
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft
File: fIyfexbMnstE8DINx4y4FM1Cp6Y.mft (raw, json)
Hash identifier: srLa+X4CFhgYqoS4I8bTa4fhETyZKs5GHtBG1lKju7Q=
Subject key identifier: F6:90:93:A3:1F:21:F4:27:B8:99:9B:79:79:C3:0A:0E:DB:23:4D:8E
Authority key identifier: 7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6
Certificate issuer: /CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6
Certificate serial: 03D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft
Manifest number: 03C8
Signing time: Fri 11 Sep 2026 00:24:13 +0000
Manifest this update: Fri 11 Sep 2026 00:24:12 +0000
Manifest next update: Fri 18 Sep 2026 00:24:12 +0000
Files and hashes: 1: fIyfexbMnstE8DINx4y4FM1Cp6Y.crl (hash: 8eDBWtgkmThXF2O2WvD/v5q/936UsWBI5JgTtthaybk=)
2: 585DC828A2EB11F1B8CE2B844A11F970.roa (hash: YGgsb1w7jArLrmGgXNJ/wg9e0SOlAFlVMyebYaZXBLo=)
3: 74B133CAA2EB11F1AFE949014B11F970.roa (hash: jpsmNAeJXm9/rS9zpwSK8/DCHkzoASRFsnVivNpp/hw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl
rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 00:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 980 (0x3d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168973, serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6
Validity
Not Before: Sep 11 00:24:12 2026 GMT
Not After : Sep 18 00:24:12 2026 GMT
Subject: CN=6aa34a2c-1180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d5:2e:63:09:14:ee:c2:f2:1b:b9:9b:14:d4:
db:85:7b:7d:59:2e:dd:b4:4f:ff:2d:ba:1a:e6:96:
11:c5:de:5c:e9:a5:51:fb:07:cc:5d:58:e6:82:8c:
1b:79:34:7d:e1:8e:e4:71:09:7a:44:0e:01:04:b3:
ad:25:60:82:0f:29:8b:e7:19:2e:16:ae:ea:18:50:
bb:60:8d:54:51:c9:d7:a5:55:cb:8a:cd:a9:a6:16:
fc:85:66:2c:38:39:a2:0d:59:4b:be:28:c4:2a:54:
8c:b4:92:95:02:51:65:68:a1:05:f4:86:5c:94:8c:
9c:20:6b:03:35:24:5f:40:dd:ac:17:b3:02:81:ac:
ff:be:49:64:a9:4a:8f:ab:89:33:57:83:12:53:3e:
92:c9:4e:2a:7e:e3:7e:f6:f1:1b:a4:61:a6:85:00:
23:38:a1:4e:28:07:a4:d4:e9:c7:dd:74:a9:4e:4f:
f0:58:7e:76:53:60:04:f8:47:cd:f6:34:bd:7b:5a:
c4:04:3a:91:ff:1a:61:b4:42:f2:9c:a0:19:8f:29:
d8:72:54:7f:88:0d:4f:e9:f7:fc:80:98:4b:d3:6e:
d9:cf:49:c4:57:78:97:68:31:37:7f:12:c7:b3:57:
c2:4c:1d:91:ef:db:4f:26:ca:c7:a0:44:89:69:de:
0d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:90:93:A3:1F:21:F4:27:B8:99:9B:79:79:C3:0A:0E:DB:23:4D:8E
X509v3 Authority Key Identifier:
keyid:7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:86:eb:24:15:01:b8:29:a1:f7:53:44:3a:a8:4d:c9:b8:f6:
13:b1:b2:6e:b2:01:88:0a:52:67:88:80:2b:61:87:3a:cf:a8:
16:9c:1c:4b:6f:50:26:12:cf:f7:a8:02:e6:27:f9:6d:83:b7:
e3:47:d0:6d:98:61:15:bd:86:01:0c:af:df:3f:31:72:7b:8a:
61:18:db:3c:b2:5e:2a:ae:d2:a1:04:6b:06:6f:db:2b:da:fc:
38:b5:da:20:45:b2:bc:7f:db:6e:21:10:cb:f0:6f:9f:6c:8a:
04:b8:93:50:9a:51:72:a8:85:03:7d:86:99:62:b5:8f:a3:fa:
49:3b:9e:32:6a:95:1d:7d:25:83:6c:4e:b8:13:03:85:44:64:
8f:8f:67:76:79:8f:bd:2d:8b:87:5e:bd:90:cd:ff:7c:ff:72:
3c:d1:f1:4e:a8:d6:78:bf:6a:56:ea:b5:62:4a:33:5e:b5:60:
09:20:b1:9b:74:a4:67:d6:02:4e:5c:a9:e1:c2:5f:9a:b6:f1:
9b:13:18:ae:2b:f4:eb:33:18:9e:6d:ac:a8:78:51:9e:cf:7a:
d5:03:aa:62:72:d4:3f:4b:32:81:e4:b6:16:d4:9d:55:6e:86:
2c:60:1e:a6:74:b3:28:6a:78:1d:07:4a:d9:fc:b8:c5:e2:62:
01:51:87:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:24:39 2026 by rpki-client