
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft
File: v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft (raw, json)
Hash identifier: iO7DjUkApz4wLg8bymrioZQBR0EfSft/FyXwoWdSE8E=
Subject key identifier: BF:F1:7D:13:5F:E9:6C:03:CA:C8:AE:51:BD:5E:68:4B:A2:A1:D6:64
Authority key identifier: BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34
Certificate issuer: /CN=A9167FF5/serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834
Certificate serial: 029D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft
Manifest number: 0297
Signing time: Wed 23 Sep 2026 01:32:37 +0000
Manifest this update: Wed 23 Sep 2026 01:32:37 +0000
Manifest next update: Wed 30 Sep 2026 01:32:37 +0000
Files and hashes: 1: v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl (hash: yE00EneSm7FbNcO02I2Po6SvymAlKleRjaReqAj99Yc=)
2: DCEA0362C17C11ED92AD7D85C4F9AE02.roa (hash: tbYd8JflLqAHQOW0BH5GJ8PqKcZMxydsXpsTFe7lGrM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl
rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:32:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669 (0x29d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167FF5, serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834
Validity
Not Before: Sep 23 01:32:37 2026 GMT
Not After : Sep 30 01:32:37 2026 GMT
Subject: CN=6ab32c35-a6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c4:61:d6:1d:96:67:5e:42:2e:43:a5:30:98:
0a:2c:34:5a:7e:1e:f5:ab:29:c7:65:63:4e:71:34:
42:8e:d4:49:aa:4d:d8:01:23:de:59:5a:ba:61:4c:
5c:80:85:47:4a:4f:db:99:32:4f:22:ea:3d:27:03:
60:5a:c7:67:d0:1e:e2:ef:ea:62:04:03:ca:51:cd:
cf:72:b4:6a:0c:36:cf:2b:ee:5d:f6:b0:13:1b:9b:
92:bb:9f:46:2c:57:5c:34:bd:3e:8c:8c:1d:78:a3:
61:fc:98:05:28:46:8c:42:18:b1:0b:4b:ce:b1:79:
2e:63:8b:4c:4e:53:75:5f:cf:ed:65:67:7d:5f:1e:
38:f0:a7:0e:88:90:ef:69:a2:a1:24:72:5e:f7:f2:
18:e4:38:17:e2:51:63:16:ab:db:ae:52:28:ae:15:
27:46:1c:f8:a3:21:94:0b:93:47:e4:62:b8:8a:3a:
ab:b5:f4:1a:e7:11:24:5d:08:ea:7d:23:be:20:a8:
99:2e:cb:7e:bf:f9:8b:94:3a:f2:3c:eb:d9:f8:c7:
2a:6e:3a:6f:81:bd:c3:23:38:11:71:1e:d0:6a:e4:
a6:f9:ea:b2:1a:42:c5:f3:97:1e:b2:d5:72:8b:99:
1a:41:c4:79:dc:b0:c0:f4:9b:59:f2:7f:4c:ec:d7:
81:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F1:7D:13:5F:E9:6C:03:CA:C8:AE:51:BD:5E:68:4B:A2:A1:D6:64
X509v3 Authority Key Identifier:
keyid:BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b7:ff:0a:4c:8b:22:ef:4b:e5:2e:3f:fe:9f:4d:71:16:6a:
79:0b:4a:e2:12:13:a6:2e:bf:2f:ba:ee:f0:9d:1f:7b:0e:74:
e2:de:ed:34:78:72:25:2f:62:b0:12:ea:03:6b:f6:2d:2d:04:
65:31:a4:c6:26:64:0b:1a:03:47:a0:76:9f:46:b2:69:c9:cb:
cd:ac:79:63:85:ce:7d:eb:00:ee:54:ac:74:61:42:8e:d0:c3:
2c:c5:20:5c:24:a7:86:fe:c5:4d:c0:f5:aa:e5:d1:7d:61:ec:
33:d3:42:09:29:1e:15:78:34:2c:f4:8b:ac:34:80:ca:cb:74:
9c:83:56:ad:ef:05:7f:6a:41:64:72:65:91:c6:e5:0b:9e:0c:
6e:5c:46:cc:f9:a6:56:37:94:e1:73:6c:6d:c3:31:f2:06:83:
c1:31:b5:31:72:9a:67:2d:6f:fc:9d:99:c7:5e:fd:bc:08:d5:
d0:bf:ba:23:20:8a:99:ed:a2:5e:09:76:2c:ab:bb:f8:b1:2d:
66:b6:b6:56:d5:ef:16:89:92:b3:17:21:7e:59:6c:64:e4:01:
04:1d:6b:2c:b8:d6:bb:f8:26:d7:95:19:47:78:7b:a8:c1:6b:
dc:c3:99:62:2a:b9:89:dd:50:40:64:3e:d3:3b:71:7c:65:33:
61:81:60:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:07:56 2026 by rpki-client