
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/F6gIZniOytzh9tCsYYLRDDnXf4k.mft
File: F6gIZniOytzh9tCsYYLRDDnXf4k.mft (raw, json)
Hash identifier: DBIBd0VCtai7nVrZOxnSYlK63TbBxBW7lXaOQHFmUQE=
Subject key identifier: 82:72:5D:46:89:B6:4A:5C:37:90:BC:A8:B7:D5:BF:9B:D0:3E:1F:2F
Authority key identifier: 17:A8:08:66:78:8E:CA:DC:E1:F6:D0:AC:61:82:D1:0C:39:D7:7F:89
Certificate issuer: /CN=A911BEC0/serialNumber=17A80866788ECADCE1F6D0AC6182D10C39D77F89
Certificate serial: 14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6gIZniOytzh9tCsYYLRDDnXf4k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/F6gIZniOytzh9tCsYYLRDDnXf4k.mft
Manifest number: 0F
Signing time: Wed 23 Sep 2026 08:55:40 +0000
Manifest this update: Wed 23 Sep 2026 08:55:40 +0000
Manifest next update: Wed 30 Sep 2026 08:55:40 +0000
Files and hashes: 1: F6gIZniOytzh9tCsYYLRDDnXf4k.crl (hash: VKee2cWKHhngfCBWPmcGGpFUofzcCIar3/xUlLUwT4c=)
2: DF1733D8A9C411F19B888AE56E11F970.roa (hash: bpFa5fTmur708cOVcV2AQHkyMDdSCS88Rji9UEjFKko=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/F6gIZniOytzh9tCsYYLRDDnXf4k.crl
rsync://rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/F6gIZniOytzh9tCsYYLRDDnXf4k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6gIZniOytzh9tCsYYLRDDnXf4k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BEC0, serialNumber=17A80866788ECADCE1F6D0AC6182D10C39D77F89
Validity
Not Before: Sep 23 08:55:40 2026 GMT
Not After : Sep 30 08:55:40 2026 GMT
Subject: CN=6ab3940c-4b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0e:71:7e:c7:95:9c:3a:77:54:c4:f2:b0:82:
3c:1c:b4:5c:7c:e7:7c:14:d5:8c:89:84:5f:c6:cc:
6d:bf:61:eb:55:14:5c:ba:33:dd:2e:a7:b8:ba:d7:
86:b6:3d:16:ca:c4:98:ba:ba:b0:1a:4b:58:08:97:
11:a3:da:ba:8a:d9:47:2e:2e:23:84:45:b1:89:8e:
2a:66:8b:9a:ea:f4:30:24:90:f3:d6:df:81:4d:f0:
3a:29:4c:87:0f:58:65:34:a0:5d:06:1c:75:e4:41:
98:be:30:fd:ab:f0:f5:96:35:6c:cf:b8:51:d5:73:
88:97:b9:e0:d3:ca:96:ac:a4:51:8c:58:39:21:f5:
82:15:07:5d:94:48:bf:81:5b:3f:4f:82:29:1f:98:
85:5c:52:9e:66:0c:ba:36:92:c3:c9:f4:f9:d6:c4:
bc:69:f8:37:10:94:99:82:f2:ce:6a:3f:e4:fa:43:
9c:00:1f:cb:00:5e:9e:75:39:d1:1f:bd:5e:54:4e:
84:42:9a:c6:79:73:8c:cb:cf:e6:ef:f7:34:e8:c8:
71:85:7b:1a:a5:1b:8a:f4:06:72:f5:73:53:70:ea:
cd:33:79:a0:ff:18:77:64:2a:bf:04:2f:4b:ed:44:
74:be:49:c1:6e:41:7d:d6:4f:8b:49:c3:27:0c:44:
59:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:72:5D:46:89:B6:4A:5C:37:90:BC:A8:B7:D5:BF:9B:D0:3E:1F:2F
X509v3 Authority Key Identifier:
keyid:17:A8:08:66:78:8E:CA:DC:E1:F6:D0:AC:61:82:D1:0C:39:D7:7F:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/F6gIZniOytzh9tCsYYLRDDnXf4k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6gIZniOytzh9tCsYYLRDDnXf4k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/F6gIZniOytzh9tCsYYLRDDnXf4k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:9e:0d:0a:b4:30:c0:31:27:06:43:09:eb:91:ac:b1:19:13:
4c:f3:7e:22:68:66:5e:7a:92:dd:de:b2:83:c9:58:59:de:b1:
7b:e7:9e:f7:31:23:9d:ea:c7:52:2b:bd:0b:0a:7e:33:6c:49:
79:d6:dc:b1:4c:8c:1a:0a:35:5d:1a:79:52:60:c4:8e:4a:47:
49:db:bd:23:88:0b:98:92:dc:db:84:38:60:7d:21:8f:9a:3a:
d1:41:6f:8c:d6:ae:95:92:b8:29:3e:b2:6f:6d:76:0a:5f:39:
b2:16:8c:e9:5a:82:70:d0:9f:67:61:ea:b8:48:eb:01:be:bf:
a8:03:01:30:fc:b4:d5:55:8f:c8:b6:5f:27:e9:ef:f5:c4:49:
14:a7:e9:2c:6c:05:b7:9d:73:a7:44:4f:13:a1:82:72:87:32:
91:ea:2e:84:b3:15:2b:bc:09:bd:c2:e6:09:5d:29:f3:2e:eb:
29:18:67:a8:97:bd:f7:1f:d2:a5:e5:af:41:85:58:8f:ae:5a:
a9:e4:64:a8:c1:89:7c:09:98:b9:01:c5:c0:a0:72:43:bb:22:
7d:a5:88:88:cf:ea:24:b2:56:46:8b:07:67:ab:c2:89:26:dc:
89:4e:8a:f7:5e:cf:9d:4e:2f:d3:14:55:91:7b:b4:35:4d:52:
70:bd:2f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:21:27 2026 by rpki-client