
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft
File: f2OOENa_P0qFS8YKE8I5svNdFOE.mft (raw, json)
Hash identifier: rQL6C2xo6a+09yXbh7wbPztyuS6J0LxzmqyWsB9ndbk=
Subject key identifier: 3D:CB:6D:91:10:B4:0F:3B:74:F3:84:F2:96:C2:04:B9:66:48:DE:B8
Authority key identifier: 7F:63:8E:10:D6:BF:3F:4A:85:4B:C6:0A:13:C2:39:B2:F3:5D:14:E1
Certificate issuer: /CN=A9173D5E/serialNumber=7F638E10D6BF3F4A854BC60A13C239B2F35D14E1
Certificate serial: 7B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft
Manifest number: 7B
Signing time: Wed 23 Sep 2026 07:31:39 +0000
Manifest this update: Wed 23 Sep 2026 07:31:39 +0000
Manifest next update: Wed 30 Sep 2026 07:31:39 +0000
Files and hashes: 1: f2OOENa_P0qFS8YKE8I5svNdFOE.crl (hash: 4llddwIyh4GcX+pFwJvEjDVK1Cy59qgUHYtieNqOVEI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.crl
rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173D5E, serialNumber=7F638E10D6BF3F4A854BC60A13C239B2F35D14E1
Validity
Not Before: Sep 23 07:31:39 2026 GMT
Not After : Sep 30 07:31:39 2026 GMT
Subject: CN=6ab3805b-2f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dc:8b:43:0f:9f:bf:07:fd:df:f3:09:97:4e:
b8:ff:d0:55:2b:78:93:06:1e:e1:11:0c:7b:96:a2:
e5:bf:53:7d:b0:c9:bc:e2:44:e9:48:39:68:d8:f2:
a7:4d:bb:06:2c:e6:81:49:da:75:b7:aa:5c:2b:78:
0e:3b:5f:2a:b6:3e:6a:d8:18:e3:7b:a0:43:17:c9:
2b:d9:24:e3:10:5f:80:50:9e:39:2d:30:42:9b:5c:
c7:2a:ae:cc:7c:bc:ec:40:84:45:b7:e3:bd:06:70:
45:3e:ba:58:44:48:4a:46:00:f5:d9:25:af:a3:f4:
15:17:47:62:df:28:9b:d2:65:f2:3a:e9:1a:59:b3:
00:d4:28:ea:c7:ab:97:8f:b5:0a:5b:41:51:79:f7:
82:93:f3:0c:36:7d:9c:db:23:91:7a:16:5a:1c:ef:
de:21:99:3e:c2:31:cf:97:8d:77:d9:4b:41:30:67:
34:d3:33:84:5c:79:2e:71:82:63:f3:9b:a7:62:f6:
fc:63:60:a4:a8:0b:f0:7f:17:f7:ed:1e:0d:97:1e:
e7:66:bc:60:a4:3c:db:9b:77:c1:51:cc:2f:3a:9f:
23:5a:4e:b5:48:15:86:37:6b:4e:0f:5c:69:a5:ff:
d6:39:f0:fa:46:7f:32:58:7e:56:02:cc:2b:da:39:
08:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CB:6D:91:10:B4:0F:3B:74:F3:84:F2:96:C2:04:B9:66:48:DE:B8
X509v3 Authority Key Identifier:
keyid:7F:63:8E:10:D6:BF:3F:4A:85:4B:C6:0A:13:C2:39:B2:F3:5D:14:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:44:9e:d4:0d:89:47:7f:1d:1e:59:11:95:9d:93:4d:69:f5:
8d:81:aa:71:c9:60:4b:a2:09:c0:3f:46:0b:19:29:0f:60:51:
35:7a:97:5c:c3:3e:30:d3:fb:53:34:4e:f5:56:02:33:8d:da:
e9:53:61:75:00:6a:6c:29:c9:8b:bc:fd:a2:3e:13:42:20:b2:
14:74:92:11:c2:dd:a0:3a:84:a7:80:bb:37:86:6a:85:22:07:
3c:27:3a:df:12:76:6d:6c:0a:32:b9:0b:4e:23:ee:20:f7:52:
d5:5f:d2:82:d9:02:cb:07:fe:3a:9c:35:44:d8:e5:34:4c:07:
fd:7d:6f:48:92:4f:95:91:11:56:53:0b:d6:96:7e:50:3d:b5:
bf:35:b2:f0:25:95:85:47:9e:5a:32:86:a2:ad:8a:8c:80:3a:
98:62:4e:d9:79:5e:96:cb:ae:c1:2c:80:ea:e1:af:8c:d6:ee:
d7:25:99:89:f5:46:56:ae:5b:7c:e8:2f:eb:13:9c:d7:69:7a:
4c:77:0a:e0:6a:4a:8c:d8:e2:9b:d6:ce:65:db:2e:cc:d3:2b:
1c:a5:8f:5d:4e:51:36:16:eb:88:00:90:e4:e1:fe:4d:7b:f1:
25:a2:c4:cd:4b:b2:f0:b5:b9:d9:10:dd:05:5e:81:71:61:15:
a6:65:05:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:49:10 2026 by rpki-client