
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
File: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft (raw, json)
Hash identifier: W5m27p5PDTCOI/rwgGrB12Ha14EQETaTHwRSTk6acro=
Subject key identifier: CE:06:AF:65:39:F7:63:F3:FD:A1:58:6C:3E:EE:BB:9D:4F:0C:BD:44
Authority key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4
Certificate issuer: /CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4
Certificate serial: 0692
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
Manifest number: 0681
Signing time: Thu 24 Sep 2026 22:28:28 +0000
Manifest this update: Thu 24 Sep 2026 22:28:28 +0000
Manifest next update: Thu 01 Oct 2026 22:28:28 +0000
Files and hashes: 1: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl (hash: BE2IOhmiq4kIJzMJUbGFnTfzfJBECjJ8q1vJitYlu+M=)
2: AB532852B38911ED825BDC70C4F9AE02.roa (hash: 30kBWOx1m1nSXGGOJPuoiodt0X6arWCmu2hhEcaPUOI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl
rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 22:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1682 (0x692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189BB3, serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4
Validity
Not Before: Sep 24 22:28:28 2026 GMT
Not After : Oct 1 22:28:28 2026 GMT
Subject: CN=6ab5a40c-5d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c4:92:f1:05:86:d5:5e:02:8f:e7:ba:1b:5a:
b9:78:e2:fa:b3:ef:84:c9:76:0c:5c:8c:00:df:c2:
46:88:92:c8:12:7d:88:38:f7:cf:8e:14:71:d5:32:
6a:23:c4:c1:5a:e2:d6:9a:11:b2:b8:6e:7e:93:22:
9f:a5:6d:f2:bb:47:40:75:16:be:a8:cb:b6:f4:2e:
30:ea:a0:ca:db:bd:eb:7c:42:56:c1:ab:46:e4:b0:
55:01:85:77:f7:a6:c6:d5:10:80:d8:f8:6b:ab:f3:
3b:49:dc:06:81:7e:9d:27:4b:c8:ec:71:da:4b:f2:
c7:38:7a:a5:71:d0:25:66:6b:e1:77:15:b5:10:0b:
da:f3:e7:d7:cf:68:71:d8:68:0d:16:f0:a4:f2:a0:
d6:24:a3:a7:58:62:0e:2b:6c:9e:cf:c3:bb:13:53:
de:8f:4d:09:1f:61:a8:80:54:22:e0:09:fb:f3:ae:
7f:97:95:53:32:d0:a9:dd:bc:4f:b5:cf:83:30:23:
1d:13:1d:79:88:77:52:7a:5e:35:1e:cf:05:a0:b6:
48:09:a1:15:c2:25:dc:12:38:91:17:36:2d:d1:3a:
8a:23:1c:54:55:1d:e9:66:bd:d9:4e:a3:a1:58:3e:
70:13:24:10:ba:45:19:ad:36:22:1d:5b:3a:50:be:
9e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:06:AF:65:39:F7:63:F3:FD:A1:58:6C:3E:EE:BB:9D:4F:0C:BD:44
X509v3 Authority Key Identifier:
keyid:15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0d:69:83:d1:98:bd:41:7a:90:0d:d0:86:9b:f2:94:f9:16:
00:0e:d7:c0:1b:52:c2:d4:9b:5d:89:fd:97:48:46:68:21:f6:
25:1b:55:19:c3:c7:36:ea:11:d5:31:03:d4:02:aa:b3:e6:88:
4a:24:1a:e9:f1:ff:31:19:2f:d7:95:e6:ed:5c:51:16:01:f6:
b5:d2:d9:bf:75:ad:aa:df:fe:42:95:79:d7:89:4a:c3:58:9a:
af:f4:ae:63:38:1a:c0:e7:c3:ee:46:62:cc:61:97:db:12:de:
cb:9e:8e:bd:da:66:9d:2f:9e:7b:63:30:45:e6:a5:28:02:0f:
89:7d:b8:2e:d3:35:86:57:69:b9:e6:b0:0c:17:92:0c:e0:29:
51:fc:ce:a6:bc:01:9d:1e:8a:f7:0a:2a:f3:6c:f9:dc:ef:2c:
f3:65:5f:fd:81:b8:b2:03:7f:da:df:76:09:3a:21:b1:95:7d:
80:29:35:21:6d:58:7c:65:35:08:a2:c9:72:c6:41:29:90:09:
b9:83:69:4d:c5:d9:27:52:95:59:26:75:51:45:10:00:3d:4f:
59:31:ee:21:36:b2:a8:fb:97:40:17:fd:14:30:b2:9d:ef:8b:
0f:a9:46:2b:81:3c:3a:e7:fb:b7:73:75:32:63:5e:f9:4e:33:
2d:ed:c4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:30:47 2026 by rpki-client