
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
File: f8JFjIbiXJNFoIUssn6xcnf7gaM.mft (raw, json)
Hash identifier: D1YpK9ASmBKd9zaE77fQOjzRH0WJwpaRuUS0xPDIyRM=
Subject key identifier: 0D:E3:1C:03:91:C5:2B:91:D2:55:0B:87:8A:91:F9:6F:B3:FB:E4:34
Authority key identifier: 7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3
Certificate issuer: /CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3
Certificate serial: 0A66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
Manifest number: 0A5C
Signing time: Sun 26 Jul 2026 20:09:23 +0000
Manifest this update: Sun 26 Jul 2026 20:09:23 +0000
Manifest next update: Sun 02 Aug 2026 20:09:23 +0000
Files and hashes: 1: f8JFjIbiXJNFoIUssn6xcnf7gaM.crl (hash: zZgvedogpgQWKtnX25rwyhXtjKrk66d5OcQexKHZDeo=)
2: F898AEBC8F6411EA96126E5DC4F9AE02.roa (hash: CgnP+/rSHkkonAvFRbYmCY32JDnrx7tAgsh6bxIXNeo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl
rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 20:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2662 (0xa66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191DE0, serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3
Validity
Not Before: Jul 26 20:09:23 2026 GMT
Not After : Aug 2 20:09:23 2026 GMT
Subject: CN=6a666973-0f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d0:63:df:48:39:71:22:8e:20:46:83:30:da:
f0:0b:e7:ea:fa:9b:37:74:30:74:36:51:2d:8f:61:
60:7d:50:e7:59:42:da:68:5e:5d:3b:0e:dd:31:ad:
54:d0:0b:ef:a7:f3:4e:f6:60:2b:24:7e:4b:54:98:
e2:32:c3:3a:37:51:50:34:76:39:77:0d:c7:c1:72:
f9:a4:fb:fe:05:98:d5:ef:24:6e:cd:f7:81:53:db:
b6:50:bd:9e:b0:7a:72:c9:5c:5b:d1:02:33:19:d4:
f1:b1:1e:c3:49:c2:5a:06:f4:f8:62:51:d9:da:6f:
25:90:07:6f:a2:3e:31:24:1a:64:53:2d:89:e7:7a:
b0:2d:28:df:ae:bd:71:6d:bd:cc:3f:28:c0:98:12:
84:4d:08:bb:f9:07:79:9b:03:c4:3d:0d:5e:84:c2:
57:97:f9:90:73:d3:30:48:8c:6f:ce:fa:3a:cb:e8:
49:40:a6:b7:f3:9d:55:1a:2e:e4:3c:bc:08:a8:95:
96:c8:f1:17:c8:3d:9f:2f:d9:6e:82:0e:08:04:c9:
d2:ab:cd:b4:99:7b:c9:f5:09:72:30:68:21:98:47:
06:f0:e7:5e:61:13:37:76:28:b8:f3:77:75:ef:c4:
7a:bb:5a:5a:1e:2a:69:7c:53:6e:f6:d8:83:4a:21:
13:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E3:1C:03:91:C5:2B:91:D2:55:0B:87:8A:91:F9:6F:B3:FB:E4:34
X509v3 Authority Key Identifier:
keyid:7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4d:a6:89:9c:3d:43:2d:6c:99:90:c5:4b:d9:3d:80:98:b0:
4d:2d:c0:85:8b:3b:22:e0:de:1f:32:6e:48:29:6c:c8:af:02:
01:e5:3a:de:eb:b3:32:35:70:73:5f:df:91:7b:47:ae:b2:52:
1a:ee:fe:9f:ab:e4:8d:57:15:d6:78:43:aa:6e:15:0f:2a:c3:
ca:74:f8:4a:0f:89:47:ce:1e:77:21:58:4e:d7:a1:03:7c:24:
8d:23:a2:46:70:76:28:c8:28:71:c8:96:6a:f1:d5:80:52:fe:
e0:81:be:ff:71:11:1a:e4:37:8d:7e:14:12:1a:79:e6:2c:43:
00:eb:08:ff:ce:cf:a3:5d:5c:e0:a6:4f:fe:96:86:9a:72:9c:
bc:70:c2:6f:27:f0:b4:b3:08:c6:1a:78:0f:6d:67:e2:2f:4a:
20:58:85:3e:7f:94:30:90:62:a6:77:34:c3:d4:ab:1c:d9:87:
24:bd:d8:68:b0:d0:ae:71:82:a0:19:d4:49:59:d7:13:62:c1:
62:97:5c:e1:30:e9:3b:3f:98:37:9c:12:fa:1e:7b:04:78:b9:
fe:79:57:ef:08:74:40:35:bc:d4:7d:29:7e:1c:f1:13:83:ee:
dc:94:0b:e0:47:41:3f:28:68:2a:92:9c:26:cd:0f:51:76:76:
e7:da:70:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 07:37:40 2026 by rpki-client