
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
File: fHxDqtDIa183jl18MzKgXeRhJ1A.mft (raw, json)
Hash identifier: KNh+7NCT7puJMg/RJO58JpSw0BvBMNHLESVn8v2B1Kk=
Subject key identifier: AC:9C:0A:BA:C7:65:81:6E:1B:2B:00:2D:05:B1:57:BF:2D:8E:30:88
Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50
Certificate issuer: /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
Certificate serial: 090B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
Manifest number: 08C0
Signing time: Wed 16 Sep 2026 20:34:19 +0000
Manifest this update: Wed 16 Sep 2026 20:34:18 +0000
Manifest next update: Wed 23 Sep 2026 20:34:18 +0000
Files and hashes: 1: fHxDqtDIa183jl18MzKgXeRhJ1A.crl (hash: HVsXCBsuYXzocu/fk12jLCK+UDgp4J1x9vTdbrLO9Oc=)
2: 5035F194413211EDAAFCC96EC4F9AE02.roa (hash: kfnLo6TLNnxHzHz2hfx3dzeu6fOXlby4NhM/hMtaUog=)
3: E897EA5A3EE411ED905A3415C4F9AE02.roa (hash: MaFJmDPMqlk1C6MUJjdtLiNgPwGqra//weYceabgP/k=)
4: E7EBC9003EE411ED905A3415C4F9AE02.roa (hash: N8OrGg15ZoxlIKz8paOj7jgooryKDtsZ+DLKkaeQezQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl
rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 20:34:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2315 (0x90b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CA50, serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
Validity
Not Before: Sep 16 20:34:18 2026 GMT
Not After : Sep 23 20:34:18 2026 GMT
Subject: CN=6aaafd4b-2725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cc:18:5e:f9:db:0b:5d:b6:5d:d0:a5:f8:f0:
af:52:df:de:06:a4:2d:15:90:37:31:98:f2:2a:cc:
75:16:44:5c:68:4b:52:77:ea:16:03:ab:99:71:1f:
28:b9:2f:e2:f0:62:e7:e0:09:b6:07:93:6b:a1:38:
6c:9f:a0:53:3b:b6:ba:69:54:cb:fb:84:da:c8:90:
23:0c:f9:19:d2:7b:fc:ef:ec:3b:45:14:c9:80:71:
20:b8:3e:85:ea:4f:5a:f1:ae:db:02:d6:55:d7:4e:
01:6b:c7:0d:51:3b:6f:a7:12:fa:8c:16:d0:eb:f5:
b9:2f:98:e6:b9:71:72:3f:71:9f:c2:34:ac:28:e5:
5f:a0:02:c4:37:3c:d6:74:ea:1a:87:d7:0a:4e:52:
81:f9:44:ca:ab:d0:18:a0:bc:ea:16:a6:9d:3b:d4:
26:ff:b6:fc:80:8e:44:53:2f:ee:1d:0c:71:ba:ef:
ca:6f:22:4d:a1:86:62:4d:38:54:ff:d0:5d:16:b1:
6b:f1:e3:32:4e:f6:1b:10:34:0c:e2:bb:bb:1d:d1:
72:bb:cc:90:26:af:3c:01:35:3a:d4:90:1a:f0:18:
88:fd:31:93:97:5f:2e:1c:46:5f:a9:e3:5e:4c:90:
a1:64:3b:9e:f3:b4:d5:ed:37:6c:53:e7:a0:e9:af:
8b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9C:0A:BA:C7:65:81:6E:1B:2B:00:2D:05:B1:57:BF:2D:8E:30:88
X509v3 Authority Key Identifier:
keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:2d:8b:40:10:43:90:7d:56:a8:12:4c:78:42:23:b4:c4:6b:
12:f6:ea:be:8c:82:7a:5c:2c:a9:b3:d9:13:31:a1:8e:e7:96:
48:45:30:58:45:33:72:49:d6:44:98:ca:86:65:1d:d5:c3:ca:
da:0c:2d:66:c4:a9:eb:3f:0c:c5:8a:89:50:ee:6d:ee:57:14:
1b:10:13:44:62:50:fe:60:e2:02:46:e7:9c:2b:6b:ca:87:b1:
98:1a:a6:21:38:b9:f5:0e:03:6e:87:3c:5e:84:76:67:47:5f:
03:29:b0:56:65:49:d6:50:4a:87:98:2a:83:ea:2a:4b:15:69:
3e:58:48:8f:6f:5f:6d:0c:c2:b0:b2:34:11:70:8e:de:de:a0:
54:d9:d9:b3:65:0a:3f:45:18:31:83:5c:00:c9:49:fd:74:26:
de:e1:8c:d8:1d:19:19:55:c2:92:b2:66:33:63:7b:1b:f1:25:
df:d8:a1:de:8a:3e:45:95:d5:17:98:72:b2:a7:57:fa:95:f9:
bf:50:c3:2f:12:9b:7d:6b:f4:80:db:4b:c1:2b:28:1b:37:2c:
df:c2:c0:8d:e6:9d:ec:97:91:c6:38:2e:af:44:83:54:e7:a1:
f4:05:c5:37:03:77:bc:93:bd:75:3d:dd:8a:54:0a:19:1a:7f:
0b:c9:91:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:47:52 2026 by rpki-client