
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
File: FTyY0zE8xk7bmuFaujtUPkgEWZA.mft (raw, json)
Hash identifier: tGVRS0PWEKimO2N9oDTQ0bJRKnZeVfuujw8aOqLGc04=
Subject key identifier: B9:66:1E:05:C9:38:44:0F:42:3E:9F:B1:87:4F:8E:B0:66:23:B6:36
Authority key identifier: 15:3C:98:D3:31:3C:C6:4E:DB:9A:E1:5A:BA:3B:54:3E:48:04:59:90
Certificate issuer: /CN=A9167FBA/serialNumber=153C98D3313CC64EDB9AE15ABA3B543E48045990
Certificate serial: 0133
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTyY0zE8xk7bmuFaujtUPkgEWZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
Manifest number: 012B
Signing time: Mon 19 Oct 2026 06:23:03 +0000
Manifest this update: Mon 19 Oct 2026 06:23:03 +0000
Manifest next update: Mon 26 Oct 2026 06:23:03 +0000
Files and hashes: 1: FTyY0zE8xk7bmuFaujtUPkgEWZA.crl (hash: HiMU7DW/oF9akLzqyICpSMkDeSDu6FqZSXmTakKw3mI=)
2: F552E6BA05A111F082D17325C4F9AE02.roa (hash: 50HTgUj8BYD/Up0LzcZVR1qzl5yUcfq0/gOWZsXxQLA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.crl
rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTyY0zE8xk7bmuFaujtUPkgEWZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 06:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307 (0x133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167FBA, serialNumber=153C98D3313CC64EDB9AE15ABA3B543E48045990
Validity
Not Before: Oct 19 06:23:03 2026 GMT
Not After : Oct 26 06:23:03 2026 GMT
Subject: CN=6ad5b747-ff19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:4a:13:ee:ef:7b:af:8d:bf:23:9e:2e:4c:
0c:0b:7e:17:d9:23:8a:2b:1c:ac:d1:a2:f1:8c:74:
a3:fb:dd:d2:e1:3a:a7:16:50:14:d9:91:56:85:c4:
4d:40:5d:00:14:96:48:9f:2f:24:74:83:df:14:4b:
3e:1d:ee:4f:0a:99:53:ff:08:0a:0d:59:f5:0a:d8:
b4:7b:93:49:0c:30:bb:78:36:71:55:a4:b5:7d:28:
df:74:6b:63:bf:20:ab:3b:9e:09:21:7a:b8:7b:6a:
9d:0e:fd:0b:fc:23:38:39:9f:1a:a4:2f:90:ee:39:
c7:12:7e:f3:2f:d4:95:6b:1e:39:31:e3:ae:1b:56:
01:ca:24:12:b3:32:4c:41:06:18:97:ac:c3:00:4a:
63:6b:cd:d3:10:b7:a0:3e:f7:bf:39:1a:8e:cc:ed:
82:9d:f2:14:36:b9:47:5c:10:01:4c:b4:eb:08:d9:
98:7f:dc:65:62:9e:18:eb:20:c0:a8:da:fd:19:19:
f1:79:68:b2:3a:eb:c7:8d:1c:b1:e2:3e:52:ea:2f:
f8:0b:49:87:5f:06:70:7e:ea:5c:76:87:e8:f7:bb:
61:87:09:b4:69:dc:86:3e:ba:9c:d7:d5:28:62:26:
d4:a0:b1:c8:c1:4e:a0:a7:c3:49:0e:e9:f4:dc:0e:
11:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:66:1E:05:C9:38:44:0F:42:3E:9F:B1:87:4F:8E:B0:66:23:B6:36
X509v3 Authority Key Identifier:
keyid:15:3C:98:D3:31:3C:C6:4E:DB:9A:E1:5A:BA:3B:54:3E:48:04:59:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTyY0zE8xk7bmuFaujtUPkgEWZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:50:92:f0:94:a8:be:30:cb:66:e0:97:a5:0c:b0:18:56:c9:
98:f7:5f:b3:19:81:2c:ef:4d:59:2d:2b:f8:12:80:4b:03:07:
5f:4c:51:c9:23:20:c1:3c:fa:bf:03:d0:db:d0:b1:f8:19:eb:
4d:78:b6:6f:68:cd:07:bb:e6:1c:1e:48:8c:6f:16:0e:e2:7c:
62:9d:85:40:91:e1:22:dc:36:4a:34:b8:63:fe:25:35:b4:9a:
2e:4a:22:fa:4a:d6:6b:ff:9d:b6:b7:a6:c5:39:fe:58:93:20:
f3:b0:43:3c:23:36:0e:46:1c:fe:2a:b3:69:73:f9:2d:f7:61:
de:da:72:8e:aa:b6:01:81:da:77:6d:e8:e4:5e:4a:49:03:99:
42:32:db:d6:b3:ee:49:3f:22:bf:21:c2:0f:de:7a:13:4a:fd:
c1:cb:be:10:36:c8:2b:69:a0:1d:66:58:b8:9e:a1:b2:a3:a4:
db:7e:86:f6:b1:9e:c1:92:03:5a:5e:cc:cf:9d:ce:57:32:d8:
b7:a4:33:6b:f7:03:74:95:2d:b9:0d:42:c8:45:83:c7:6c:46:
24:53:d3:44:3e:b0:ae:9d:e6:35:77:86:89:a4:ba:a7:b4:6a:
f7:bd:e1:49:d3:0c:62:ac:99:44:57:0f:c7:1e:b5:77:73:bd:
0e:db:88:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:53:28 2026 by rpki-client