
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
File: f8JFjIbiXJNFoIUssn6xcnf7gaM.mft (raw, json)
Hash identifier: EwcyrfcYNeJ2MtTKYTwxL2rpQvrd8X0jMceKQxQ0bys=
Subject key identifier: 9E:53:15:F7:59:A4:52:E0:68:43:0A:36:EE:7E:7F:29:45:EB:E0:8A
Authority key identifier: 7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3
Certificate issuer: /CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3
Certificate serial: 0A95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
Manifest number: 0A8B
Signing time: Mon 26 Oct 2026 19:34:36 +0000
Manifest this update: Mon 26 Oct 2026 19:34:35 +0000
Manifest next update: Mon 02 Nov 2026 19:34:35 +0000
Files and hashes: 1: f8JFjIbiXJNFoIUssn6xcnf7gaM.crl (hash: VZ+So4BPrDyiXbjWdJRHd22xjZrzTTTwwaya2nKQYak=)
2: F898AEBC8F6411EA96126E5DC4F9AE02.roa (hash: CgnP+/rSHkkonAvFRbYmCY32JDnrx7tAgsh6bxIXNeo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl
rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 19:34:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2709 (0xa95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191DE0, serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3
Validity
Not Before: Oct 26 19:34:35 2026 GMT
Not After : Nov 2 19:34:35 2026 GMT
Subject: CN=6adfab4c-41e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:35:95:c8:c9:12:60:eb:7e:16:18:11:65:cd:
0b:9d:bc:16:36:c1:f6:1f:e1:34:c8:e2:0f:96:4f:
18:b4:e2:80:42:5b:7d:fd:05:22:c4:00:a6:99:b6:
d4:18:11:0d:0c:f8:3a:75:c2:b3:c9:b5:ab:a8:62:
0c:9d:8d:14:cc:d7:91:b1:5d:07:0f:cd:69:a8:86:
16:07:44:d0:3a:00:f0:b7:a2:b8:aa:8a:8b:85:cc:
cd:81:0b:6a:2e:7c:71:54:f1:91:4b:34:b4:9b:2e:
13:61:60:2e:8d:f0:8d:a9:4c:dc:fc:b4:55:47:04:
c1:7a:21:3d:4d:cf:ff:cb:ba:16:4e:19:2d:67:6f:
a1:54:bc:30:97:79:83:4d:e5:0a:61:e6:2e:70:72:
96:12:e3:f0:e5:ad:d4:08:52:5c:c5:8e:b6:eb:d3:
1b:38:d3:97:bd:77:40:3b:a6:ba:9a:47:c3:33:b1:
dc:0b:4a:4d:22:d7:56:f5:a8:93:30:e1:90:7a:42:
2e:3d:1c:d3:ed:2d:4a:07:98:d5:bf:d7:ef:21:45:
48:7b:71:b9:f4:d6:31:b5:7e:a0:43:7a:e9:6c:c1:
a4:fb:ae:d6:07:59:0f:9e:85:42:85:4c:22:32:9d:
ab:67:46:bd:40:7a:87:8a:84:c2:92:54:9a:3c:6d:
80:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:53:15:F7:59:A4:52:E0:68:43:0A:36:EE:7E:7F:29:45:EB:E0:8A
X509v3 Authority Key Identifier:
keyid:7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:6b:8c:06:07:7b:28:8e:74:19:93:f1:f5:57:ab:fe:63:a4:
39:11:f4:5c:09:fc:9b:30:64:e5:be:28:c9:65:bf:5e:a9:3c:
3e:05:03:21:08:92:5a:47:42:ca:3e:03:b9:1a:51:cc:e7:f0:
0d:dc:53:69:fc:4e:2d:93:53:63:93:e5:be:1d:30:26:4b:32:
ee:88:8f:48:ab:d0:5a:10:47:b2:bf:e7:e3:11:ab:a5:4b:db:
88:18:16:b6:1d:0a:98:3a:67:df:de:34:c5:e5:e2:de:36:97:
69:7a:d9:e2:2d:5d:2a:0c:d8:05:1e:96:1f:31:84:f7:7f:22:
c3:4a:70:83:a7:08:6c:bf:4d:69:6b:dc:00:82:c7:8c:45:ce:
7d:cf:ef:00:d9:02:03:47:8c:a4:aa:01:89:f0:3f:1d:40:35:
0c:76:8e:ac:d8:f7:99:0a:4a:5c:68:e8:9f:ee:b4:f7:27:f3:
d6:55:c7:10:3c:cf:79:6e:93:45:a2:10:99:3e:89:fa:b5:8f:
f2:ce:c6:6b:6a:ae:20:a1:cc:1d:8a:8a:c6:ad:a0:79:d5:71:
47:c9:23:36:bd:7e:19:03:c2:ce:cb:d9:fd:8b:3e:b6:8e:ea:
6d:a6:df:1a:35:ba:fa:d1:db:72:15:2f:a0:17:55:25:be:13:
ff:da:87:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:36:41 2026 by rpki-client