:f9:fe:d0:c2:8a:f5:0d:7d:e2:
6c:ad:f6:02
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTA5OTIxMTAvBgNVBAUTKDdGNjVDMTEwRTJBMTdFNDFENzcwRkMyREZBNDAzRDE2
QTMzRTVDQUYwHhcNMjYwNDA0MjMzNDE5WhcNMjYwNDExMjMzNDE5WjAYMRYwFAYD
VQQDEw02OWQxOWZmYy05Njk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4NVZXGR+bIK3ySbTwrwGSs1x8GE5ae9VG7vALJM8vvZRe6ZXxw3dWA+VRixs
NmDkFSVRv9nefWROlhX2guTwUF9GjUa9uWwsJ/iphLsFzMGk6ivNGzWlTHKmZX1p
DexnrOz+tofLHK9If8vO9Qu2tAAw2lwIzbk6nFSV5RNK+b9ANk2jwMF7j8wh2Pnt
bFk9yG0rZJFiA8/d/4ytSGhgDl06HRYT5Ywiuqkwjs/Qjyt6W1Mafb9r5e7bt22v
77emb2CJ2lvBTs+fL1kyv2RUi/CULFo0atUb7CzswVJAmK/PVs11x+CSGwzu2wPs
XRmC/29Dc9EPnVPwNlsVPnMlewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLWlDZfs
tYjvQmwhlId5M+Ma80WNMB8GA1UdIwQYMBaAFH9lwRDioX5B13D8LfpAPRajPlyv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDk5Mi81QjNEMDgwMjVD
MEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZrSFhjUHd0LWtBOUZxTS1Y
SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2YyWEJFT0toZmtIWGNQd3Qta0E5RnFNLVhLOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDk5Mi81QjNEMDgwMjVDMEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZr
SFhjUHd0LWtBOUZxTS1YSzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcbrW9/ajJPPUfmLqYUBszaiLQDxS63xJfssOfjZK1chW5Pi6Lk+CMpyz30i1
Hyt3vhbCOFdeTDtpGQFs2wCjziMSzvFFjnosoafbPvPw9DepDdr/Jjed+fP0mH7A
wlukOwRDjElwcTTQxKf8mEOh92MwCrG/ZuL1PKFCTF4HHAyI6HRZy+f7FwT867CU
4RDNZSd+ca+uFUkGK6fGC6W/Gpr72/UGp38UGA5QnqwqXZvUOwYSTrGm6b3fZWJw
zIblF2EcxtvO7CqSLUXpRa3COLIJbygX/I/YWQ/5reY/X+t8B9QNrZb/nmVv6O1e
/Tn6A+tv+f7Qwor1DX3ibK32Ag==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:06 2026 by rpki-client