
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
File: F8IFAD4uuR49xG6qyJD20LUN5uI.mft (raw, json)
Hash identifier: m2xA8rHPD7tojC1NOZDmdh7p/gzyeTowyuPSJFGsUno=
Subject key identifier: 97:92:41:94:29:8A:BA:6F:34:1E:39:9D:F6:7D:FC:9A:8F:47:A1:E9
Authority key identifier: 17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2
Certificate issuer: /CN=A9146AD7/serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
Certificate serial: BA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
Manifest number: B4
Signing time: Wed 22 Jul 2026 16:28:50 +0000
Manifest this update: Wed 22 Jul 2026 16:28:50 +0000
Manifest next update: Wed 29 Jul 2026 16:28:50 +0000
Files and hashes: 1: F8IFAD4uuR49xG6qyJD20LUN5uI.crl (hash: ds/jKSEb4tA8JyeUooV4aGMyZbAeXXhanzLrVYX9mHc=)
2: 404053A882BE11F0ADD6D367C4F9AE02.roa (hash: Rt1fqxpDUHKbQnEZeGSolrH7j72JJeAt6X3959FalwY=)
3: 6FA6ED7E82C711F0AD86D64DC4F9AE02.roa (hash: HxueVyeG48TlpzJ0pvXXuxMket+vhTgEYarRY925CZ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl
rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146AD7, serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
Validity
Not Before: Jul 22 16:28:50 2026 GMT
Not After : Jul 29 16:28:50 2026 GMT
Subject: CN=6a60efc2-30df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:5c:05:2a:9e:4a:8e:57:ba:24:f3:30:25:
43:18:9c:18:27:ae:9d:f6:c2:2b:c4:e2:0c:09:70:
3c:5c:be:ee:28:c3:d4:df:f9:ef:22:80:ef:70:01:
28:c9:82:22:b6:7d:84:a6:9c:d1:c8:2b:b4:dc:58:
63:ef:d0:3f:b0:95:89:7a:5f:e1:d3:52:6b:3c:db:
29:d0:ad:e2:2d:da:76:06:9b:54:34:9b:8e:fc:55:
83:62:8b:5d:1b:c2:c5:61:a7:1d:a6:7d:f6:86:61:
1f:96:80:d7:5e:41:72:73:4f:c0:09:35:aa:a9:c3:
b1:ec:7b:aa:be:9b:b8:a8:77:bd:e0:17:b7:f2:35:
bb:1e:f2:85:a0:69:07:da:a7:56:17:ab:bf:c8:ce:
a3:a8:56:41:c8:2a:ae:0a:cf:cd:10:3e:7c:75:8f:
ca:fa:b9:81:e6:7a:0e:59:d1:03:9c:30:ce:fa:97:
83:d1:53:6f:7e:71:66:a8:de:4e:01:d7:42:08:05:
e5:d9:d7:0d:ae:5c:8c:43:b1:1e:71:f1:cf:6c:cf:
5f:c1:3d:f6:61:5b:47:c7:ec:06:f6:08:9f:9e:20:
26:4b:b6:2f:65:6d:17:4b:09:59:66:d6:22:c2:4d:
c6:46:d3:5f:48:5b:c0:fc:b8:f4:e6:f2:7d:35:99:
1a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:92:41:94:29:8A:BA:6F:34:1E:39:9D:F6:7D:FC:9A:8F:47:A1:E9
X509v3 Authority Key Identifier:
keyid:17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:e7:cb:4b:b4:23:c9:13:51:67:f4:34:e4:72:9b:c8:b2:82:
fc:96:24:a0:f1:0c:0e:d6:81:6a:17:76:af:7b:eb:d2:22:f2:
71:6c:ed:f0:1f:86:10:a6:72:34:1a:b0:97:71:b6:32:9c:9f:
cd:2b:b6:2f:3f:1b:d3:de:0e:a1:87:57:ff:a4:e1:40:9b:d3:
48:fa:0f:33:2c:b2:a0:b5:9c:a4:c5:c1:94:88:8b:26:b1:f9:
37:33:d7:86:57:4f:c3:84:15:32:2e:fe:1a:dc:52:c0:bf:fa:
92:1d:23:7d:84:a5:39:63:52:fb:0e:7c:7b:43:10:6d:49:61:
eb:7b:91:50:ff:b5:03:f2:45:f5:16:99:9d:a2:2d:88:47:b2:
b7:0a:31:c5:aa:69:0f:91:7b:31:f8:54:c8:36:cc:0f:97:b5:
e7:6a:9c:70:e1:14:34:b2:e0:88:2e:6d:a2:5d:f7:a4:78:76:
e5:4b:5f:37:d6:95:fb:60:96:cf:5e:52:96:c3:07:5c:ac:db:
f8:c0:6d:44:57:96:11:0f:11:0b:e8:df:0f:18:11:03:95:bf:
f9:da:89:c2:ca:fe:ed:42:43:69:17:cf:1e:ce:9a:0a:6f:d8:
02:12:85:76:a0:61:cd:f9:2b:94:34:36:1e:07:52:e9:04:b9:
cc:80:e3:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZBRDcxMTAvBgNVBAUTKDE3QzIwNTAwM0UyRUI5MUUzREM0NkVBQUM4OTBGNkQw
QjUwREU2RTIwHhcNMjYwNzIyMTYyODUwWhcNMjYwNzI5MTYyODUwWjAYMRYwFAYD
VQQDEw02YTYwZWZjMi0zMGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsBpcBSqeSo5XuiTzMCVDGJwYJ66d9sIrxOIMCXA8XL7uKMPU3/nvIoDvcAEo
yYIitn2EppzRyCu03Fhj79A/sJWJel/h01JrPNsp0K3iLdp2BptUNJuO/FWDYotd
G8LFYacdpn32hmEfloDXXkFyc0/ACTWqqcOx7Huqvpu4qHe94Be38jW7HvKFoGkH
2qdWF6u/yM6jqFZByCquCs/NED58dY/K+rmB5noOWdEDnDDO+peD0VNvfnFmqN5O
AddCCAXl2dcNrlyMQ7EecfHPbM9fwT32YVtHx+wG9gifniAmS7YvZW0XSwlZZtYi
wk3GRtNfSFvA/Lj05vJ9NZkazwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJeSQZQp
irpvNB45nfZ9/JqPR6HpMB8GA1UdIwQYMBaAFBfCBQA+LrkePcRuqsiQ9tC1Debi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkFENy85OENFODgxMDdG
NzUxMUYwQkQwRjA4NjNDNEY5QUUwMi9GOElGQUQ0dXVSNDl4RzZxeUpEMjBMVU41
dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0Y4SUZBRDR1dVI0OXhHNnF5SkQyMExVTjV1SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NkFENy85OENFODgxMDdGNzUxMUYwQkQwRjA4NjNDNEY5QUUwMi9GOElGQUQ0dXVS
NDl4RzZxeUpEMjBMVU41dUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUOfLS7QjyRNRZ/Q05HKbyLKC/JYkoPEMDtaBahd2r3vr0iLycWzt8B+GEKZy
NBqwl3G2MpyfzSu2Lz8b094OoYdX/6ThQJvTSPoPMyyyoLWcpMXBlIiLJrH5NzPX
hldPw4QVMi7+GtxSwL/6kh0jfYSlOWNS+w58e0MQbUlh63uRUP+1A/JF9RaZnaIt
iEeytwoxxappD5F7MfhUyDbMD5e152qccOEUNLLgiC5tol33pHh25UtfN9aV+2CW
z15SlsMHXKzb+MBtRFeWEQ8RC+jfDxgRA5W/+dqJwsr+7UJDaRfPHs6aCm/YAhKF
dqBhzfkrlDQ2HgdS6QS5zIDjSA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:21 2026 by rpki-client