
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft
File: 489F-AUQY7vbMX_dFREyqUAE_Vs.mft (raw, json)
Hash identifier: uY+PdEA8AGcd6GVyKXwxJH3wFYv/Ya644zcyVyffsBc=
Subject key identifier: E7:90:C7:D7:20:53:77:FE:5F:9C:E3:6A:A6:9E:FC:8C:98:0B:DB:FC
Authority key identifier: E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B
Certificate issuer: /CN=A9197202/serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B
Certificate serial: 03D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft
Manifest number: 03B8
Signing time: Sat 05 Sep 2026 00:21:42 +0000
Manifest this update: Sat 05 Sep 2026 00:21:42 +0000
Manifest next update: Sat 12 Sep 2026 00:21:41 +0000
Files and hashes: 1: 489F-AUQY7vbMX_dFREyqUAE_Vs.crl (hash: /v178oIGzFxfTPhzPUVa4rrQluNUxnWsnT6490tJKP4=)
2: 920E981CCAAA11ED8371524CC4F9AE02.roa (hash: WIB+DaMR2Ho4TV5ghi0y5dK6Bf7NomVsRIG38qN6/F0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl
rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 00:21:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978 (0x3d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197202, serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B
Validity
Not Before: Sep 5 00:21:42 2026 GMT
Not After : Sep 12 00:21:41 2026 GMT
Subject: CN=6a9b6096-4c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:22:9c:f3:c1:04:66:eb:a8:24:66:f1:9c:70:
49:4f:59:0b:ed:88:9a:ce:32:13:48:32:c9:ab:cb:
10:ac:d9:40:3b:d8:2d:fd:a1:ec:50:e1:e0:a3:f9:
5b:37:1c:dd:4e:d1:2b:c9:6e:15:b2:fe:03:66:3a:
7a:b5:8b:92:72:d1:fd:8a:8e:fd:f8:f3:5e:b4:36:
97:06:75:9f:38:81:0b:fa:f2:0c:2b:fe:95:6c:e6:
ba:7c:19:3b:ea:c2:98:06:a7:84:2c:c3:4a:8a:7c:
4e:5a:7c:9e:94:65:e7:be:ed:a3:fe:30:14:6f:f3:
2d:8a:05:97:cc:ab:69:0b:c6:10:bc:83:6f:29:cd:
a0:67:dc:00:e3:8f:54:e7:41:00:e9:9c:bb:e7:fd:
c0:69:b1:fe:a0:37:fc:69:28:5d:4f:9c:14:40:47:
91:3e:b5:79:5c:a9:3d:10:8d:a4:dc:6f:97:40:5a:
89:71:6a:b7:4d:5c:b1:62:82:9c:cf:2d:7a:d2:c8:
e2:98:21:16:29:23:0e:19:0c:4c:80:f7:17:41:04:
71:89:33:76:8d:e6:e6:4a:43:60:53:5a:c0:47:3e:
da:b1:4f:9a:a6:f2:3e:20:b2:5f:d9:03:55:02:79:
fe:9c:08:72:35:87:45:c3:08:b4:66:d9:b6:7f:99:
ff:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:90:C7:D7:20:53:77:FE:5F:9C:E3:6A:A6:9E:FC:8C:98:0B:DB:FC
X509v3 Authority Key Identifier:
keyid:E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:78:bf:c9:2d:1a:62:17:ad:65:56:34:5a:d8:ae:41:f1:00:
e3:f5:70:7a:ee:b2:bb:43:86:e4:97:66:89:ce:50:66:bb:d9:
1c:f5:4b:8a:b2:d2:db:2e:6b:5a:54:a1:c5:d5:db:c0:01:0d:
8e:0f:0b:07:67:3d:89:04:fd:ea:ce:2b:fe:29:70:b9:13:61:
ef:1c:23:ce:ff:12:03:5e:63:4f:a1:3a:fa:a3:cf:1b:8a:1f:
9f:20:50:db:fb:12:f5:08:ea:0d:d4:4f:90:0d:5e:c2:ed:cd:
f0:58:dc:84:a9:b6:cd:33:c8:2f:0b:2b:36:8c:a9:9f:49:07:
b7:41:bb:55:fe:37:d9:ee:41:28:76:ae:43:f4:8f:71:14:f1:
bc:1b:41:a3:55:1b:cd:34:65:a7:8d:d2:6c:c9:4e:2f:86:5f:
83:6a:5b:61:88:c9:49:90:c7:ef:5d:cb:64:f0:ad:92:7b:66:
36:02:25:29:e9:f5:e0:a1:38:53:aa:c5:12:10:46:9c:34:a6:
82:d2:24:8a:e2:9e:82:55:bb:ca:91:52:18:de:0c:c6:74:a2:
85:0f:c5:2d:4f:8f:67:d4:74:d9:c9:93:25:fa:e0:81:c2:3a:
80:7a:0b:b7:96:80:18:b4:74:ca:cc:4a:5b:f0:f4:0e:3b:24:
81:ae:fb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:52:27 2026 by rpki-client