
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
File: f99iGPoBXQoAdKhEJFGAaij53fU.mft (raw, json)
Hash identifier: G/ttgE5/Zw9zAVTqz+PzMXF5fUhtioHh0lSW1rkH0RA=
Subject key identifier: 21:78:4F:C2:36:09:DA:41:EF:7D:6C:E5:4E:11:A0:3F:39:48:A6:A9
Authority key identifier: 7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5
Certificate issuer: /CN=A9173060/serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5
Certificate serial: 08B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
Manifest number: 08A3
Signing time: Tue 22 Sep 2026 20:26:09 +0000
Manifest this update: Tue 22 Sep 2026 20:26:09 +0000
Manifest next update: Tue 29 Sep 2026 20:26:09 +0000
Files and hashes: 1: f99iGPoBXQoAdKhEJFGAaij53fU.crl (hash: 6CpLxihtU0vC1MER0PC6WJV8vUBwNNfqDMrKvcPZww0=)
2: 85E0F43E8C4B11F1B19DE8A35611F970.roa (hash: mLSyULYzajAtJ2vg9LM7fm/qvl7GMy/fczxSupefI4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl
rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:26:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2224 (0x8b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173060, serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5
Validity
Not Before: Sep 22 20:26:09 2026 GMT
Not After : Sep 29 20:26:09 2026 GMT
Subject: CN=6ab2e461-8cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3b:4d:33:ce:e6:d0:28:22:14:57:9e:01:07:
82:88:7b:4a:a4:41:b5:0a:ab:d9:26:76:51:af:eb:
cf:ec:30:c6:64:54:61:7d:b9:67:b0:fe:15:8c:ed:
e7:ea:62:dd:cb:4e:87:73:0d:7f:5b:9d:d3:a5:5b:
2e:3c:cb:b4:5f:a7:99:27:af:2b:28:f4:51:61:a5:
cf:9f:a5:00:7e:e6:eb:73:87:06:2c:ec:81:8a:f6:
e0:20:7f:e7:e5:dd:a8:91:ab:d9:e3:55:1a:64:36:
f0:fc:78:16:ac:87:ad:46:ca:b1:74:41:80:a1:b3:
d2:25:4d:ed:54:b6:c5:fb:80:03:91:ec:a5:8f:c2:
a8:01:d5:75:1f:3c:38:bd:a5:68:ba:da:81:7c:72:
bb:30:0e:77:af:61:31:65:d0:5f:78:8d:ca:d3:9d:
6f:e0:d3:f8:22:cd:3b:cc:35:91:69:f9:28:88:2a:
97:37:67:6c:39:2a:84:6e:74:91:eb:32:d9:20:3c:
c8:5b:05:1e:aa:4f:db:dc:c8:84:90:d6:66:ed:15:
00:df:94:3b:69:54:ed:80:67:72:5e:4e:b4:b3:ee:
0b:d1:2f:be:d2:72:32:53:be:10:5f:8a:7a:e9:a5:
cb:e7:b3:93:66:d1:41:4d:13:3d:01:fc:2d:8f:a0:
4d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:78:4F:C2:36:09:DA:41:EF:7D:6C:E5:4E:11:A0:3F:39:48:A6:A9
X509v3 Authority Key Identifier:
keyid:7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:68:55:d1:89:01:99:6d:4b:8e:e4:e6:0c:fe:db:41:76:2d:
4f:c0:b2:99:a2:25:a8:83:ff:43:f8:1e:b2:36:82:7b:17:d6:
0b:50:8b:91:80:34:f4:f0:86:26:39:5e:dc:50:88:44:45:93:
3f:79:f7:4e:4e:97:4b:46:59:7b:e0:97:43:1e:c4:59:f8:91:
05:61:45:c1:e8:c1:67:78:ee:b0:c4:d0:7f:6f:6c:fb:b5:63:
f9:65:e2:2d:7d:92:85:99:f9:40:da:79:cd:ca:81:96:bb:b3:
e0:df:06:37:30:2f:7d:1f:ba:83:1f:34:f1:c3:2c:57:3a:05:
1b:b1:20:f1:0a:f7:e9:1e:61:53:f4:8e:e0:d8:0a:ca:be:99:
6b:35:81:4d:4b:e8:d3:8a:e0:d5:7a:76:4d:17:ea:14:05:f2:
6d:d7:80:da:ab:a7:d7:dc:d1:4e:2e:00:67:f1:21:0c:70:39:
f2:c9:ae:cf:bd:75:f0:10:a6:bb:05:c4:fa:fe:ef:29:ef:ef:
1e:91:50:c6:40:4b:ca:b9:3c:48:bf:83:fc:24:60:2a:6e:4d:
18:c1:7e:f2:e0:f0:c5:b8:9d:ad:3c:bd:9c:b4:1e:24:bd:2f:
69:30:d2:19:00:39:f9:30:9f:04:64:a0:5f:78:1b:2b:1e:f9:
b0:15:e7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:34:28 2026 by rpki-client