
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft
File: FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft (raw, json)
Hash identifier: BLXjvLYS2vMFmZ+ymTdt7feS54MOjXDQ4rNelpbk34E=
Subject key identifier: 05:79:2F:BA:36:5C:EF:C4:2C:1F:27:11:D4:6C:B5:AC:19:FF:04:DB
Authority key identifier: 16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57
Certificate issuer: /CN=A9188F77/serialNumber=16315A68A745080BDDB6C8F0156D043068931B57
Certificate serial: 01CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft
Manifest number: 01B9
Signing time: Wed 23 Sep 2026 03:53:20 +0000
Manifest this update: Wed 23 Sep 2026 03:53:20 +0000
Manifest next update: Wed 30 Sep 2026 03:53:20 +0000
Files and hashes: 1: FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl (hash: 6ezy/Sis12NEseCQKy00v8iSMUC9Y8F7Oq+l6QUlUZc=)
2: 1501E24625F511EF8F342F3EC4F9AE02.roa (hash: ezZJRYxLK6j3OTpYQ1JWUPNDJf7+Fv6xmBdkXwcseTQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl
rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460 (0x1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188F77, serialNumber=16315A68A745080BDDB6C8F0156D043068931B57
Validity
Not Before: Sep 23 03:53:20 2026 GMT
Not After : Sep 30 03:53:20 2026 GMT
Subject: CN=6ab34d30-e93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:76:83:ac:03:86:43:7a:1b:e4:03:b3:1b:5c:
75:36:1f:af:4a:d6:32:c6:18:92:f5:00:24:95:34:
e2:d8:cc:a2:aa:63:36:8b:a9:40:12:96:21:0b:a0:
1c:7c:71:4b:45:37:97:ce:99:5a:29:5e:a5:7d:4e:
30:34:08:96:28:a1:12:ce:bb:1b:c6:b9:33:c9:31:
62:cb:01:c2:71:d4:c9:52:19:87:7b:1e:08:01:27:
f9:8d:f5:1e:2e:f9:6c:61:c8:1e:9c:d3:cc:94:91:
50:85:20:2a:72:cf:99:60:40:f9:bf:72:1b:cc:05:
09:22:d4:6c:e2:c1:3b:62:dd:b8:95:d9:26:6a:a2:
50:ac:42:c0:c4:72:29:4f:04:6c:9e:f4:74:0e:f0:
8f:d9:17:1b:a1:48:90:0c:b1:e0:b6:53:74:a8:2a:
36:c5:bc:36:42:76:d2:7d:5a:83:e4:6c:71:d2:91:
2f:1c:f5:71:ab:d2:3d:82:c5:d0:be:2c:23:a1:93:
8d:6c:80:a1:dd:83:dd:d4:29:90:ad:65:f6:7a:72:
7a:13:a8:22:76:a8:a1:ea:a8:37:b6:51:28:99:93:
2a:74:6f:06:d3:c5:68:c5:16:ab:c5:34:ab:30:3d:
f1:62:31:38:b4:c4:4a:8d:a1:e3:38:fb:c4:8b:92:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:79:2F:BA:36:5C:EF:C4:2C:1F:27:11:D4:6C:B5:AC:19:FF:04:DB
X509v3 Authority Key Identifier:
keyid:16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:82:8e:d4:03:05:7b:ad:a4:94:6c:34:8f:23:27:29:94:ce:
3d:bd:b1:fb:33:2f:94:9e:c2:82:29:01:a4:c1:88:48:ea:6b:
85:0c:a3:74:ad:1b:84:19:4f:90:0e:a8:35:30:62:5e:0c:8c:
e9:8b:28:14:1d:5f:55:75:d2:56:b7:9c:50:1d:d6:18:b5:94:
72:4d:fb:99:8a:e4:6d:f1:02:0f:fd:e0:6f:e7:6b:19:d0:2e:
d1:85:33:8f:e9:9a:6d:cd:ea:c8:39:5c:55:55:3f:48:98:c1:
de:3e:5c:39:9e:7c:a4:e4:03:86:be:c1:ec:13:15:f0:b6:e9:
1c:76:3c:55:c6:45:b6:cf:5d:06:a4:a2:9b:28:4a:b9:e0:26:
da:8b:02:39:97:d8:8b:5d:4e:6b:ff:55:e7:f7:b8:d3:62:73:
bc:73:78:f0:96:56:a1:f9:1c:19:0c:2e:7d:93:c6:3a:ba:18:
d3:45:f8:a2:44:a6:7e:04:5d:8d:09:38:5d:4a:96:97:9e:d5:
31:35:74:89:a6:da:d4:b0:79:b1:55:f9:65:8a:17:3c:56:75:
64:27:0a:4c:4b:22:db:5e:90:a4:dc:28:5c:51:ca:4b:10:6d:
f5:7d:81:15:c0:4d:69:c6:99:6b:66:80:94:03:db:d5:29:0a:
30:9d:e0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:45:05 2026 by rpki-client