
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
File: 9y59Xhu0VCq3_3dzZYg8FgEDTek.mft (raw, json)
Hash identifier: QPssHEveYNRxYuE4sSlKuLB/GoVxQBL2qVVMzQq0GS8=
Subject key identifier: EA:2F:89:96:C3:E3:4C:D2:07:45:83:66:9F:A4:BE:2F:0F:41:F8:B3
Authority key identifier: F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9
Certificate issuer: /CN=A919631C/serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
Certificate serial: 0FBF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
Manifest number: 0FAA
Signing time: Mon 28 Sep 2026 17:33:59 +0000
Manifest this update: Mon 28 Sep 2026 17:33:59 +0000
Manifest next update: Mon 05 Oct 2026 17:33:59 +0000
Files and hashes: 1: 9y59Xhu0VCq3_3dzZYg8FgEDTek.crl (hash: FvmOCCrg/BdS9DIRzRzpnqepBr7ceptH5YS2I/U3avw=)
2: DCB2531AC75911EF979D593BC4F9AE02.roa (hash: xeSp+ee2o5QPG9Bonf7PC8aiLXnBIzPrcdEWH1qZB/w=)
3: oTEH6z3ABCN8lgSSDl3hb-fhCjM.asa (hash: H8FmF0zW5E6qjk0hm8Xs6cFrLkFF2Pm/oMG+Rv+W97s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl
rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 17:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4031 (0xfbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919631C, serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
Validity
Not Before: Sep 28 17:33:59 2026 GMT
Not After : Oct 5 17:33:59 2026 GMT
Subject: CN=6abaa507-028f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:34:bf:8e:50:87:a1:6c:58:5a:28:1a:a3:
81:d1:ff:f0:2a:0d:93:b8:20:56:cd:54:6b:14:67:
6b:8a:27:36:20:7b:4b:8e:ce:f3:6b:4f:bf:fe:b1:
71:44:d2:db:42:e8:d9:88:2b:da:fe:7e:ba:76:4a:
61:bf:c9:72:d3:3c:0e:44:c6:cd:87:58:90:22:1a:
dd:b4:88:14:c8:d8:a5:71:54:eb:ef:b8:fb:94:e3:
7e:8b:5d:23:36:7c:8a:a8:2a:a3:d6:ce:9b:ba:ca:
15:1d:02:24:9d:25:84:cb:c7:bb:5e:f2:6c:c8:3d:
4c:df:27:f6:16:bd:c9:73:98:c7:a3:85:10:54:58:
b2:e3:c9:87:94:21:9c:08:fb:ef:6c:41:15:fa:60:
35:78:49:1a:45:90:4f:7c:55:d1:5a:c6:e9:1f:88:
ef:9d:04:97:e2:52:c2:fd:c1:e8:91:2a:fd:db:19:
61:20:b2:d1:7e:17:31:7b:d3:9a:ec:3b:d6:44:3a:
6e:50:f3:57:ce:86:a3:c0:f8:a4:4e:b8:80:36:17:
ff:45:2a:24:e9:8d:63:e2:5d:1f:4e:a8:ba:6b:d6:
e7:3f:dc:69:f8:a3:21:3a:43:1c:e5:d5:61:de:45:
fb:36:cf:0f:5e:31:ad:fc:31:70:02:79:68:72:47:
f6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2F:89:96:C3:E3:4C:D2:07:45:83:66:9F:A4:BE:2F:0F:41:F8:B3
X509v3 Authority Key Identifier:
keyid:F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0b:6b:a0:03:0e:83:35:c2:31:e1:b0:64:cf:4d:32:63:83:
27:b9:56:12:c6:af:e9:ad:7a:fd:30:cb:fd:e9:f2:4a:ec:74:
8e:64:95:d1:f1:69:cd:9c:0b:16:81:57:cc:dc:42:93:49:9b:
50:52:4c:cd:d3:be:63:2a:93:61:3a:f9:05:81:3b:e0:8b:42:
65:ee:f0:5a:64:b5:6f:0b:9b:35:8d:3a:a9:1f:fe:dd:3d:cd:
0c:8d:bd:50:95:58:92:b2:d4:3a:1c:df:8c:04:c8:e4:50:83:
f0:47:62:ff:3b:a7:0e:7e:e0:3b:d8:e6:aa:db:49:8f:8e:9d:
eb:fd:6c:5c:55:aa:b7:81:47:9f:60:f3:3b:7f:0d:0b:1f:a6:
31:ac:58:c5:2d:7f:e5:6c:e2:2a:7d:fb:d5:07:d1:cc:ba:06:
34:56:a1:49:69:b4:f8:33:05:a7:1a:c7:ce:4b:8d:55:2b:d0:
c1:f3:8b:e9:cc:fe:7d:ee:00:00:cf:b6:5c:22:12:b4:b4:44:
64:b6:21:dc:d9:91:3a:30:01:60:61:f2:eb:2e:8a:f4:e3:c9:
54:5d:ab:2c:2a:3a:6d:1a:c4:0d:eb:ed:91:b6:08:0b:e3:8e:
9d:4d:9d:f0:1d:de:35:d9:f3:53:dd:64:0a:0b:7e:0d:2b:08:
ad:1d:8b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:31:02 2026 by rpki-client