
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
File: FSDys0q93K6U-pIu9HV802FA8lQ.mft (raw, json)
Hash identifier: YdbFa8sNFKJIkMEKwlDPhsWedrmIUDhM3hiN3F9tZw0=
Subject key identifier: 1A:C8:A7:8A:49:09:4B:42:1A:05:8D:F0:CE:15:FA:33:AC:8E:58:E9
Authority key identifier: 15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54
Certificate issuer: /CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254
Certificate serial: 080C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
Manifest number: 07FA
Signing time: Tue 08 Sep 2026 21:22:57 +0000
Manifest this update: Tue 08 Sep 2026 21:22:57 +0000
Manifest next update: Tue 15 Sep 2026 21:22:57 +0000
Files and hashes: 1: FSDys0q93K6U-pIu9HV802FA8lQ.crl (hash: +k1P/aG1bFS+2Sxhcvx3HGKtCWJoZ9/rSPKaxJE71Gw=)
2: D99D60F67D4D11F1A3C50AF076A30FBC.roa (hash: lS9pDcsYoMEnDdngCy8rUbtA4EF+p1a4rmGseP52Ins=)
3: A6864ACE7BA911EDB41A851EC4F9AE02.roa (hash: +mWQDhR0SQRE9fYy6utyEy97LqtAqWWlca4RF6I7GEw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl
rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 21:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2060 (0x80c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143FE9, serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254
Validity
Not Before: Sep 8 21:22:57 2026 GMT
Not After : Sep 15 21:22:57 2026 GMT
Subject: CN=6aa07cb1-402c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:65:30:40:7d:ef:3b:a6:8e:73:b9:62:16:02:
62:8f:e8:39:16:da:48:64:8d:42:e1:c7:2e:4d:40:
73:1c:14:76:45:26:3e:dc:81:b2:a7:89:3b:65:df:
1b:9c:5f:45:8e:39:d4:4e:ce:7e:b6:9e:81:94:f7:
99:70:af:29:5b:a0:4d:21:12:01:b6:ef:85:4b:04:
f0:f2:b2:0e:71:7d:d3:81:24:4a:22:c0:63:cf:d4:
19:45:b3:04:92:49:a3:0d:d0:21:90:ae:6d:c4:3d:
33:cb:71:a0:93:a2:aa:96:e4:f2:50:8a:df:4d:e9:
36:6c:bd:d2:f6:63:c4:7c:7d:39:08:1c:72:85:3e:
45:65:f6:2d:f4:fb:7b:26:9d:67:07:b6:40:55:7d:
f2:e5:4a:46:4e:54:bc:6c:f0:92:43:97:39:b4:85:
c2:ff:9e:2d:8f:71:ec:a9:97:ae:5e:37:11:55:e3:
6c:13:55:cd:f7:08:82:ea:85:7f:3d:1f:99:ec:55:
57:92:26:24:0a:c7:04:8e:7e:40:2e:55:9b:31:70:
50:60:bb:4a:d4:fe:a9:99:99:47:85:64:a8:e3:d2:
70:fd:ae:18:35:a8:e4:c5:25:9c:b8:e5:25:c9:56:
6f:aa:a2:d8:57:92:dd:b1:96:aa:b7:ff:ef:fd:8e:
6b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C8:A7:8A:49:09:4B:42:1A:05:8D:F0:CE:15:FA:33:AC:8E:58:E9
X509v3 Authority Key Identifier:
keyid:15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:d5:fb:32:43:93:0b:b6:b0:ce:76:bf:b3:69:ea:32:cf:90:
47:3e:d4:f3:c3:17:8a:78:b2:84:f6:84:e8:18:c9:d0:55:8c:
e5:c9:a9:5a:0a:14:07:b2:4a:ee:07:33:f3:93:37:c8:6c:4f:
fe:a4:a8:65:b5:33:68:a2:18:34:8f:2f:92:73:82:13:93:72:
87:b8:7f:c6:cf:16:ef:ea:b1:8f:58:c5:1e:e0:a2:40:27:ca:
fa:dc:1c:bb:57:ff:cf:27:fe:1e:61:52:a3:cc:06:77:bd:84:
7a:0e:e3:81:1e:4c:1a:1a:52:fa:56:74:0d:89:dd:a1:f3:99:
83:a2:30:89:c5:99:99:ca:72:e0:17:47:49:cc:4d:b9:d7:5e:
48:45:d1:1a:d9:63:5b:87:ac:b0:81:13:4e:e8:ac:92:7c:19:
be:eb:47:56:0d:d5:6a:e6:b8:af:ff:df:5f:77:1b:81:86:75:
f7:42:45:e9:75:7e:fb:89:7a:3d:35:16:46:b5:05:99:86:69:
4b:91:41:81:6a:91:4d:82:c6:e5:c9:a1:ef:46:3e:7c:4f:00:
c8:fc:f5:6f:b3:14:c3:47:1c:b2:65:50:e3:fb:5d:1c:80:b2:
de:27:3c:9c:c3:81:a5:76:97:2e:40:78:1f:05:e3:30:75:89:
36:49:31:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDNGRTkxMTAvBgNVBAUTKDE1MjBGMkIzNEFCRERDQUU5NEZBOTIyRUY0NzU3Q0Qz
NjE0MEYyNTQwHhcNMjYwOTA4MjEyMjU3WhcNMjYwOTE1MjEyMjU3WjAYMRYwFAYD
VQQDEw02YWEwN2NiMS00MDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx2UwQH3vO6aOc7liFgJij+g5FtpIZI1C4ccuTUBzHBR2RSY+3IGyp4k7Zd8b
nF9FjjnUTs5+tp6BlPeZcK8pW6BNIRIBtu+FSwTw8rIOcX3TgSRKIsBjz9QZRbME
kkmjDdAhkK5txD0zy3Ggk6KqluTyUIrfTek2bL3S9mPEfH05CBxyhT5FZfYt9Pt7
Jp1nB7ZAVX3y5UpGTlS8bPCSQ5c5tIXC/54tj3HsqZeuXjcRVeNsE1XN9wiC6oV/
PR+Z7FVXkiYkCscEjn5ALlWbMXBQYLtK1P6pmZlHhWSo49Jw/a4YNajkxSWcuOUl
yVZvqqLYV5LdsZaqt//v/Y5rLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBrIp4pJ
CUtCGgWN8M4V+jOsjljpMB8GA1UdIwQYMBaAFBUg8rNKvdyulPqSLvR1fNNhQPJU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZFOS9GOUU2NUUyMDQ0
MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNLNlUtcEl1OUhWODAyRkE4
bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZTRHlzMHE5M0s2VS1wSXU5SFY4MDJGQThsUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
M0ZFOS9GOUU2NUUyMDQ0MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNL
NlUtcEl1OUhWODAyRkE4bFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARtX7MkOTC7awzna/s2nqMs+QRz7U88MXiniyhPaE6BjJ0FWM5cmpWgoUB7JK
7gcz85M3yGxP/qSoZbUzaKIYNI8vknOCE5Nyh7h/xs8W7+qxj1jFHuCiQCfK+twc
u1f/zyf+HmFSo8wGd72Eeg7jgR5MGhpS+lZ0DYndofOZg6IwicWZmcpy4BdHScxN
uddeSEXRGtljW4essIETTuisknwZvutHVg3Vaua4r//fX3cbgYZ190JF6XV++4l6
PTUWRrUFmYZpS5FBgWqRTYLG5cmh70Y+fE8AyPz1b7MUw0ccsmVQ4/tdHICy3ic8
nMOBpXaXLkB4HwXjMHWJNkkxaw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 07:52:22 2026 by rpki-client