
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
File: F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft (raw, json)
Hash identifier: TDzJv0Vg1CZP3xCR1qTXAgaSv0ZlD+SE6p8tmBJOlGs=
Subject key identifier: 48:14:A2:BF:6A:E5:FB:92:F3:88:C4:B1:AB:5A:3E:A2:D1:EB:3E:35
Authority key identifier: 17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D
Certificate issuer: /CN=A91ED17F/serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
Certificate serial: 08E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
Manifest number: 08C8
Signing time: Thu 24 Sep 2026 20:28:34 +0000
Manifest this update: Thu 24 Sep 2026 20:28:33 +0000
Manifest next update: Thu 01 Oct 2026 20:28:33 +0000
Files and hashes: 1: F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl (hash: PfCSOgoUO8bINuiftJJJeqrGU6rA/TqI63I55M9PHJk=)
2: 70F65056CDB911F0BDBD9948C4F9AE02.roa (hash: wNuU/McNsjQV/yhZ8jRCImvFBfIORO5QAEDpyd/LbRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl
rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2278 (0x8e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED17F, serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
Validity
Not Before: Sep 24 20:28:33 2026 GMT
Not After : Oct 1 20:28:33 2026 GMT
Subject: CN=6ab587f1-f58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:9e:f8:59:a7:73:af:24:ec:56:80:08:f1:
ab:be:d0:76:85:f0:11:7b:de:82:ac:d4:21:4b:3d:
ab:43:56:c9:b3:2b:43:f0:e9:6b:d1:87:ef:df:3a:
b7:bf:44:28:89:89:60:ee:79:2a:d4:fd:a4:75:fa:
38:06:ad:eb:ec:27:15:74:75:9c:63:ab:44:6c:8d:
cd:3a:95:36:ed:3f:b4:26:6d:65:b2:e1:3d:0d:15:
96:29:b0:5b:e6:59:04:3f:37:61:ae:e4:3b:41:aa:
42:23:4b:5e:1b:47:f7:b5:c2:20:a2:a7:49:6d:21:
90:70:55:66:05:6a:f2:e1:0d:70:0e:29:09:48:e6:
da:85:6d:63:a9:6b:dc:d1:92:75:c9:b3:33:1b:69:
ec:2a:01:05:89:cc:6f:56:5d:2a:c1:f1:5d:d5:98:
7c:06:77:29:f6:e0:42:d2:51:e3:39:db:c5:18:53:
59:99:41:8d:ab:b9:f2:2b:84:fd:ff:39:4b:44:b4:
13:9a:5a:e2:2e:c2:81:20:bf:6d:35:3e:03:f2:94:
f0:ce:f8:2a:ea:6e:9a:03:09:11:c8:29:97:38:a1:
23:53:91:2d:3c:49:e3:98:43:1e:da:34:90:1e:de:
04:19:b9:2c:ef:ba:13:dd:9f:1c:3c:22:13:41:9d:
af:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:14:A2:BF:6A:E5:FB:92:F3:88:C4:B1:AB:5A:3E:A2:D1:EB:3E:35
X509v3 Authority Key Identifier:
keyid:17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:9e:ea:6a:92:c7:f1:e3:ca:0d:e4:8f:37:39:2f:7d:e0:c5:
d5:aa:ea:d4:33:f0:43:7c:b3:f0:8f:27:87:9b:25:13:a0:27:
02:ca:19:f4:0c:b0:e7:35:80:a9:0b:fc:c5:bd:51:42:f8:e6:
e9:16:a9:dd:95:5f:d3:6b:7e:f0:61:dd:66:41:8a:00:71:39:
51:d5:62:a5:f8:b2:47:af:63:f0:c4:4c:82:93:a5:c5:36:8e:
87:95:eb:4a:1e:4e:ad:da:69:3c:3e:6a:6e:63:55:fa:77:55:
b4:3d:2f:32:5b:2c:0f:48:d8:bb:46:66:93:dc:fa:68:ff:1c:
13:74:8d:25:db:7e:7b:e6:95:bd:0b:13:c6:45:64:17:d9:28:
46:bb:f1:6c:52:e4:de:26:da:2b:3f:1c:68:47:f7:5c:eb:4c:
43:77:17:ba:68:28:33:2f:06:d0:09:26:6f:7a:42:61:d0:49:
22:55:fc:e1:3c:63:15:b8:91:dc:c6:cc:a9:43:1c:87:86:e3:
0d:19:42:57:5f:8c:d4:30:d3:47:f0:52:76:66:a6:03:a0:fe:
9b:9f:78:96:12:b9:c9:f1:e2:bc:62:e0:74:fa:8e:3a:8d:be:
66:f8:b9:ea:d4:59:0e:08:cd:97:6c:26:f7:fb:c6:91:31:7a:
f5:0e:05:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:37:29 2026 by rpki-client