
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
File: FTyY0zE8xk7bmuFaujtUPkgEWZA.mft (raw, json)
Hash identifier: xHzVEBakknlCBCU2pIkQN+Adhji4xsWBu8XPDoNDtdk=
Subject key identifier: C1:7B:42:F5:52:64:F7:13:83:93:5E:DC:75:C6:1B:D8:78:8A:54:03
Authority key identifier: 15:3C:98:D3:31:3C:C6:4E:DB:9A:E1:5A:BA:3B:54:3E:48:04:59:90
Certificate issuer: /CN=A9167FBA/serialNumber=153C98D3313CC64EDB9AE15ABA3B543E48045990
Certificate serial: CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTyY0zE8xk7bmuFaujtUPkgEWZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
Manifest number: C2
Signing time: Wed 25 Mar 2026 06:10:01 +0000
Manifest this update: Wed 25 Mar 2026 06:10:01 +0000
Manifest next update: Wed 01 Apr 2026 06:10:01 +0000
Files and hashes: 1: FTyY0zE8xk7bmuFaujtUPkgEWZA.crl (hash: VqV4V7IqcEjVXSZKzcCeUPIxPb1xrakn8VwM+Gyn1TE=)
2: F552E6BA05A111F082D17325C4F9AE02.roa (hash: 50HTgUj8BYD/Up0LzcZVR1qzl5yUcfq0/gOWZsXxQLA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.crl
rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTyY0zE8xk7bmuFaujtUPkgEWZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167FBA, serialNumber=153C98D3313CC64EDB9AE15ABA3B543E48045990
Validity
Not Before: Mar 25 06:10:01 2026 GMT
Not After : Apr 1 06:10:01 2026 GMT
Subject: CN=69c37c39-f75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d4:10:e4:dc:03:85:12:af:1c:9d:20:e0:f4:
6a:cb:da:e0:5e:87:25:6a:6b:ab:3f:1f:7a:98:51:
9a:ab:cf:6b:9a:0f:67:25:ec:cb:f8:06:7e:82:74:
36:90:d4:5d:4f:24:76:63:eb:88:86:ce:ce:26:45:
60:7a:6a:b9:92:2b:d7:59:87:d7:3f:8a:03:5d:d1:
bb:37:3d:94:8b:ed:68:36:49:ef:f5:dd:91:84:66:
b5:85:1b:28:b9:23:24:54:fb:1a:f7:c6:d9:03:ec:
64:88:48:d2:4c:70:37:e4:0a:e2:2e:cc:6e:05:ec:
b3:c3:cc:f6:46:45:47:e1:88:a2:a4:cf:3b:83:13:
c0:b3:69:64:04:81:2c:98:6a:36:ae:13:77:2f:d9:
cb:21:16:34:b6:b4:22:85:ec:28:18:4d:0c:53:b6:
a7:c0:cc:ea:2e:88:2f:50:ab:92:3c:3e:ac:b8:2b:
1f:cd:d1:fb:dc:05:9d:01:f7:a9:1e:c0:27:31:1c:
c1:9e:29:9b:54:85:66:c7:4b:f2:f3:97:5d:5b:9d:
e7:87:3f:1d:5c:8f:a1:a2:e5:df:be:e7:56:af:4c:
f2:a8:b7:d2:fe:85:b2:a2:5b:f4:3f:8e:a2:82:e7:
a2:9d:18:ed:7a:cf:11:e0:0d:66:a3:7e:9f:d3:a4:
23:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7B:42:F5:52:64:F7:13:83:93:5E:DC:75:C6:1B:D8:78:8A:54:03
X509v3 Authority Key Identifier:
keyid:15:3C:98:D3:31:3C:C6:4E:DB:9A:E1:5A:BA:3B:54:3E:48:04:59:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTyY0zE8xk7bmuFaujtUPkgEWZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8e:86:94:69:0c:bb:58:9d:ec:b4:24:fb:7f:9f:71:29:b5:
32:3f:73:02:40:23:19:38:38:9e:2a:ac:93:27:16:a4:47:91:
85:9f:a7:51:53:e9:6f:f8:07:6d:0a:ea:c0:47:4e:0c:17:7f:
58:29:c9:79:1d:53:29:7a:44:0f:fb:c3:38:d1:d9:52:c4:2d:
3b:c2:23:8b:03:12:65:2f:31:5e:30:f6:c8:5a:a7:7c:06:e5:
b2:1d:05:7c:e9:ee:05:dc:5d:65:46:45:ef:d6:e3:de:49:9c:
30:29:ec:c8:06:44:9a:60:c3:b3:b6:2f:0b:39:24:40:36:c5:
a8:e5:2c:8a:81:87:2b:e6:5e:8a:29:c9:40:ca:88:a9:e8:a8:
d1:4c:c1:88:77:03:e1:05:67:8b:80:62:8a:e3:de:c5:ac:ae:
02:b2:35:3a:45:af:c7:66:fa:39:14:10:0c:41:da:3d:25:e1:
6e:b8:82:a3:76:fc:d5:7c:fa:67:28:d0:fc:5a:ec:bd:c4:61:
d2:3b:97:b8:32:bb:24:e2:28:96:f2:b5:d3:88:21:0d:46:6b:
75:b6:95:72:d4:7d:24:d6:d9:f3:ca:60:c6:e4:84:e2:9c:69:
29:7a:ce:b0:51:a1:39:2d:30:bd:e0:66:c9:bb:0e:2e:7c:e3:
04:3f:74:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:50:43 2026 by rpki-client