
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
File: fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json)
Hash identifier: vpW94kN96phxJdtXjD426njgkaoj2jb5pG8ktaYE2Lw=
Subject key identifier: D8:6F:A9:D1:7D:A6:43:D2:E3:53:60:C0:56:54:24:73:57:0C:3A:DA
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial: 0D3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
Manifest number: 0C6C
Signing time: Tue 06 Oct 2026 19:11:31 +0000
Manifest this update: Tue 06 Oct 2026 19:11:31 +0000
Manifest next update: Tue 13 Oct 2026 19:11:31 +0000
Files and hashes: 1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: jihpaDyTVRBoA7jMb48trtKT69y+ABs1Ehglw0t/lYY=)
2: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: +gaavVRD8B7wEFk6T+tpdPtOFmRhdaX1JhEF5NzSaRM=)
3: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: dlzlZoMUm2Cx9g19yLq+yFp31WbZhzVlN+kG3FUpBBA=)
4: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: w14t0ZgvkmqPBwmiw//aiLUsh21WVJ/1hlAo42T5Txs=)
5: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: fT0MQOczypsjHgqIISFNboLyF3R81xE+5ng5wnC/P64=)
6: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: QMsC3xiGNdSJW4HzT3eK1fAgUWFpi8CgaYI1dOuhzws=)
7: E8819018178811EC876F5F50C4F9AE02.roa (hash: k8RYTUE2R9W0lvCqWeEJGJcaj3xzsyGqjLk5FFAGEEQ=)
8: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: UYiuYdXTVxBppiNsiI1q/movnzWH6/WJ+GXsUOQpZSc=)
9: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: smGOjMVd2GLPpurMltuKcuhuCGMyzOm3zhphTWE/Ctg=)
10: C3290D00636F11F0A1C6DA70C4F9AE02.roa (hash: ISA0Y1MNiIaptJ9tTpLl0/OiQqSxEl/CZifftUJCmso=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:11:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3390 (0xd3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Validity
Not Before: Oct 6 19:11:31 2026 GMT
Not After : Oct 13 19:11:31 2026 GMT
Subject: CN=6ac547e3-7e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d8:8e:34:62:1b:e0:1d:b4:b0:0d:1c:98:07:
ab:0c:a7:00:35:fb:08:44:7f:f5:9c:dd:f9:d2:a7:
6b:19:94:00:17:1d:5c:d8:d8:f3:54:53:17:88:f1:
c7:9d:a4:15:e9:e2:4f:03:96:3f:4a:8f:ff:18:f5:
59:f5:3d:57:23:a6:f2:77:ac:61:83:12:08:9b:5f:
8c:43:1c:ba:9d:9b:9b:05:10:f5:80:b6:e1:b9:71:
6b:88:0d:2a:b6:91:fc:c6:fb:76:69:62:c8:7b:87:
9c:4e:b6:45:a9:e0:6a:58:a2:e1:93:40:e5:91:58:
45:29:da:9f:46:fa:a9:81:11:86:80:1b:75:fe:af:
16:12:56:19:1f:38:14:2b:a5:77:bf:0f:e4:28:90:
fd:37:15:84:3d:4a:71:d2:fb:37:87:00:8e:4d:9d:
09:63:ef:53:c8:20:7d:5e:83:41:1b:b5:d0:a2:70:
7c:7b:76:a9:4c:66:d9:33:18:83:87:43:10:bc:c7:
fe:07:ba:02:f5:03:b0:22:45:36:01:09:43:58:5e:
88:ee:f0:d1:6c:91:41:f7:59:78:57:9d:14:26:8e:
96:17:86:d2:45:4f:8f:ee:a4:e7:fb:18:bf:ca:98:
0f:3e:3c:1f:ba:ac:c9:7e:ad:13:9c:4b:29:8a:de:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6F:A9:D1:7D:A6:43:D2:E3:53:60:C0:56:54:24:73:57:0C:3A:DA
X509v3 Authority Key Identifier:
keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8f:98:be:18:97:38:72:0c:16:f5:a4:6b:96:68:ea:c8:9b:
d9:8e:f2:80:10:53:b4:09:87:ff:99:89:06:29:56:ac:1a:d5:
b3:24:f8:cc:8c:92:70:1e:99:03:e1:e7:c1:79:b9:ea:88:e5:
86:2d:73:ad:82:dc:fa:4e:88:f2:00:6c:fd:4a:7b:21:32:fa:
d2:a1:b6:cb:fc:52:89:1f:ae:f1:6d:77:a2:10:b3:7a:83:45:
97:1d:c3:17:fa:3f:7c:50:8d:92:76:12:ac:1b:b1:05:96:fb:
89:ce:4b:ae:0b:99:26:58:75:39:07:57:22:84:a8:63:ea:93:
0e:98:e2:ff:a1:e5:57:bf:80:0d:b7:88:e3:9a:71:06:e7:03:
22:8f:af:c5:37:d6:92:f4:e4:23:d8:66:7c:a3:bf:e4:7b:fb:
45:93:7e:2e:5d:dc:d7:2c:4d:ef:31:6f:8f:50:47:36:74:34:
76:54:ce:d3:34:93:c7:f7:f4:80:0c:ed:59:4b:b1:38:26:b2:
66:b2:40:ad:b0:b4:00:44:6f:66:d8:17:e5:3a:5e:92:b9:c4:
f8:a8:31:6e:70:8f:5c:8a:56:ba:73:fa:ac:2f:09:ef:92:59:
f3:ed:90:30:8d:b4:d5:9b:e9:94:76:c1:04:7b:f9:40:94:c6:
db:69:7f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 02:33:52 2026 by rpki-client