
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
File: FN2GhClPGzOjE6-48OuhyKADeAk.mft (raw, json)
Hash identifier: esNxqWrgUtkmNeRg6MnweTvVezmbkPc6btRucNaPNos=
Subject key identifier: 81:C2:EA:27:B4:B2:BF:45:44:43:05:C6:1F:30:FA:75:6A:44:E0:8F
Authority key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
Certificate issuer: /CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
Certificate serial: 018F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
Manifest number: 017C
Signing time: Wed 23 Sep 2026 04:34:38 +0000
Manifest this update: Wed 23 Sep 2026 04:34:37 +0000
Manifest next update: Wed 30 Sep 2026 04:34:37 +0000
Files and hashes: 1: FN2GhClPGzOjE6-48OuhyKADeAk.crl (hash: 0QFVphjSynTq6uVVzg6nIMTwuIMiVF8R3i7QC16AFaM=)
2: F7981812F38811EFAC05053AC4F9AE02.roa (hash: EK3pUqrH9H4fquoX1peOlD1L2xEfn/Ee2ouiE9JS3Uk=)
3: E9B0903AF38811EF81B8CE39C4F9AE02.roa (hash: SSKa739rT23rOpIYYisZx12/v/K7+nclE63wWrbXXlU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl
rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:34:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160A05, serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
Validity
Not Before: Sep 23 04:34:37 2026 GMT
Not After : Sep 30 04:34:37 2026 GMT
Subject: CN=6ab356dd-798a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:06:f9:dd:06:9e:ba:1a:ac:71:c1:34:65:
2b:34:5c:95:de:9a:19:46:40:d4:1e:2a:e3:c2:02:
5b:c1:48:51:72:1c:56:dd:02:60:87:3d:8f:74:86:
55:15:1b:b8:a0:57:08:cd:16:c2:ba:20:41:0d:9d:
a9:77:a7:6c:77:cb:68:a7:8f:5b:84:42:34:67:bc:
1b:e4:86:5f:f1:78:97:34:de:32:e0:b4:f4:b7:19:
1c:b8:24:eb:70:04:81:da:41:b2:b7:01:9b:0e:3b:
e6:e0:04:8d:2f:d6:de:fb:75:61:8f:b8:ae:0a:92:
b0:7a:ab:b3:66:c4:49:8f:88:ff:36:36:cd:00:c7:
d8:5d:0e:cd:13:ab:a1:20:4a:6b:17:5d:3f:17:95:
6d:1e:e6:fd:de:e7:74:b0:80:4f:2d:7e:00:18:4b:
dd:fd:37:f4:ee:56:6e:9d:da:40:f0:d5:3f:cd:a9:
68:cc:fb:0b:4e:40:0e:0c:1c:e2:6f:26:f0:1d:b5:
61:e4:dc:29:d2:d6:bb:ef:36:8b:2f:c3:82:8c:f9:
a6:66:89:8d:ab:34:aa:60:ed:5f:50:e2:45:92:ce:
31:04:d0:4b:24:15:14:86:ce:fc:65:f2:b6:3c:37:
4f:ea:e4:90:86:47:73:43:f4:54:ad:30:99:a2:8a:
45:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C2:EA:27:B4:B2:BF:45:44:43:05:C6:1F:30:FA:75:6A:44:E0:8F
X509v3 Authority Key Identifier:
keyid:14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:c1:88:c5:3a:f0:9d:4a:7c:a2:33:7a:ec:e2:77:97:d8:12:
7d:7b:e6:2b:f0:dc:b1:51:97:43:53:bf:0b:c8:eb:e3:87:70:
61:50:87:0e:66:2b:56:41:df:7f:f5:79:0e:2e:63:0d:1f:df:
b6:53:fb:ae:a4:f1:3b:5d:6c:3b:21:5e:fd:38:e2:e6:a6:5a:
9e:f0:1d:4a:9d:64:9a:14:05:45:63:36:48:62:c0:7d:ef:2c:
65:7f:c0:29:d3:20:96:a6:86:51:84:49:4f:32:a5:12:e8:3f:
f8:8e:d0:01:e8:a8:a7:98:26:dd:af:60:ef:a1:91:62:ab:64:
3b:28:4f:09:a5:a3:00:3b:92:dd:07:4d:b5:4f:6a:32:72:05:
6b:88:be:c7:86:16:01:f6:3b:8d:7e:72:f5:e0:34:05:44:a6:
29:1a:6c:30:ca:bd:e7:b0:12:50:72:26:61:fc:58:62:59:ed:
a1:26:f4:b8:04:72:96:a9:2a:c8:33:63:11:2e:ac:f4:2c:42:
b4:f6:67:f7:62:b8:51:da:2b:15:46:27:e4:c5:37:bc:53:79:
44:3d:05:f5:f4:dc:77:4d:d0:c7:f3:d2:6e:dc:5b:5e:93:54:
42:fa:1e:61:cc:6c:e7:06:34:00:35:4e:55:ab:5d:35:06:37:
8d:09:da:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:17:47 2026 by rpki-client