
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
File: F8IFAD4uuR49xG6qyJD20LUN5uI.mft (raw, json)
Hash identifier: VltYZRNDGa7Tqn0ZFb2dxVR5LEJyE+i5nf6lMG7lqEg=
Subject key identifier: F2:06:13:30:A3:8D:76:2E:C9:BA:F2:33:48:E6:7C:A1:4D:DD:C6:57
Authority key identifier: 17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2
Certificate issuer: /CN=A9146AD7/serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
Certificate serial: A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
Manifest number: 9A
Signing time: Tue 02 Jun 2026 16:24:05 +0000
Manifest this update: Tue 02 Jun 2026 16:24:05 +0000
Manifest next update: Tue 09 Jun 2026 16:24:05 +0000
Files and hashes: 1: F8IFAD4uuR49xG6qyJD20LUN5uI.crl (hash: 4RFOjISt0HoQ/l8MajouXKOzWn430Zg+JIt+54Rn4sw=)
2: 404053A882BE11F0ADD6D367C4F9AE02.roa (hash: Rt1fqxpDUHKbQnEZeGSolrH7j72JJeAt6X3959FalwY=)
3: 6FA6ED7E82C711F0AD86D64DC4F9AE02.roa (hash: HxueVyeG48TlpzJ0pvXXuxMket+vhTgEYarRY925CZ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl
rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 16:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146AD7, serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
Validity
Not Before: Jun 2 16:24:05 2026 GMT
Not After : Jun 9 16:24:05 2026 GMT
Subject: CN=6a1f03a5-aa4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:d9:80:51:cd:3a:6b:b7:9a:22:f2:fd:85:
fb:d3:f9:0c:48:64:a3:90:c0:69:99:7a:80:39:8c:
02:14:9d:8d:f5:8b:22:64:30:4b:56:62:58:bf:fe:
7b:40:32:52:27:60:97:6c:15:c0:aa:ca:c6:3a:a6:
a6:76:29:2e:e2:cb:11:c1:1e:69:77:5f:b3:87:49:
11:f2:8c:c8:c4:37:68:2f:fe:d1:c9:2b:a9:9a:7e:
04:29:81:13:32:db:5d:62:04:71:4c:03:0a:05:1c:
0e:2f:4a:f7:69:26:1c:28:2b:e3:fa:ed:89:bc:5e:
dc:29:6e:ca:5c:67:2f:c2:23:05:63:f9:2a:78:e9:
b4:7c:30:37:d3:95:d4:84:f4:79:1f:d1:7b:63:24:
b8:42:38:1b:c5:7c:a1:8f:e1:91:e2:5e:a6:99:6b:
8d:65:e8:74:cc:74:40:66:d0:09:9d:a7:3b:19:05:
b3:67:8c:bf:1c:10:32:3b:6c:40:cf:67:c2:7e:00:
d7:bd:f5:7c:90:61:33:15:71:6c:ac:7a:cf:4f:19:
b3:d4:07:94:b1:02:93:0e:2b:e1:ee:ff:73:68:6f:
0b:a3:ac:bd:bd:53:63:43:2d:c0:f3:ce:5c:76:ff:
17:e7:90:9d:1d:da:ef:25:70:33:75:48:48:cf:7e:
39:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:06:13:30:A3:8D:76:2E:C9:BA:F2:33:48:E6:7C:A1:4D:DD:C6:57
X509v3 Authority Key Identifier:
keyid:17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:09:45:78:83:76:04:6a:04:58:dc:79:70:56:a9:37:f5:71:
09:cd:b5:2d:3d:6b:fe:d5:46:e0:ea:00:e0:e6:0c:9b:fc:b4:
75:76:45:69:5e:5f:3d:9f:44:58:72:3e:b1:e2:d9:e3:ea:7a:
df:86:c5:ad:0f:39:12:5f:1d:6b:11:8c:57:21:06:f9:9e:01:
1c:e9:84:8b:7c:22:59:75:4a:9d:74:0d:f5:db:32:82:e3:0d:
24:b9:5a:9c:25:1b:5b:a7:7a:86:6b:77:e5:e0:bc:51:d7:68:
b5:8e:33:9c:78:8e:56:7f:9a:09:c1:ea:f8:05:90:ce:d9:17:
59:c9:21:c0:79:7b:ae:1b:87:3b:85:a2:3a:c6:4f:d6:38:95:
53:e6:d9:ae:d2:b6:94:23:16:c7:3d:67:14:aa:16:52:88:a1:
06:97:43:6a:bf:a5:9d:6f:af:8f:9e:bd:62:9d:8a:5f:50:ae:
18:20:7d:87:21:b4:77:e7:78:e7:ed:34:88:07:3a:72:26:f0:
d0:1c:64:1d:2b:05:b1:d3:12:40:93:4c:d9:7e:45:21:92:94:
8e:e8:12:e0:eb:48:50:a7:9e:8e:fa:cc:d5:12:91:af:bd:29:
af:8b:c0:ea:ad:5b:78:2f:67:ee:f1:5e:9d:9e:ba:8c:9d:8f:
8a:0f:24:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:24:51 2026 by rpki-client