
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
File: F8IFAD4uuR49xG6qyJD20LUN5uI.mft (raw, json)
Hash identifier: BOrtmZR+G2bhrDbslUEumeiv9bMDZyk9akTOSuYh5Zw=
Subject key identifier: 2C:D1:A9:87:FE:3E:ED:84:CB:B8:51:06:BD:89:EB:60:DD:99:5B:2C
Authority key identifier: 17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2
Certificate issuer: /CN=A9146AD7/serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
Certificate serial: B9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
Manifest number: B3
Signing time: Mon 20 Jul 2026 16:30:04 +0000
Manifest this update: Mon 20 Jul 2026 16:30:04 +0000
Manifest next update: Mon 27 Jul 2026 16:30:04 +0000
Files and hashes: 1: F8IFAD4uuR49xG6qyJD20LUN5uI.crl (hash: KMHZu/+jQGGuZZcbBYkYS+M7qxFS435SDkrLuYCxfwo=)
2: 404053A882BE11F0ADD6D367C4F9AE02.roa (hash: Rt1fqxpDUHKbQnEZeGSolrH7j72JJeAt6X3959FalwY=)
3: 6FA6ED7E82C711F0AD86D64DC4F9AE02.roa (hash: HxueVyeG48TlpzJ0pvXXuxMket+vhTgEYarRY925CZ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl
rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 16:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146AD7, serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
Validity
Not Before: Jul 20 16:30:04 2026 GMT
Not After : Jul 27 16:30:04 2026 GMT
Subject: CN=6a5e4d0c-f238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:f0:4c:ce:90:01:4b:f8:06:b9:37:cd:a9:
d2:08:fc:93:ca:9b:7b:f0:76:3a:6a:21:48:f4:94:
7f:d1:d8:8d:7c:7f:16:3a:e9:eb:68:60:c1:84:50:
ef:42:8b:46:2a:84:5a:8d:e1:73:21:12:4b:8d:83:
2b:a8:1b:ab:82:c1:48:3e:52:9c:6d:19:5a:76:c0:
e4:fd:bf:18:b3:89:a0:30:90:86:3e:98:b1:9b:42:
f1:be:15:d3:49:a1:66:bd:9a:30:76:74:a9:c2:57:
de:78:82:87:dc:7a:ba:ac:94:76:48:57:3b:73:7b:
5b:c9:36:48:e9:ab:d7:08:a8:41:53:f9:ba:11:64:
59:0d:49:59:ad:fc:1b:d9:ef:a9:da:4d:92:34:a3:
b5:c7:aa:bf:aa:25:9a:b2:6d:61:40:cd:a5:a5:e6:
e6:7c:02:27:f9:0c:6a:df:30:d0:84:45:d8:08:62:
5f:49:ba:e9:29:42:a6:35:5c:ec:55:49:09:be:9c:
57:eb:c1:7c:0b:33:2f:45:c4:01:32:50:3d:8e:03:
fe:66:db:db:22:31:82:2a:e4:65:a5:c8:54:6d:54:
25:ce:1b:06:09:ba:dd:57:d9:a0:af:63:de:e5:c7:
ea:33:02:91:ff:e4:ac:b6:33:bb:c6:59:8a:15:65:
83:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D1:A9:87:FE:3E:ED:84:CB:B8:51:06:BD:89:EB:60:DD:99:5B:2C
X509v3 Authority Key Identifier:
keyid:17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:0c:2a:69:a5:c4:36:40:a9:4f:64:8c:4a:f4:77:f7:6c:21:
3c:bc:dd:1f:e2:12:26:1e:c6:2e:d8:cb:35:5e:4b:0e:cb:72:
35:2b:a6:b9:54:45:7c:e2:9e:be:91:55:d5:4d:68:f3:00:2b:
d7:f5:17:33:0b:38:4d:1e:8f:fc:12:7b:38:04:e2:81:94:17:
01:2b:ac:82:01:88:53:bc:bc:5b:c4:d6:67:cc:2b:2a:18:d7:
f9:0c:fc:66:1d:80:ac:fb:48:c7:8a:83:f5:ea:08:60:55:52:
9d:96:1d:ef:33:32:dd:66:0e:5f:51:c2:18:9b:22:9c:2b:e1:
2b:16:59:fd:35:2d:e3:e4:1a:e3:34:67:03:9c:17:b6:4e:37:
b3:9a:02:b2:41:08:c9:8f:c8:e8:59:f7:da:6a:77:dd:88:5b:
b9:d2:01:a0:1f:e4:cf:46:ed:a4:b5:6f:75:49:1a:ce:86:a3:
dd:4d:21:e2:96:d4:e6:4a:1e:5b:21:c7:42:e1:2a:25:bd:fb:
60:12:38:e6:73:73:67:5e:59:30:cb:81:a2:fa:39:ee:7f:57:
28:d5:0d:8d:db:86:da:1f:79:9c:0a:3d:bc:f0:b7:53:c4:29:
15:a9:c5:d9:48:97:75:71:da:33:d9:e1:a0:2a:12:65:54:e0:
d5:4b:07:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:50:41 2026 by rpki-client