
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
File: 99dMf7iwuu_DY1zU41BIr4jjnu8.mft (raw, json)
Hash identifier: XLE/Sd3jUIN8tJZHld7ldvreVhDQ8BRBXMhwblE+uN8=
Subject key identifier: B5:BF:69:21:17:DD:EC:13:3C:33:BE:FE:B1:26:CC:41:B7:0D:75:BC
Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
Certificate issuer: /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Certificate serial: 1BA8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
Manifest number: 1B4F
Signing time: Thu 10 Sep 2026 16:15:19 +0000
Manifest this update: Thu 10 Sep 2026 16:15:19 +0000
Manifest next update: Thu 17 Sep 2026 16:15:19 +0000
Files and hashes: 1: 99dMf7iwuu_DY1zU41BIr4jjnu8.crl (hash: JDbIbDVBsQWdIuMdC9Qb4piNY92MWjMLl4/1CJ6EHfw=)
2: 16A3B47EED7A11EAB00FA463C4F9AE02.roa (hash: 98CICCcqBKJeROeWvWGHm6VVkIAhPXOwkpVDtDOK4LM=)
3: 1E17F340724911E88CAE8E84C4F9AE02.roa (hash: q4/0Kgx7jHqES39jz0njEzgoL1GFNzNz9y+SCnN4xmc=)
4: 2578CBCCFD4611EDA9A46F52C4F9AE02.roa (hash: XSeKehM5j7pmoHF65TaAHO/RyKTZ5nn2cCKLbFlPOHY=)
5: AC39D9F8615211E7BAD4DA61C4F9AE02.roa (hash: s/ccLEEt6e6Q4nFE0+o3sJxXQEtivVp1ICl6j+C0f1g=)
6: A704B6CA4E9611F1B39189EDBB833773.roa (hash: E4Gh/Hv+zCrfZWmDryHxww+Tu0R+4hjamnHpY0bEw4U=)
7: EF9C17344E9611F1BFD1AE0BBC833773.roa (hash: gAKPkvfXsAOzOcaRCMLahWRXkGysJXYsTu5Osr0QToM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 15:35:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7080 (0x1ba8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F6A8, serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Validity
Not Before: Sep 10 16:15:19 2026 GMT
Not After : Sep 17 16:15:19 2026 GMT
Subject: CN=6aa2d797-d3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f0:4e:70:ed:0c:d6:b6:5e:35:86:fc:9d:ce:
a9:32:be:fe:d9:4d:65:16:9d:1c:8d:23:d0:b6:0c:
3d:7f:12:0d:e2:15:48:67:46:53:dd:6d:3c:2c:6a:
aa:18:ee:2f:05:4c:4a:44:dd:11:c6:9f:9a:4e:32:
91:b4:ea:15:b1:53:a2:63:45:6e:12:5c:05:31:81:
ef:b6:74:ad:61:ff:f0:00:64:56:c9:45:03:21:90:
bc:4c:04:44:03:a6:30:70:a7:bf:99:c7:f7:0e:d2:
cf:94:73:7e:e2:1e:89:96:ff:7e:62:08:f2:bb:a9:
88:9e:aa:62:58:8f:cd:c2:83:4c:5a:6e:b9:c2:b2:
d1:06:4e:01:85:f4:39:57:c2:23:38:8e:f2:2a:df:
b3:2d:03:78:eb:ea:ea:8a:04:d9:2d:18:10:bf:4f:
23:29:91:09:c7:b5:41:f5:21:38:e8:fe:45:c9:26:
4a:87:63:13:3e:85:6a:a2:06:2c:f4:8a:7f:ef:24:
8b:b1:de:3f:6b:0e:9b:4f:69:80:38:b9:c0:38:ca:
38:89:19:d1:05:59:d8:9c:56:5f:88:67:9a:63:a2:
e4:9e:13:6b:a8:bb:5c:c4:b2:e2:fd:81:29:11:4e:
7a:20:83:3a:78:cf:57:c1:5c:ff:9e:36:b0:bb:31:
7e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BF:69:21:17:DD:EC:13:3C:33:BE:FE:B1:26:CC:41:B7:0D:75:BC
X509v3 Authority Key Identifier:
keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:d1:90:2b:ae:f2:3a:11:2a:9a:92:4a:98:1a:3e:e1:f3:c2:
36:72:e6:40:27:82:90:b4:5d:c6:2d:90:1e:41:a5:36:c3:1e:
d8:05:2e:7b:ab:e3:7b:6e:79:bd:82:22:fd:32:17:eb:2c:67:
eb:44:72:64:46:29:32:a6:98:bf:87:89:e3:73:b5:60:5a:b0:
1f:5f:d5:eb:ab:95:e5:7b:26:59:94:16:d3:6c:6a:4d:c3:cc:
09:91:88:3a:fa:82:3d:bc:3e:7d:19:75:e3:4d:56:28:53:b3:
08:e2:ec:1b:4f:a0:c1:54:f1:0e:58:aa:48:83:33:44:c0:8b:
de:6f:e0:1a:91:5c:80:6a:93:eb:a5:44:ab:fd:8e:13:95:3c:
cd:ac:9d:8f:43:08:3e:40:07:48:eb:f8:b8:f2:9c:94:9a:35:
d5:f8:f2:a3:7b:a2:b3:ca:93:5b:f1:5a:88:1f:81:cc:3d:64:
7d:98:14:5e:36:59:db:4b:ff:8e:a3:ae:45:56:e5:c8:b9:09:
f1:31:90:5e:c5:1e:bc:00:6c:79:00:cb:9d:dc:5a:53:7d:ab:
1d:18:96:b4:a1:c4:cc:25:60:e6:b3:6c:a4:83:38:f4:fb:7c:
01:41:51:b0:0f:54:13:da:c2:77:0c:14:1b:79:ec:24:2c:44:
a2:b1:07:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:21:09 2026 by rpki-client