
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
File: -ffptMwx85XFzbj6yfUvyldSTeE.mft (raw, json)
Hash identifier: Ad4rHMPfPtV0/vLJRCwg6Lb+85pQn9BfFKswXyaY0hc=
Subject key identifier: 76:16:D7:9A:D0:F8:BA:C2:28:15:1A:66:0B:5A:D9:AC:E5:9E:4D:96
Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
Certificate issuer: /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Certificate serial: 03C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
Manifest number: 039C
Signing time: Thu 03 Sep 2026 00:42:36 +0000
Manifest this update: Thu 03 Sep 2026 00:42:36 +0000
Manifest next update: Thu 10 Sep 2026 00:42:36 +0000
Files and hashes: 1: -ffptMwx85XFzbj6yfUvyldSTeE.crl (hash: BXf2Gq5QiMgTe2s4tkMC0RNtHLfhrC8Khi5qxM/MScY=)
2: A38DD8D40E1111F1B60944950A3D8C67.roa (hash: 8xomlP6u/pFuCS+4ZI0VqTn0cJ1Ypm6zhDkBB6EqaYQ=)
3: 0EDE44B2797511EF9F3FEC4CC4F9AE02.roa (hash: X52OCC/lE3b4nsh0tIE1/ie7TTPJC9iTuuS5fQwz44I=)
4: 9770D05EBC4211F0B94CE580C4F9AE02.roa (hash: EKVGFJ/g32vu6i1eB7NEFOf+Zsly8ubAP4iYudVd5gM=)
5: 14A16ED4F0C011EFB89A0131C4F9AE02.roa (hash: JiCW8fyrxd1H5hhanenqtI3Q+to3q8hEENBSB39tRpc=)
6: 2CE2D8C2924D11F1BEC529D43811F970.roa (hash: 2Zqqq8CmUd4n+HR7fT+QRClfMOfng4re27zUhAVIAbo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 00:42:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 961 (0x3c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Validity
Not Before: Sep 3 00:42:36 2026 GMT
Not After : Sep 10 00:42:36 2026 GMT
Subject: CN=6a98c27c-6364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b3:1a:ca:74:bd:68:d9:0f:35:b2:24:32:45:
c3:25:e5:51:a3:53:f6:9c:08:fa:8b:2c:30:b9:4d:
8e:df:b9:a5:0b:f7:6d:5d:09:6b:a4:05:05:8e:a9:
3d:69:7b:2c:b5:f4:3d:1c:41:bc:16:8e:c6:83:49:
63:cd:8d:95:68:dc:3e:08:fb:80:e1:12:15:46:61:
ab:e1:4f:a0:eb:06:05:ff:65:19:ad:99:b6:07:f3:
ae:fc:45:55:6f:4c:cc:89:99:30:3a:f3:6f:97:73:
40:65:e0:27:3f:83:ad:a9:e2:3e:0a:3b:08:24:b3:
07:b3:81:3b:e9:0c:de:e7:80:6e:ec:83:96:75:5a:
94:ee:28:07:3e:77:c4:4a:8a:2a:df:c1:46:88:2e:
30:26:2f:96:ef:d5:e7:1d:42:92:c2:e3:48:76:73:
82:2e:8c:58:1c:0c:d5:ee:b8:a4:81:26:27:bd:f3:
b5:23:d3:5a:db:15:40:06:b0:7f:58:83:28:41:ac:
89:28:2e:bf:4d:9a:e3:b7:3f:be:49:bd:db:18:73:
75:84:6f:58:ae:12:7d:37:ae:c1:e1:15:09:04:54:
91:c7:74:5f:bc:0c:91:c0:92:51:dd:a1:7b:7d:e8:
8f:b9:be:a1:d0:4b:eb:28:a4:2f:28:d1:a6:87:fc:
ed:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:16:D7:9A:D0:F8:BA:C2:28:15:1A:66:0B:5A:D9:AC:E5:9E:4D:96
X509v3 Authority Key Identifier:
keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:1a:76:9b:ca:53:f2:de:0f:02:7e:e8:29:2c:72:c3:87:eb:
9f:4b:d1:2d:c9:8a:82:2d:91:d7:2c:47:7b:44:fc:94:ee:71:
47:27:5e:7e:6a:c2:4e:2c:f1:3f:87:36:bb:59:33:9d:c3:14:
74:2b:a5:ee:3f:90:8c:49:ea:f9:af:3a:14:9d:1c:5c:ff:e1:
2b:85:99:ff:b3:ab:0b:d1:8b:d5:3c:f8:1c:3f:86:ac:c2:e6:
2c:70:9d:85:d9:bc:cb:31:82:ca:58:91:fd:6f:44:1d:88:45:
92:ea:92:76:88:77:9b:e7:52:ca:b1:69:bb:a5:5e:4e:74:b1:
85:50:d5:8e:d9:6a:5b:73:a2:36:98:b2:6f:17:8d:94:9a:3e:
97:f4:26:79:2b:c7:6d:dd:f3:5d:7a:96:0c:4f:b5:73:fb:cf:
df:42:9c:aa:d6:04:f8:84:2b:55:16:e6:14:b5:0e:15:7d:44:
7d:6b:9c:51:fd:4a:8e:cd:39:65:4c:21:1d:e8:eb:82:01:9d:
65:fe:0c:d8:a2:fd:56:ca:57:ea:55:42:6d:e1:7b:4d:d5:e3:
c6:da:00:d3:49:18:57:3b:5a:45:a6:04:8a:a0:75:7f:55:bb:
af:e8:e2:cf:92:1c:cd:48:85:c2:cd:9f:08:c5:7c:72:7c:cc:
11:c2:d5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:20:15 2026 by rpki-client