
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
File: fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json)
Hash identifier: Fz5SCgC9SIQI72Gl255RHn5gjhmWilmFyNvBSBxFcGg=
Subject key identifier: 23:49:5B:55:E1:C2:B2:1F:8E:BE:0A:88:78:2D:F2:81:27:AD:82:8C
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial: 0D37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
Manifest number: 0C65
Signing time: Tue 22 Sep 2026 18:56:05 +0000
Manifest this update: Tue 22 Sep 2026 18:56:05 +0000
Manifest next update: Tue 29 Sep 2026 18:56:05 +0000
Files and hashes: 1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: PA33F0OOnTvX11dJwbQSdn8KBJkVlIVSbmdDqigE2QM=)
2: C3290D00636F11F0A1C6DA70C4F9AE02.roa (hash: ISA0Y1MNiIaptJ9tTpLl0/OiQqSxEl/CZifftUJCmso=)
3: E8819018178811EC876F5F50C4F9AE02.roa (hash: k8RYTUE2R9W0lvCqWeEJGJcaj3xzsyGqjLk5FFAGEEQ=)
4: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: UYiuYdXTVxBppiNsiI1q/movnzWH6/WJ+GXsUOQpZSc=)
5: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: QMsC3xiGNdSJW4HzT3eK1fAgUWFpi8CgaYI1dOuhzws=)
6: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: +gaavVRD8B7wEFk6T+tpdPtOFmRhdaX1JhEF5NzSaRM=)
7: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: fT0MQOczypsjHgqIISFNboLyF3R81xE+5ng5wnC/P64=)
8: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: w14t0ZgvkmqPBwmiw//aiLUsh21WVJ/1hlAo42T5Txs=)
9: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: dlzlZoMUm2Cx9g19yLq+yFp31WbZhzVlN+kG3FUpBBA=)
10: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: smGOjMVd2GLPpurMltuKcuhuCGMyzOm3zhphTWE/Ctg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:56:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3383 (0xd37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Validity
Not Before: Sep 22 18:56:05 2026 GMT
Not After : Sep 29 18:56:05 2026 GMT
Subject: CN=6ab2cf45-cf66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:00:c5:19:c9:34:17:ae:8d:d4:33:dd:58:
0d:16:6f:06:36:1d:23:cf:73:3c:c6:2b:d3:59:13:
ed:2a:75:15:10:09:e5:6f:1a:a8:49:30:7a:a7:f8:
b6:fb:bd:d9:bd:f7:41:5c:a9:35:34:7b:db:48:9e:
2c:6f:6f:a8:7c:44:c8:63:a8:1e:af:ab:fe:c1:1b:
ab:90:a4:64:45:65:85:ed:1f:a1:24:9f:1e:cb:4c:
7d:ca:08:d5:45:b7:8b:3e:78:cb:8d:23:b4:d0:ca:
03:06:15:5a:4e:2e:3c:cb:45:77:5b:90:a9:cd:f6:
3d:87:ad:34:95:2f:a9:84:f9:0c:a8:8d:f7:54:64:
bb:c6:e4:7f:ca:9e:da:d7:1c:c7:ff:0b:97:55:02:
ed:5d:91:b3:74:5d:07:52:06:96:bf:77:29:33:08:
96:73:76:09:fc:1a:1e:21:67:58:82:92:94:58:58:
c8:da:91:a2:de:dc:a7:13:dd:42:ec:b3:bb:83:34:
79:3c:21:00:3c:08:00:1d:35:4c:93:18:e5:c9:d9:
04:fb:7a:09:6c:69:c5:7e:c3:5b:9f:0c:62:cd:49:
38:cf:93:f1:aa:d8:b2:e4:79:62:e8:03:49:46:01:
63:4a:4d:fe:e8:b9:92:7f:08:e3:e1:df:2c:5b:0d:
4d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:49:5B:55:E1:C2:B2:1F:8E:BE:0A:88:78:2D:F2:81:27:AD:82:8C
X509v3 Authority Key Identifier:
keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:eb:a9:b1:0a:93:44:cd:b1:22:71:b0:e8:af:42:3f:fc:ee:
a7:63:c1:ac:2f:03:07:45:0a:11:23:8d:73:e2:39:5a:dd:2e:
f4:a7:d8:6b:c5:e2:01:c5:f6:4c:c5:0a:cc:bb:bb:29:fd:84:
92:22:4f:6b:a5:f0:3a:ab:7a:30:70:9c:85:20:55:c0:4c:8d:
c3:91:6f:2b:d7:4d:78:7c:59:36:73:f1:a1:f4:fc:8e:f6:a8:
3d:04:25:2d:82:9b:cc:ca:dc:ed:0b:ed:35:f7:72:fc:74:03:
71:15:fc:91:a6:6c:af:62:ce:7d:e2:1e:60:20:51:ed:fd:59:
6f:8f:35:4d:df:fb:08:ba:e7:bb:13:df:5f:08:3f:25:33:f8:
7e:28:a3:ab:92:b9:21:f5:54:df:a0:a3:d5:73:7e:f1:2c:ac:
b2:2d:37:17:c0:83:95:07:57:35:47:53:8c:84:e9:9a:83:62:
30:ff:29:b3:38:e1:84:23:a2:2b:a0:a0:43:7b:07:2b:ab:f5:
80:43:69:46:f7:09:e6:7a:c6:de:d9:a5:60:05:5c:9c:48:2b:
8c:bb:43:ed:b6:90:86:27:0d:b7:5c:6f:70:52:dd:8c:4d:25:
e8:81:c3:1f:0e:df:25:56:8c:20:65:44:07:47:4c:79:44:81:
ff:1e:e4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:28:34 2026 by rpki-client