
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
File: FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft (raw, json)
Hash identifier: KooLAds04+Sx0S50O6XmQXGJTqOlEmxRVZYYW+JTcZU=
Subject key identifier: 14:61:6D:DC:61:81:BB:17:92:78:06:4E:D1:EB:8D:8A:18:DD:DF:C5
Authority key identifier: 14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45
Certificate issuer: /CN=A9173CF2/serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745
Certificate serial: 0766
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
Manifest number: 075D
Signing time: Sat 26 Sep 2026 21:50:43 +0000
Manifest this update: Sat 26 Sep 2026 21:50:42 +0000
Manifest next update: Sat 03 Oct 2026 21:50:42 +0000
Files and hashes: 1: FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl (hash: J2YAedtyviifxNGdsbM1x82lsX5IpAPS/46sdVLhVRE=)
2: D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa (hash: E4nT7oFtr1XMa2nYhYdcIV1SFfBRxDq27G/9G98Dpsw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl
rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 21:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1894 (0x766)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CF2, serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745
Validity
Not Before: Sep 26 21:50:42 2026 GMT
Not After : Oct 3 21:50:42 2026 GMT
Subject: CN=6ab83e33-77b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ee:c2:90:eb:8a:99:8f:a2:67:42:ff:56:8d:
d2:9b:c3:b6:92:6d:a7:86:70:a9:05:d5:37:b6:47:
fe:64:2e:39:33:f3:a1:8a:5f:b5:72:c7:20:91:72:
00:9f:3f:6e:d5:98:cd:4a:48:7a:0d:c8:32:d6:e4:
cf:ab:e8:68:30:86:d4:55:2a:36:1b:bc:b2:26:ba:
83:b1:2a:de:5c:37:fd:15:d7:ff:ea:7a:b8:58:3a:
ab:b2:fc:3c:61:43:44:67:98:d1:4a:38:41:07:6b:
6f:ad:d8:68:6f:08:c1:3b:af:fa:68:56:46:37:9c:
ff:55:ea:a5:f6:46:56:29:63:77:ff:13:89:13:d5:
c9:92:60:fb:0f:78:c4:61:4a:fb:a4:20:bd:e6:4b:
0e:dc:e9:e9:7f:c8:f1:a1:7c:be:f1:a4:3b:ff:2b:
c2:92:b6:01:8d:67:c0:f3:94:2d:08:57:fa:13:75:
38:e1:58:57:84:3a:77:f0:d6:28:fd:c5:58:2a:a1:
f9:1c:82:1a:d6:a2:80:dc:69:38:12:bd:85:c0:76:
80:87:5e:57:fe:fb:d8:86:bc:75:38:41:84:9e:b9:
ac:a2:07:06:73:2e:65:67:86:37:01:d7:27:7f:49:
99:76:8b:89:72:f3:b9:a9:7e:ea:ad:6a:aa:ab:88:
07:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:61:6D:DC:61:81:BB:17:92:78:06:4E:D1:EB:8D:8A:18:DD:DF:C5
X509v3 Authority Key Identifier:
keyid:14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7e:7b:6c:d5:ef:b0:c4:15:dc:27:49:a0:80:3d:a2:3f:d6:
b6:c4:1f:b4:26:aa:3b:13:9d:43:f4:c7:d6:31:6b:63:8a:e4:
e7:3a:f5:3a:f1:ed:c9:b1:7a:4f:a3:77:c1:48:2f:1a:cc:34:
2d:72:3e:22:07:13:e5:be:47:17:cf:a3:88:07:58:8b:44:61:
c9:9b:99:0c:3f:53:01:7f:3e:4e:41:bb:4f:f5:ad:17:22:50:
95:44:d3:c8:5d:a2:1c:9a:b5:e7:5b:21:94:54:99:78:b2:7d:
ca:95:0f:1f:ea:24:8c:31:7d:d3:ec:d4:e5:bc:34:63:0d:67:
3d:27:47:6d:1f:1b:e8:aa:15:2e:80:0b:cc:5e:91:91:0e:48:
09:74:e1:b4:10:21:dd:6a:b0:a6:a7:9e:02:98:45:78:fd:51:
51:b3:b7:f7:c4:a8:a6:bc:9d:94:45:0b:d5:02:65:22:e2:4e:
95:08:8c:64:bf:b0:98:6e:3f:6f:15:2e:33:80:70:74:b3:36:
18:eb:47:00:e7:0b:ac:b2:56:cd:13:cf:80:31:13:a0:ca:96:
23:d7:c3:be:43:bd:9f:77:25:67:a0:9a:c8:51:ba:e5:cd:b9:
bc:72:64:84:a3:84:f6:2e:88:ad:42:95:59:14:47:3b:00:58:
b2:0f:a5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:15:27 2026 by rpki-client