
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
File: F8IFAD4uuR49xG6qyJD20LUN5uI.mft (raw, json)
Hash identifier: JnspvLQBoNkznhOKFCKvGYtqpp9fNgQjsLsWZQ2hwL8=
Subject key identifier: 30:BC:4E:45:D9:C4:1F:A4:42:61:B4:3E:E2:9E:AB:DD:F9:7A:DB:51
Authority key identifier: 17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2
Certificate issuer: /CN=A9146AD7/serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
Certificate serial: DA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
Manifest number: D4
Signing time: Fri 18 Sep 2026 16:21:27 +0000
Manifest this update: Fri 18 Sep 2026 16:21:26 +0000
Manifest next update: Fri 25 Sep 2026 16:21:26 +0000
Files and hashes: 1: F8IFAD4uuR49xG6qyJD20LUN5uI.crl (hash: mppC/071uWySJsaF0C0Vx288Ir2ZX60PHIsAHqOiIgE=)
2: 6FA6ED7E82C711F0AD86D64DC4F9AE02.roa (hash: HxueVyeG48TlpzJ0pvXXuxMket+vhTgEYarRY925CZ0=)
3: 404053A882BE11F0ADD6D367C4F9AE02.roa (hash: Rt1fqxpDUHKbQnEZeGSolrH7j72JJeAt6X3959FalwY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl
rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146AD7, serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
Validity
Not Before: Sep 18 16:21:26 2026 GMT
Not After : Sep 25 16:21:26 2026 GMT
Subject: CN=6aad6507-2d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e3:6e:8b:5e:91:e8:81:d9:f4:cc:50:fb:72:
53:c3:da:71:f4:ba:b5:d8:80:ea:81:4e:83:f1:0e:
a5:7b:34:1d:8d:7f:f6:10:ca:e1:23:d1:6e:27:45:
7e:ca:bc:4b:d1:81:67:76:89:11:5c:75:8d:89:a3:
b1:96:0c:92:52:12:f9:58:24:83:51:97:49:92:98:
9e:03:08:ea:b3:df:48:25:e9:51:69:86:09:81:52:
3a:86:77:d5:d3:bb:fa:65:ea:36:e5:4d:01:64:da:
fc:b4:b8:03:ba:74:c1:74:fa:0f:89:08:fd:55:46:
6a:bf:a5:aa:6b:52:65:50:ce:d3:08:dc:b5:9e:a8:
b8:43:18:77:68:a1:d4:b9:78:5e:db:6e:a9:19:04:
91:26:8c:5c:2a:9e:77:50:40:25:78:c4:d2:14:7c:
7f:b3:e4:25:3d:7c:1b:cd:a3:b4:4d:4b:ad:a0:b0:
62:6a:2c:a5:3b:82:13:f3:f7:1e:c2:96:54:44:3b:
4a:d8:af:2f:51:f5:24:2d:f2:db:7b:06:66:25:ae:
e5:0e:d8:1b:91:74:2c:ce:2b:2f:69:d8:a2:64:08:
f0:31:b0:3b:18:8f:2f:ff:f8:3c:10:88:9d:82:e1:
62:3c:ee:b7:ac:1f:09:39:51:cc:5d:b5:5d:ca:35:
7b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BC:4E:45:D9:C4:1F:A4:42:61:B4:3E:E2:9E:AB:DD:F9:7A:DB:51
X509v3 Authority Key Identifier:
keyid:17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:51:39:bf:55:a0:68:d4:d9:08:03:e8:e8:d9:2e:9a:77:c8:
11:08:91:ab:c9:fc:2d:35:5d:21:29:de:f3:1b:96:4c:c4:b5:
ae:3a:85:97:d3:57:44:db:7a:7b:51:35:8b:0e:ef:c4:cb:9f:
aa:d9:fb:c6:87:55:2d:05:d9:54:e9:dc:04:2c:3b:ee:3c:55:
4b:01:f0:f0:26:a6:6a:e1:2c:2f:a6:04:75:13:f1:62:a0:7d:
4c:c6:a0:06:77:c9:ba:1c:64:d9:48:bc:ee:cc:4f:cb:0a:71:
2d:c9:67:7d:0a:8c:88:c4:d7:fe:5c:bb:df:56:b9:13:07:c0:
a3:6d:56:9c:9c:41:2b:27:5d:ed:66:4c:17:8c:8f:d5:5d:c2:
c0:1a:dd:12:0d:ee:87:e1:65:51:ca:ca:f0:f2:9a:0a:fa:2a:
39:21:31:ef:0f:f7:f6:dd:4c:72:a5:4b:07:e8:80:7b:c8:36:
28:15:f6:d5:5a:85:b0:9e:a7:f6:75:d5:ce:80:94:95:d8:b4:
b9:81:85:69:1a:0a:63:5e:f3:ef:6d:c4:38:63:f9:40:de:56:
ed:9c:dd:e6:c4:40:b1:a5:a1:f3:92:fe:9a:40:c7:f2:7f:bc:
14:0c:2f:20:f2:6d:90:f3:a5:d2:bc:e3:f7:1d:f8:3c:c3:f9:
53:a8:86:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:39:38 2026 by rpki-client