
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
File: fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft (raw, json)
Hash identifier: lOVQ7txdUmA1SVdgr9VOWVl87C+NrbDUvkAjSwPWmDk=
Subject key identifier: C2:C7:91:47:0F:80:F1:55:93:7A:BD:38:B4:5D:96:F7:D4:2D:4B:6F
Authority key identifier: 7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77
Certificate issuer: /CN=A9159309/serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
Certificate serial: F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
Manifest number: F3
Signing time: Tue 27 Oct 2026 06:38:39 +0000
Manifest this update: Tue 27 Oct 2026 06:38:38 +0000
Manifest next update: Tue 03 Nov 2026 06:38:38 +0000
Files and hashes: 1: fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl (hash: Mvf5XneQvuv5k7swy2RwQrbjAVpsVxQWPg4vEjFuTcA=)
2: B32DFBA0613E11F0807A9A39C4F9AE02.roa (hash: znQCSmWYjAzJ99g/MnFKRiPRCuuveVvzPYPlkOv1NBM=)
3: 21C5B04263A311F096468248C4F9AE02.roa (hash: ZAT1gq4fsyyEvWAh5Wb9WrqtHt9uUHF0Lm9+fNRhxOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl
rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 06:38:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159309, serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
Validity
Not Before: Oct 27 06:38:38 2026 GMT
Not After : Nov 3 06:38:38 2026 GMT
Subject: CN=6ae046ef-28e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0a:8d:ae:10:3a:2a:9a:63:72:30:b8:2c:1f:
ff:41:ee:06:5c:6a:c3:36:c9:8e:aa:17:2c:3a:a6:
6c:4f:c4:73:a5:94:ce:9e:75:fc:b2:6a:29:1d:96:
b0:1c:c9:bc:31:0b:17:3a:3d:1f:c2:c8:db:92:bf:
6e:70:2d:24:dd:40:08:ad:3a:be:0a:f6:81:0d:e9:
7e:59:80:46:1f:c5:c1:d6:44:a5:b4:ff:90:56:6e:
9e:07:29:f7:aa:e0:26:92:ba:64:29:9d:2c:7a:d4:
3f:23:d8:ee:8f:fb:9e:13:39:07:19:4c:44:67:db:
fd:c9:d7:be:cc:4e:5a:35:29:f4:d9:8b:6d:38:96:
e7:7b:c0:85:bf:17:18:48:bd:d6:22:38:37:5b:ae:
cf:37:d5:e6:eb:93:f9:24:93:b3:6e:35:22:51:cc:
f6:96:b6:92:95:11:df:9a:a3:7e:2a:3c:f3:b0:62:
5e:a5:2e:a5:26:62:5f:a3:ae:ab:45:c6:a6:60:5a:
67:5b:73:18:ad:d9:ff:5b:20:fa:11:50:b6:44:d5:
28:7d:10:ff:21:8e:72:e9:03:d0:0a:ed:c0:ce:50:
93:88:78:cf:d5:04:bd:ae:2f:a8:f5:ba:dd:e6:c4:
3f:5a:5a:fe:2e:ea:aa:5e:d6:e9:3e:c9:10:62:40:
52:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C7:91:47:0F:80:F1:55:93:7A:BD:38:B4:5D:96:F7:D4:2D:4B:6F
X509v3 Authority Key Identifier:
keyid:7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:9a:0f:fa:08:76:3a:81:59:59:c5:94:2a:4c:8b:b9:85:9b:
62:2f:d0:a4:84:6e:46:45:be:d9:db:09:2f:d6:79:1b:a7:f8:
54:5b:92:12:45:6f:f9:f5:ed:e1:f0:e8:11:5b:68:5b:eb:d5:
63:b1:23:98:04:23:7f:da:9c:3b:60:67:da:df:6d:b6:99:31:
79:93:12:4f:66:17:f1:22:f4:78:46:07:1e:bb:3f:8d:f5:79:
84:6d:69:03:46:05:c0:af:66:fa:42:4d:41:e9:4e:94:e1:ea:
ec:9f:a4:2e:8c:ee:d3:e3:12:1c:5b:78:74:ff:21:7c:6d:eb:
57:75:72:c2:88:a7:f4:af:7a:68:8c:d3:aa:3c:1f:ff:2e:85:
5e:7a:ab:16:11:05:e0:51:fa:ec:61:f0:b4:57:c8:af:04:26:
e0:d8:df:4e:4c:e5:98:3d:fe:5c:2f:93:8c:de:11:ce:8d:1e:
56:01:0f:6a:68:91:de:86:54:94:95:5e:c5:02:b5:4d:ec:5a:
4b:89:b7:80:3f:d8:78:51:ce:90:84:1f:87:1d:fb:0c:02:9e:
e3:27:7d:b5:7c:4a:a2:ff:2c:f9:3b:e5:4e:7c:3a:cb:1c:e6:
38:4d:d1:8c:83:58:b1:09:d4:ef:e6:94:bc:a2:0a:ba:09:a1:
09:a1:67:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:10:10 2026 by rpki-client