
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
File: F9X-Mj6_2ajTROd7c3majnViQ1I.mft (raw, json)
Hash identifier: M3jkuEx+OoeaaCnz+OxL72eL7nhEPABJMZk5lIdimjU=
Subject key identifier: 04:55:41:A9:97:26:BF:47:C9:2A:9F:19:20:78:69:49:0F:08:7C:6B
Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
Certificate serial: 033C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
Manifest number: 0312
Signing time: Thu 23 Jul 2026 02:11:24 +0000
Manifest this update: Thu 23 Jul 2026 02:11:23 +0000
Manifest next update: Thu 30 Jul 2026 02:11:23 +0000
Files and hashes: 1: F9X-Mj6_2ajTROd7c3majnViQ1I.crl (hash: 4eHtqyYzrpocrUvEpT8gWOvxa9dcxSTM8LeqdMDs/OE=)
2: 4BBA96965CD511EE9A078180C4F9AE02.roa (hash: WW5v8VEKPHY5cRU6NklWON7UCKUk27Vdm5aFanhH4uA=)
3: 50AF1E205CD411EEBADBCF7DC4F9AE02.roa (hash: e3yNZFVgkQCVhCm/QmSqoyQKXUJmq53Q3jA7sKU7YTQ=)
4: BEE96BA212A811F1A54B75AE3D3D8C67.roa (hash: /SEWCKuQ68wowgWrkDXt8HCOPB77auVAxoefhm+aSXY=)
5: F6CCABBA580311F18246AAE39B833773.roa (hash: Sy10tfcnlP/icaTyyPCajx/jJSM+JdeLmpgnQckiwew=)
6: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (hash: 02sqYdbDRE0+Eg/3piDn9CDT+5Zx0sH2Kq685uMN8gM=)
7: 1030CBF02BE911F1BE5DE9B7C4833773.roa (hash: EpKA0Qcr8+YCVzQw+n1+P9eI1+6tzWoY6uRcXseyDfg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl
rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 828 (0x33c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
Validity
Not Before: Jul 23 02:11:23 2026 GMT
Not After : Jul 30 02:11:23 2026 GMT
Subject: CN=6a61784b-607e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:14:03:c0:22:e5:7d:32:a3:ba:99:9a:45:
f6:c2:79:3e:5d:a5:ef:e9:0a:6b:cc:65:a3:11:13:
21:50:af:c1:62:08:74:47:c5:c0:66:c0:87:6b:db:
c5:29:c0:98:ea:d6:1c:67:2a:75:59:d8:f1:44:a6:
73:ad:2c:64:81:7d:80:9d:0a:a0:42:69:e4:02:5b:
03:ac:fd:f9:56:b8:dd:e4:26:de:9d:a1:e0:bd:49:
b0:8f:89:e5:56:b4:f2:8b:76:43:5f:ae:99:e3:1c:
68:04:fb:77:ec:89:b7:21:2b:e2:4e:3e:91:1c:6a:
18:ba:69:ed:2a:62:fa:b4:3d:96:19:8f:8a:2e:8e:
c5:b0:d7:7f:c8:58:05:35:da:f0:f5:e6:18:3c:90:
da:4e:23:9d:08:ed:73:8e:f0:b5:db:cd:66:fd:dd:
78:5f:d7:77:d0:a7:bf:df:79:87:88:4a:95:2d:14:
40:1c:48:a5:60:75:e9:e7:b6:3b:2e:6d:76:24:ac:
48:58:cb:0a:a7:b1:1a:91:33:88:66:91:bd:f7:d0:
fc:82:81:1e:24:e5:86:d3:30:6d:cc:6c:96:aa:41:
fc:35:10:2a:bf:34:26:c2:c4:37:b1:37:4e:7e:36:
95:de:51:e8:e5:c4:a8:46:1b:96:74:80:b1:22:24:
86:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:55:41:A9:97:26:BF:47:C9:2A:9F:19:20:78:69:49:0F:08:7C:6B
X509v3 Authority Key Identifier:
keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ff:9f:a1:48:0e:95:ba:84:36:0e:11:8e:96:fc:9d:6e:56:
20:e3:9d:da:20:ec:6c:c5:48:c3:17:c5:47:39:bc:a0:c3:a8:
9d:a5:71:a4:15:17:9a:78:0f:10:69:3a:41:38:c8:67:ee:bb:
e5:43:51:87:41:1c:30:0a:07:77:b7:23:2b:30:b9:94:16:49:
15:99:65:aa:94:5a:6b:f0:fe:41:75:7e:ed:b8:aa:be:0c:d4:
27:27:00:bd:63:86:f0:ef:89:93:a3:4b:df:7c:af:86:8a:da:
79:ea:85:72:83:82:0d:44:35:18:04:2d:18:aa:fe:da:1b:7f:
cb:c8:71:f5:5e:27:2e:3e:3c:e9:4b:e5:0b:9c:13:85:6b:67:
85:3e:ea:f0:66:68:06:e9:db:64:ae:05:2c:98:2e:9a:38:7b:
21:8b:03:6e:4e:dc:48:b0:70:d9:b0:f6:a9:14:3f:48:86:69:
f4:ed:68:44:af:dd:c2:98:f2:79:fc:6a:59:ab:35:03:8d:c9:
63:7a:b8:8b:2f:5b:3b:e0:a4:3b:a1:c3:c0:0b:a4:41:44:6c:
6b:59:00:06:8a:f3:2c:ec:2d:cd:6f:ad:99:4a:52:0b:88:af:
34:35:77:86:e1:3b:c1:c8:76:68:74:c0:ce:42:7e:d4:c4:c5:
32:9f:85:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:55:33 2026 by rpki-client