
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
File: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft (raw, json)
Hash identifier: aRw7Gq2LNEpeL+8M58I4NlGWtBYSI4C9fe3ghZhpQbI=
Subject key identifier: F0:0D:CE:6A:8E:F6:C5:19:EF:90:62:13:9A:5B:2B:B4:CA:9C:53:D2
Authority key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4
Certificate issuer: /CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4
Certificate serial: 0698
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
Manifest number: 0687
Signing time: Tue 06 Oct 2026 22:42:02 +0000
Manifest this update: Tue 06 Oct 2026 22:42:01 +0000
Manifest next update: Tue 13 Oct 2026 22:42:01 +0000
Files and hashes: 1: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl (hash: vIGrXyovJQZucAaFLcPuZr1KcVeUXxR0WhdNqCC2zb8=)
2: AB532852B38911ED825BDC70C4F9AE02.roa (hash: 30kBWOx1m1nSXGGOJPuoiodt0X6arWCmu2hhEcaPUOI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl
rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 22:42:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1688 (0x698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189BB3, serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4
Validity
Not Before: Oct 6 22:42:01 2026 GMT
Not After : Oct 13 22:42:01 2026 GMT
Subject: CN=6ac5793a-c2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:13:56:0a:e7:0d:49:ef:85:ee:40:f2:58:63:
f7:7b:0b:35:b1:b8:99:1f:2c:b7:4d:7c:7d:0c:3e:
08:6d:fd:11:3e:da:ee:5c:a5:ae:07:4a:ce:3b:cc:
5d:fc:e2:6a:8a:54:be:d7:fe:cd:8e:65:51:65:30:
12:db:95:62:79:0b:70:3d:83:44:54:2b:bc:7a:06:
49:4d:fa:79:21:7d:44:4e:6b:7a:3b:22:3b:28:07:
a4:5e:c8:45:49:0f:ba:f0:d5:c0:51:6f:8c:f5:88:
30:b2:90:ff:74:9c:8f:8c:fb:db:0e:b6:31:77:65:
06:80:55:50:76:cb:34:8f:16:b7:23:1d:2c:c8:67:
fe:da:32:20:2e:36:17:68:26:5c:35:b7:7b:fe:8f:
8a:0a:14:3a:fc:2f:40:cf:3c:2a:a9:e3:85:dd:bc:
3f:da:03:17:0b:56:db:77:2d:78:05:f8:77:fb:62:
08:ee:8c:35:f3:ce:25:6c:e1:05:fe:ce:aa:61:18:
ab:df:eb:9e:d9:61:ff:c4:38:72:08:0e:49:9e:58:
a4:36:2b:f0:f7:24:6c:66:e2:a8:31:09:99:31:af:
74:88:66:77:96:cb:26:99:d7:50:10:9c:2e:9d:60:
80:72:20:81:5a:c5:36:de:30:40:96:eb:0e:73:fd:
32:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0D:CE:6A:8E:F6:C5:19:EF:90:62:13:9A:5B:2B:B4:CA:9C:53:D2
X509v3 Authority Key Identifier:
keyid:15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c3:68:e1:e0:6c:7f:84:62:e1:1a:6a:24:e9:44:4c:99:60:
18:7e:db:61:1f:64:2e:ae:36:ca:40:0a:81:74:7e:f5:36:20:
fe:91:80:41:5a:98:b3:45:4c:5e:e0:df:1c:77:3e:a5:68:46:
bb:25:ab:84:47:4e:e9:f3:e8:54:ae:07:31:e4:94:4e:d3:36:
7e:f1:56:ca:21:85:d5:4c:fc:7d:bd:97:3c:a5:e3:62:87:46:
f8:fe:53:28:2b:c2:49:d0:0e:96:4d:01:f4:fa:28:62:37:39:
39:4c:83:3b:dd:c2:2d:57:ee:81:9a:e6:a2:21:47:fc:b5:ee:
04:4b:65:f4:58:6e:73:7d:34:74:2a:f1:02:75:27:50:cc:4d:
e6:43:38:82:40:f0:04:7e:d8:3c:c1:d3:b4:37:64:20:21:2e:
7e:51:47:11:d9:e9:6c:6c:37:44:c1:9c:4a:bc:eb:70:5d:e8:
39:2a:d2:e8:15:2d:3e:83:e2:9d:8e:1f:66:b4:2e:a0:e1:60:
87:fd:50:9a:ff:84:1a:f6:70:15:f8:24:fd:0a:92:fc:2b:b3:
8b:87:27:14:be:59:57:de:7d:93:ce:9f:b8:95:a6:db:a0:74:
04:a3:fc:24:3e:d8:8c:05:5b:86:15:91:ad:97:d1:11:e9:22:
dc:82:01:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:58:31 2026 by rpki-client