
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft
File: fd08hfmnH2JfzMEMqDHld3CbTz8.mft (raw, json)
Hash identifier: KRimtoIz9BCoOYO1Nrx88uGgI4i6RSo6gj2HOdDasmg=
Subject key identifier: C4:97:9E:CF:DD:B6:CE:4F:A6:4B:5E:7B:01:C9:62:59:EA:F2:9F:82
Authority key identifier: 7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F
Certificate issuer: /CN=A9167B41/serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F
Certificate serial: 03ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft
Manifest number: 03E7
Signing time: Wed 23 Sep 2026 00:05:46 +0000
Manifest this update: Wed 23 Sep 2026 00:05:45 +0000
Manifest next update: Wed 30 Sep 2026 00:05:45 +0000
Files and hashes: 1: fd08hfmnH2JfzMEMqDHld3CbTz8.crl (hash: fTCuHps7u8GnloeDPQ8+NUTi9LrBT3ZRwxM4xREmvjM=)
2: D24B4D42DF3E11EC83CCFE1EC4F9AE02.roa (hash: w8a4jm4C2HDXTcRo4fvSz2MwdiylNZyunSzumI0a+dU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.crl
rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:05:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1005 (0x3ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167B41, serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F
Validity
Not Before: Sep 23 00:05:45 2026 GMT
Not After : Sep 30 00:05:45 2026 GMT
Subject: CN=6ab317d9-b85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:84:22:4a:60:91:94:e9:e6:6b:8b:ad:9a:2a:
e9:84:39:52:09:40:0e:e0:8a:63:42:ef:fd:86:f8:
d3:62:7a:72:4f:45:e6:7b:a5:48:fe:6e:7f:e0:93:
5d:d0:b9:b2:8d:1d:cc:7d:25:00:23:13:86:3d:6a:
cc:65:d7:94:3b:03:03:24:60:88:dc:80:7f:92:28:
07:d0:da:22:6c:a6:16:f8:d3:f8:89:32:0e:3a:c5:
e2:49:04:bd:e2:03:49:19:4f:b7:45:ff:8a:32:1c:
f5:97:48:d1:35:26:ba:9f:b3:57:8b:d0:e6:aa:53:
aa:5f:ec:df:be:00:c6:23:a0:dd:ad:11:42:58:20:
9f:e5:9f:8c:dd:46:71:fc:85:00:b8:da:16:b8:d8:
0a:08:83:3d:36:29:eb:d3:df:e5:47:82:be:44:47:
74:49:b7:2d:1a:cf:9e:d0:8d:94:bb:f3:60:44:e0:
0b:58:54:05:a2:46:3c:11:35:74:a4:2f:a6:65:d7:
e2:6e:d8:d8:b9:3a:a9:bb:32:49:18:68:85:ea:a8:
be:f2:93:11:14:58:be:7b:8c:25:be:db:bd:7f:14:
20:30:86:b2:9c:d1:ce:1b:99:75:c5:f7:58:70:ce:
5b:6d:39:8c:29:9c:4e:ac:b6:e8:cb:eb:60:98:b9:
48:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:97:9E:CF:DD:B6:CE:4F:A6:4B:5E:7B:01:C9:62:59:EA:F2:9F:82
X509v3 Authority Key Identifier:
keyid:7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:37:90:37:58:a8:72:a7:ea:6e:97:9f:86:1f:82:0e:ed:c5:
40:b5:aa:e9:96:a5:7b:5f:cb:be:db:66:67:35:29:37:80:1d:
a7:a4:2b:b0:98:fc:5d:94:3c:27:a6:41:68:a4:bc:2c:83:3d:
c3:e4:a3:34:5e:62:42:4e:b0:70:b5:9e:81:70:25:2f:6b:c7:
a8:26:90:ac:68:f8:07:4d:75:79:72:de:8a:84:95:80:ed:89:
fb:a6:73:87:9c:b8:44:ae:bb:38:16:8f:37:b7:36:46:b9:6b:
3b:0d:18:b5:e4:d0:1b:aa:3b:ee:32:f8:dc:4f:ee:03:da:a1:
95:b9:39:69:e8:57:a1:9a:85:9e:93:22:11:02:82:7b:1f:46:
61:93:b7:fe:ea:dc:5a:8a:0a:b8:ab:81:e2:f5:82:1b:4d:e7:
70:0e:fc:0c:23:d2:8e:7b:33:5c:9b:a4:a7:95:c3:cc:83:b9:
fe:1d:25:02:42:1e:83:cc:ab:6e:58:33:fc:e1:bd:92:33:10:
30:d3:c3:d8:12:f2:19:ec:7a:0d:d7:49:ee:61:22:0c:e4:31:
56:ee:9f:f3:91:2b:38:e0:1b:92:49:be:61:9f:b8:3f:87:4c:
e4:ab:ac:5a:94:e4:f1:f9:62:37:b6:d9:9d:10:d7:b2:47:52:
1e:50:74:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:13:43 2026 by rpki-client