
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
File: f3dZIELjyHvlbu2B2cyw6XQCzdc.mft (raw, json)
Hash identifier: 9SICinKEtXS1pfmUR7OREhwXoMX4zssjBrQ5ovyPIjw=
Subject key identifier: 6E:DE:06:CD:0A:62:BF:D8:45:DA:F6:33:58:EB:AE:4C:B6:E6:9A:16
Authority key identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7
Certificate issuer: /CN=A9192A47/serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
Manifest number: F5
Signing time: Thu 19 Mar 2026 05:25:40 +0000
Manifest this update: Thu 19 Mar 2026 05:25:40 +0000
Manifest next update: Thu 26 Mar 2026 05:25:40 +0000
Files and hashes: 1: f3dZIELjyHvlbu2B2cyw6XQCzdc.crl (hash: voQ2tVPfzINAGvSbVWThc99DYl6yiGsQSmI7OtYtiOY=)
2: 43631816B82211EFB74FF56BC4F9AE02.roa (hash: 8H2e0J6ttQKl0SPd9mkDBdGO8YngFPILlTNxbAVIA68=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl
rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 05:25:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A47, serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
Validity
Not Before: Mar 19 05:25:40 2026 GMT
Not After : Mar 26 05:25:40 2026 GMT
Subject: CN=69bb88d4-e723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9c:f2:c5:d1:eb:58:9d:04:99:d5:cf:3f:5c:
84:0b:78:ad:20:a4:79:32:0e:fb:4c:38:f1:f2:88:
d3:12:af:96:0f:1e:49:06:e1:a4:a5:76:c6:19:60:
8d:28:5e:fc:cc:19:d5:df:b5:62:c0:ef:59:48:43:
b5:06:ea:e9:d4:1f:33:73:bd:68:f8:da:f6:51:f1:
b1:09:5b:1d:26:12:43:f9:2f:44:91:3a:c2:f4:c5:
72:3b:a2:92:c3:ee:12:00:0a:61:43:d9:82:7c:e1:
97:0d:ce:a7:fb:df:6c:97:12:d0:1a:2a:5c:5b:3d:
0a:40:04:5a:c2:ab:23:0b:4e:88:09:95:2b:b5:8d:
36:c8:85:fd:69:c5:7a:b2:88:9b:60:7c:cd:5b:75:
a1:e5:3c:57:8d:f0:fb:79:5b:f4:be:6b:bb:51:60:
d7:0e:13:01:96:96:43:f0:a8:39:ca:c3:49:bc:27:
40:88:bc:59:2b:77:43:ec:a9:45:9d:5d:db:3c:ff:
d6:6a:f7:b2:cf:4e:a8:6a:e7:cf:0d:23:6a:13:05:
63:86:d6:54:85:59:7f:5a:f3:8c:72:cc:ff:8a:fd:
cd:0a:c9:b7:6c:da:b1:36:1e:3d:4b:c2:f8:97:43:
ef:2a:63:81:5c:bb:fa:53:0a:a5:a2:c4:f6:af:50:
e3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DE:06:CD:0A:62:BF:D8:45:DA:F6:33:58:EB:AE:4C:B6:E6:9A:16
X509v3 Authority Key Identifier:
keyid:7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:6d:c9:c1:79:e4:99:41:e0:86:f5:bf:5a:9c:a7:85:1c:5d:
d8:fa:aa:34:ee:76:2e:d1:5b:e7:a0:f8:17:a3:b4:a8:15:4c:
f8:41:3b:9a:ea:2e:5a:28:04:ce:b7:37:fe:5f:b6:fb:dc:72:
d5:e0:ad:1c:9a:ed:b9:70:7c:07:ef:d4:98:c3:62:39:b0:88:
3d:37:d4:cf:37:cb:9d:c8:68:3e:f7:4e:ab:e3:23:45:42:31:
74:5a:89:2e:ab:7a:53:12:56:30:4f:0c:0d:a3:45:ed:4d:6f:
39:d6:ad:23:79:5a:9a:b5:8b:fb:ba:f0:60:e4:a1:69:90:f1:
7d:31:18:2b:32:a0:41:74:9d:a3:19:0d:a5:db:9d:24:4e:7c:
3d:3e:cd:a0:bd:9d:0a:3e:7e:5e:28:83:7a:0a:a3:56:a1:66:
95:db:4f:58:10:01:b7:aa:f0:04:1e:02:6a:95:d8:46:4c:49:
79:1c:3a:d3:93:ba:9d:40:60:ff:45:72:64:52:55:a0:3e:f5:
55:36:f2:a4:81:60:fd:81:34:13:75:83:99:df:c5:9f:a2:55:
3c:1e:70:22:cf:09:31:50:9d:f1:66:b5:c2:c6:5c:77:61:4b:
be:ee:0b:e9:a4:00:fe:b6:f5:c2:c0:ad:c0:a6:c7:6f:f0:20:
75:96:fa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 20:07:11 2026 by rpki-client