
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft
File: FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft (raw, json)
Hash identifier: VONyl15eJwH5X/0v82ZDATYuydscYrCE6ukbA9zrqrM=
Subject key identifier: 3C:8E:FA:24:35:D5:F2:3E:D0:4B:9E:24:90:FF:5D:23:14:19:43:A0
Authority key identifier: 16:02:38:49:B9:C6:4D:56:DE:DC:AE:9B:12:86:3D:07:31:88:AC:2E
Certificate issuer: /CN=A9197FBD/serialNumber=16023849B9C64D56DEDCAE9B12863D073188AC2E
Certificate serial: 01E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft
Manifest number: 01E8
Signing time: Sun 05 Apr 2026 02:52:02 +0000
Manifest this update: Sun 05 Apr 2026 02:52:02 +0000
Manifest next update: Sun 12 Apr 2026 02:52:02 +0000
Files and hashes: 1: FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl (hash: ZRobXp6EtWTIajfisW+awML7KyTVYSS9MvK6RCVhjIg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl
rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:52:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488 (0x1e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197FBD, serialNumber=16023849B9C64D56DEDCAE9B12863D073188AC2E
Validity
Not Before: Apr 5 02:52:02 2026 GMT
Not After : Apr 12 02:52:02 2026 GMT
Subject: CN=69d1ce52-c1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:f1:f6:7f:af:7f:a6:d0:4c:2f:a6:5b:9c:
6b:fe:60:cd:4d:12:3c:0c:16:23:6b:af:49:01:e8:
fb:74:8a:d2:3a:a9:74:13:29:f3:37:4b:67:43:80:
35:cc:69:87:b5:e0:15:44:c8:03:a2:a7:25:85:13:
f1:32:a9:7e:39:8c:b4:ec:45:4b:4e:ba:d8:f6:91:
f1:4a:8b:6a:4d:e7:9d:a4:27:5f:09:24:05:4a:da:
62:42:7d:34:07:9d:b2:86:76:54:2e:95:0b:27:8e:
65:f7:ca:29:4d:a8:d6:69:69:44:d7:2c:04:97:96:
ec:51:89:ae:49:ce:fa:83:6f:0d:97:57:4b:14:7d:
71:79:8c:1a:32:10:4f:5b:50:01:0a:ee:6a:4c:e4:
a9:97:8f:1c:91:7a:94:06:1a:26:52:ce:e9:72:6a:
8e:22:7a:84:8e:81:05:1b:f1:98:96:9d:d3:3d:e8:
54:eb:29:cc:9e:e9:cd:3f:23:52:fc:8e:01:eb:6c:
c2:67:e8:40:ca:c4:1a:70:10:a7:67:86:9b:03:9d:
5e:35:fd:94:a6:ab:47:f2:c5:82:41:22:29:13:e6:
09:6b:3a:6b:94:ab:77:38:f3:93:38:21:5e:79:21:
5c:f1:3c:49:a1:0d:9f:36:92:a7:af:53:1c:dd:13:
4a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8E:FA:24:35:D5:F2:3E:D0:4B:9E:24:90:FF:5D:23:14:19:43:A0
X509v3 Authority Key Identifier:
keyid:16:02:38:49:B9:C6:4D:56:DE:DC:AE:9B:12:86:3D:07:31:88:AC:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8b:f0:09:dd:0e:cb:9e:b5:78:4c:4c:bf:b0:43:e9:61:bf:
dc:02:56:2c:c1:7b:fe:a6:35:27:c5:42:5a:6e:3c:eb:f5:40:
5e:57:e7:2c:4f:4c:60:e6:c9:04:83:38:ce:76:ef:c9:07:98:
37:bb:00:eb:93:dc:7c:54:d6:9b:4f:d3:90:c1:be:59:4d:b6:
4c:c3:b6:4c:4c:88:50:99:f3:93:98:6f:f6:28:58:b9:88:44:
c7:85:8b:ce:6f:6b:87:99:41:6f:f4:c9:3e:48:d8:9e:49:22:
85:d4:2e:b8:5a:a8:ad:f0:94:45:36:3f:f5:54:d2:06:1a:7e:
09:77:f2:7b:0e:03:ae:8a:cf:3f:aa:d7:18:3b:bf:b9:68:d8:
40:76:b5:21:e8:02:62:09:c8:f2:36:2e:b8:85:98:df:98:1e:
a8:14:33:59:0f:be:fb:9a:d2:f7:fa:e0:04:db:b6:5d:12:15:
f5:31:50:8f:2f:fc:54:54:68:f7:b8:df:73:f5:af:fd:84:f1:
13:d7:39:e7:1a:4c:5f:55:2a:c2:79:3c:60:86:a5:25:5e:f8:
ae:d0:05:a4:ff:5c:d2:7d:19:a6:bc:c7:a3:e2:0c:45:08:32:
da:ee:fd:30:97:41:c5:e0:ab:ff:50:69:ff:0a:99:ef:73:9d:
5b:88:e9:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTdGQkQxMTAvBgNVBAUTKDE2MDIzODQ5QjlDNjRENTZERURDQUU5QjEyODYzRDA3
MzE4OEFDMkUwHhcNMjYwNDA1MDI1MjAyWhcNMjYwNDEyMDI1MjAyWjAYMRYwFAYD
VQQDEw02OWQxY2U1Mi1jMWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqn7x9n+vf6bQTC+mW5xr/mDNTRI8DBYja69JAej7dIrSOql0EynzN0tnQ4A1
zGmHteAVRMgDoqclhRPxMql+OYy07EVLTrrY9pHxSotqTeedpCdfCSQFStpiQn00
B52yhnZULpULJ45l98opTajWaWlE1ywEl5bsUYmuSc76g28Nl1dLFH1xeYwaMhBP
W1ABCu5qTOSpl48ckXqUBhomUs7pcmqOInqEjoEFG/GYlp3TPehU6ynMnunNPyNS
/I4B62zCZ+hAysQacBCnZ4abA51eNf2UpqtH8sWCQSIpE+YJazprlKt3OPOTOCFe
eSFc8TxJoQ2fNpKnr1Mc3RNK7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDyO+iQ1
1fI+0EueJJD/XSMUGUOgMB8GA1UdIwQYMBaAFBYCOEm5xk1W3tyumxKGPQcxiKwu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0ZCRC83RkZGNDU3NDQ2
RUExMUVFQTZFREVBNjNDNEY5QUUwMi9GZ0k0U2JuR1RWYmUzSzZiRW9ZOUJ6R0ly
QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZnSTRTYm5HVFZiZTNLNmJFb1k5QnpHSXJDNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
N0ZCRC83RkZGNDU3NDQ2RUExMUVFQTZFREVBNjNDNEY5QUUwMi9GZ0k0U2JuR1RW
YmUzSzZiRW9ZOUJ6R0lyQzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjYvwCd0Oy561eExMv7BD6WG/3AJWLMF7/qY1J8VCWm486/VAXlfnLE9MYObJ
BIM4znbvyQeYN7sA65PcfFTWm0/TkMG+WU22TMO2TEyIUJnzk5hv9ihYuYhEx4WL
zm9rh5lBb/TJPkjYnkkihdQuuFqorfCURTY/9VTSBhp+CXfyew4DrorPP6rXGDu/
uWjYQHa1IegCYgnI8jYuuIWY35geqBQzWQ+++5rS9/rgBNu2XRIV9TFQjy/8VFRo
97jfc/Wv/YTxE9c55xpMX1Uqwnk8YIalJV74rtAFpP9c0n0ZprzHo+IMRQgy2u79
MJdBxeCr/1Bp/wqZ73OdW4jppQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:04:11 2026 by rpki-client