
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
File: FN2GhClPGzOjE6-48OuhyKADeAk.mft (raw, json)
Hash identifier: oMaGoCJgSbZ1PYQ3spNV2xX8bhCdAHG3QmnI3W4encA=
Subject key identifier: E7:35:59:C0:98:51:18:F3:D4:82:F2:FB:8C:80:69:B4:C2:FE:F7:34
Authority key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
Certificate issuer: /CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
Certificate serial: 016F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
Manifest number: 015C
Signing time: Thu 23 Jul 2026 06:40:55 +0000
Manifest this update: Thu 23 Jul 2026 06:40:55 +0000
Manifest next update: Thu 30 Jul 2026 06:40:55 +0000
Files and hashes: 1: FN2GhClPGzOjE6-48OuhyKADeAk.crl (hash: 2yaL8YnjKp4izqKdDKSGBglMCAx+sUnOSqAVY8vW1i8=)
2: F7981812F38811EFAC05053AC4F9AE02.roa (hash: EK3pUqrH9H4fquoX1peOlD1L2xEfn/Ee2ouiE9JS3Uk=)
3: E9B0903AF38811EF81B8CE39C4F9AE02.roa (hash: SSKa739rT23rOpIYYisZx12/v/K7+nclE63wWrbXXlU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl
rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:40:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160A05, serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
Validity
Not Before: Jul 23 06:40:55 2026 GMT
Not After : Jul 30 06:40:55 2026 GMT
Subject: CN=6a61b777-8e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:f9:74:a2:3b:00:fb:5c:97:8f:8f:90:8c:
b6:6e:c6:7f:c7:83:cd:df:22:36:96:22:0e:5d:d4:
4d:8f:1c:5c:4e:1d:31:24:44:67:c9:b2:a4:dd:cc:
e0:06:0c:db:19:90:ee:f1:bb:06:d7:0f:a9:94:7f:
cb:49:d7:29:de:ed:c7:20:ce:25:9b:96:cb:ee:16:
5e:dd:f5:9e:13:67:cf:58:ec:53:16:a2:0e:3b:a1:
c8:5e:52:68:a6:51:b2:5e:7d:24:7c:6c:ac:be:70:
5c:8d:1e:e1:08:a9:95:9f:7b:46:b4:03:1e:df:b7:
c3:e8:59:3e:8f:d8:00:45:4b:66:e5:34:3b:8b:44:
24:6b:3d:00:a2:b7:8f:2e:c1:a8:7c:6a:59:d7:8f:
c0:a6:30:49:b0:6d:39:14:6f:8b:08:73:fa:d7:a5:
c6:82:a9:af:46:c7:b4:28:12:a3:92:1e:61:1b:70:
9f:db:dc:f1:f6:1d:00:eb:ee:f2:ca:b3:cc:e8:c4:
37:7e:9e:50:71:53:c8:2e:5d:1b:81:1f:d4:48:fc:
f9:05:7a:55:d0:f0:a5:a4:6a:f4:e4:37:e0:2b:1a:
2f:83:4f:6e:50:a3:83:8d:a0:d4:7a:71:ef:43:0d:
88:23:6c:07:98:90:e4:cd:bd:27:87:af:4e:cf:38:
36:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:35:59:C0:98:51:18:F3:D4:82:F2:FB:8C:80:69:B4:C2:FE:F7:34
X509v3 Authority Key Identifier:
keyid:14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:c0:43:a4:d5:02:11:29:a0:5f:81:00:2d:95:b0:e4:8b:09:
86:4b:08:b0:66:9e:84:32:62:05:aa:44:50:60:44:f1:57:fd:
69:22:68:9d:3f:41:56:47:4c:92:8d:d1:3f:f3:21:2d:68:a6:
5c:46:79:30:61:01:1b:5c:a1:bc:a0:d9:ca:6b:d4:2c:b9:97:
88:a7:a5:1a:44:cb:77:3a:87:12:18:14:5f:3b:0d:13:b7:5b:
69:16:7b:4c:41:26:1d:54:bf:bd:6b:be:64:96:36:52:ce:5c:
ae:91:8b:22:bc:2f:51:9c:86:99:f1:b8:51:e2:67:f7:db:49:
cf:a1:51:f4:cf:53:0b:8e:53:5d:9f:41:0f:88:f2:f1:cc:37:
8e:05:42:33:05:06:a5:79:e0:94:21:b6:46:3b:b8:1d:92:3d:
77:3d:d0:d4:b0:4e:57:bd:90:0c:88:ab:fa:29:c8:34:e5:04:
d0:39:1a:00:a2:f6:97:87:88:cc:39:7a:5b:7b:ff:9d:f2:d9:
c1:fc:08:e9:e5:af:d1:43:8b:d4:29:f4:ae:bf:12:63:4d:be:
b3:ba:22:a8:88:7b:35:a0:4d:83:d3:75:c4:44:02:b2:3d:d0:
0c:09:ba:ba:6f:5d:b5:2a:76:78:96:c4:38:c9:8f:52:56:21:
f1:97:ea:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:46:46 2026 by rpki-client