
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
File: FN2GhClPGzOjE6-48OuhyKADeAk.mft (raw, json)
Hash identifier: VR0X+RfDdbeAQsOttqC+cLKIf+8rbWgnzl3URs8Sijw=
Subject key identifier: F3:D6:94:07:2E:BF:34:C9:91:DC:A7:05:81:A6:8C:15:2D:4D:34:1E
Authority key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
Certificate issuer: /CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
Certificate serial: 0156
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
Manifest number: 0143
Signing time: Mon 01 Jun 2026 06:09:33 +0000
Manifest this update: Mon 01 Jun 2026 06:09:33 +0000
Manifest next update: Mon 08 Jun 2026 06:09:33 +0000
Files and hashes: 1: FN2GhClPGzOjE6-48OuhyKADeAk.crl (hash: cv0G/21zkg6ijlVGeZW+Ke7IxNq6UBITcG3E5Na/Rq8=)
2: E9B0903AF38811EF81B8CE39C4F9AE02.roa (hash: SSKa739rT23rOpIYYisZx12/v/K7+nclE63wWrbXXlU=)
3: F7981812F38811EFAC05053AC4F9AE02.roa (hash: EK3pUqrH9H4fquoX1peOlD1L2xEfn/Ee2ouiE9JS3Uk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl
rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160A05, serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
Validity
Not Before: Jun 1 06:09:33 2026 GMT
Not After : Jun 8 06:09:33 2026 GMT
Subject: CN=6a1d221d-c80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:8d:5d:44:c7:31:38:f9:a4:40:ba:47:09:
18:ca:61:46:57:cf:56:ee:b2:b7:65:93:40:0d:a7:
67:b9:a2:e4:06:1c:12:0b:b0:56:1f:6c:51:28:9a:
39:1e:84:12:e4:40:ac:fb:3d:d1:af:cb:53:1e:e4:
e1:e6:13:03:65:37:aa:6d:32:db:ab:a3:2f:c6:c0:
c9:da:a5:7e:80:4a:c9:b9:0e:e8:2e:15:02:70:8d:
0d:84:cb:79:e4:38:43:3f:f1:c7:2b:16:06:db:ea:
60:a2:f5:7f:6e:b2:47:b9:f4:d0:39:61:34:65:74:
d9:60:c4:1d:34:94:df:94:db:88:93:71:d4:f3:68:
81:34:8e:f9:c4:94:9d:e8:4b:40:a5:27:f6:34:3c:
22:dd:53:8b:a1:43:e2:0e:59:79:e9:62:8f:3b:50:
05:d1:76:fc:bb:fa:35:44:3f:fb:ca:e7:e3:da:b4:
ac:72:62:97:a0:0b:96:10:6c:90:ec:7c:8f:30:91:
1f:93:c6:51:79:a2:6a:14:fd:41:2f:e2:a2:0f:80:
ab:9a:cc:fa:c5:55:d3:43:3a:82:66:f8:8e:77:72:
00:ed:c3:97:cd:17:39:f5:18:c2:00:1b:bd:c8:74:
2c:4d:c8:7a:41:8a:e9:f1:ed:df:18:ac:00:e9:64:
0d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D6:94:07:2E:BF:34:C9:91:DC:A7:05:81:A6:8C:15:2D:4D:34:1E
X509v3 Authority Key Identifier:
keyid:14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:88:00:01:bd:d7:75:47:91:69:c5:ad:7b:e8:6d:b7:35:9f:
5c:7e:6a:0b:1c:98:b1:8b:19:e3:d5:5d:02:e7:82:56:62:04:
bb:05:ce:c4:86:42:18:54:b1:7e:79:bc:cd:f5:8b:f7:6a:66:
6c:6d:03:83:39:9b:59:ce:c9:7f:ac:26:e3:93:69:bf:5b:9d:
c8:9e:33:92:73:98:98:d3:11:db:57:5d:2a:be:30:44:cb:64:
6b:a6:ec:a5:24:07:7e:a9:07:af:51:50:64:7f:1c:64:32:da:
02:10:69:23:ec:a4:b5:ea:ba:5b:54:95:f5:34:3d:51:b9:82:
a7:d6:b9:6e:e6:d5:da:4f:6e:67:79:08:c0:23:a0:02:9c:6b:
5d:1d:ad:6c:81:41:67:5a:f3:7f:42:bb:10:c9:36:10:14:8d:
6e:c3:a9:11:3d:6f:0c:08:e0:a0:cf:2a:cf:ef:02:dc:60:33:
c5:80:6a:90:09:99:ce:1c:16:53:47:6e:cb:ab:0e:f1:6a:4f:
5f:29:bb:f7:99:a7:6d:37:00:06:93:25:ed:ce:a6:4e:2f:62:
c6:4b:38:14:50:29:af:57:82:f0:a3:1e:93:62:20:f2:04:2b:
b4:aa:5d:67:d1:09:87:d8:0d:af:05:41:75:07:b3:1f:7c:f7:
04:9a:c0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:49 2026 by rpki-client