
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
File: f32FZbsEGDw68czSI-nEYR8VCAY.mft (raw, json)
Hash identifier: lJl1uRbKUjMleMRLuM9xH4seNHX9chp1q+oUXc45WZ4=
Subject key identifier: 38:93:8D:B6:B7:A0:F7:4C:4B:20:A4:8F:8A:EE:73:15:0E:1D:1A:16
Authority key identifier: 7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06
Certificate issuer: /CN=A9194004/serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
Certificate serial: 0202
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
Manifest number: 01FE
Signing time: Tue 21 Apr 2026 02:54:30 +0000
Manifest this update: Tue 21 Apr 2026 02:54:29 +0000
Manifest next update: Tue 28 Apr 2026 02:54:29 +0000
Files and hashes: 1: f32FZbsEGDw68czSI-nEYR8VCAY.crl (hash: FaCHvnMTQJcRk0qZg72pGJg/QH2SxwaPhHRwL2ARHsA=)
2: 4A6E97AC311E11EE85C30E3BC4F9AE02.roa (hash: 4JCactL0wKyyb6kHrdtWQhFXW9eMMbWcCVYpKnjwk3M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl
rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 02:54:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514 (0x202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194004, serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
Validity
Not Before: Apr 21 02:54:29 2026 GMT
Not After : Apr 28 02:54:29 2026 GMT
Subject: CN=69e6e6e5-6384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b8:cb:90:eb:bf:ce:f1:e8:31:26:8e:93:0e:
ab:bc:e5:5e:fd:72:34:9a:d7:d4:81:db:44:61:6a:
a4:8b:da:25:ed:78:71:7a:ca:06:65:71:06:e8:05:
71:74:66:b1:d8:b7:c2:e7:da:ba:f1:d2:bf:05:90:
b7:ac:0b:0c:1b:84:a3:8a:2c:09:ef:ec:65:c9:de:
c8:58:ff:ba:e8:77:a6:32:f2:9b:81:d5:63:da:17:
b8:16:0a:1b:e8:36:cd:05:7d:e5:b8:bd:ce:fe:87:
6f:02:70:df:10:25:90:e2:95:bc:58:66:f5:9e:12:
77:85:f5:70:f4:08:87:85:53:f4:e1:42:90:c3:86:
5c:ab:69:a2:2c:1e:90:c6:51:43:d4:95:16:10:4e:
99:25:bc:b7:f9:ac:54:37:54:20:45:c1:05:08:c7:
ff:e3:f7:8c:dc:4e:34:16:4e:9a:9a:89:f2:10:a3:
38:ec:4c:f9:73:e5:23:74:b4:d0:15:05:aa:2d:c6:
b7:a8:93:19:0a:5a:5f:35:22:27:93:a4:84:fb:c1:
30:d5:60:a5:c2:bb:01:8e:69:cc:00:de:4a:d1:5b:
b1:96:b5:ed:7b:b6:c1:3b:77:b4:6c:12:f5:3e:11:
29:0c:96:03:3e:19:4d:9d:57:4a:33:05:3c:cb:72:
10:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:93:8D:B6:B7:A0:F7:4C:4B:20:A4:8F:8A:EE:73:15:0E:1D:1A:16
X509v3 Authority Key Identifier:
keyid:7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:d8:f5:23:a9:1c:d4:10:e1:18:b3:0f:4d:d4:40:69:fb:2e:
e4:12:e5:c0:07:8a:9d:29:44:a8:dd:6a:e0:eb:64:81:5d:4a:
db:31:64:ba:59:c9:7d:96:87:35:4b:93:64:f6:1e:42:70:01:
46:38:5c:8b:18:3e:3f:aa:e1:e1:74:9d:4d:03:53:93:67:8c:
fe:9d:e3:60:17:37:b6:7b:9b:7e:6c:ee:f7:f1:12:7b:44:00:
2a:d3:be:dc:89:cd:97:d0:8e:b3:38:0d:29:bd:b2:d5:eb:b9:
91:27:9c:3b:f9:7a:d7:e8:4f:3d:b2:e9:a2:9d:8b:4c:f2:66:
7a:c9:2b:6e:85:fc:62:03:f1:0c:06:4b:90:e3:6b:55:ca:aa:
55:a4:b7:b4:43:1e:4c:4c:e9:d0:16:bf:8e:06:64:e0:00:ac:
06:27:0c:5d:fe:ec:c0:43:90:08:33:e9:00:6c:79:70:b1:9e:
ef:d5:ed:fa:21:80:87:42:78:1d:9a:20:80:d6:57:b1:b1:f9:
20:f0:84:a3:5d:36:22:31:ef:e4:41:6f:97:17:ee:d6:5c:e6:
17:0f:10:58:cb:bd:9e:03:4f:e9:73:30:cc:aa:9d:ae:89:d5:
ca:0b:13:a3:ca:7a:16:2c:d9:e4:f7:6e:1b:9f:6f:94:49:ee:
53:85:d0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 07:24:09 2026 by rpki-client