
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
File: FSDys0q93K6U-pIu9HV802FA8lQ.mft (raw, json)
Hash identifier: 8EvXQw3H9vR/qFcCAcFX+aKG5QCm7LJdRJ8AvhbGHBw=
Subject key identifier: 20:3A:D5:CE:B3:58:84:4E:29:F7:BB:62:92:A5:FF:21:E5:16:06:7F
Authority key identifier: 15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54
Certificate issuer: /CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254
Certificate serial: 0812
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
Manifest number: 0800
Signing time: Sun 20 Sep 2026 21:11:22 +0000
Manifest this update: Sun 20 Sep 2026 21:11:22 +0000
Manifest next update: Sun 27 Sep 2026 21:11:22 +0000
Files and hashes: 1: FSDys0q93K6U-pIu9HV802FA8lQ.crl (hash: 8bto4j34MtALs0bmTvj31Gv2MiyhldlQWe0D4hoi02w=)
2: D99D60F67D4D11F1A3C50AF076A30FBC.roa (hash: lS9pDcsYoMEnDdngCy8rUbtA4EF+p1a4rmGseP52Ins=)
3: A6864ACE7BA911EDB41A851EC4F9AE02.roa (hash: +mWQDhR0SQRE9fYy6utyEy97LqtAqWWlca4RF6I7GEw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl
rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 21:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2066 (0x812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143FE9, serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254
Validity
Not Before: Sep 20 21:11:22 2026 GMT
Not After : Sep 27 21:11:22 2026 GMT
Subject: CN=6ab04bfa-2a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:6c:ae:2e:37:90:83:8e:0e:94:92:5b:f4:
97:2f:81:96:17:66:4e:81:43:67:6a:cb:5e:b7:c3:
ba:7b:ee:b7:2d:a1:35:83:fa:16:73:1b:3c:da:9e:
c2:dc:99:ff:42:3a:6a:54:42:70:bd:38:4e:9d:ae:
5f:04:08:3c:b6:39:d6:3c:84:e8:ed:13:57:c5:c5:
7c:bc:33:c7:96:60:96:dd:91:3a:bf:42:39:8a:0e:
29:cd:a3:79:c6:78:87:d0:3a:04:5d:26:2f:8b:fa:
89:0d:81:c0:ba:63:f6:fc:f6:56:47:96:e3:f6:d9:
99:44:25:34:18:7a:bf:c1:c2:96:a0:d8:38:54:cd:
b9:6e:1b:6f:a5:47:6b:ea:69:b6:63:da:91:95:5e:
99:03:2f:83:21:7b:8c:f1:c0:3b:f7:f4:a4:1f:da:
aa:d8:e9:1c:2f:24:09:33:ac:32:1b:39:7a:20:c3:
f9:7b:10:0f:10:c9:cc:01:0a:b2:cf:0d:c4:e5:fe:
95:7f:06:4d:c1:d2:86:25:52:8f:6f:ff:3d:d6:7a:
2e:e9:de:ad:16:6c:df:16:b3:b9:d9:5c:96:00:d3:
40:3c:01:33:2e:11:6e:ac:47:3f:aa:8e:86:43:0c:
59:4d:11:aa:17:3f:a8:87:ae:04:5a:e5:30:7c:d9:
22:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3A:D5:CE:B3:58:84:4E:29:F7:BB:62:92:A5:FF:21:E5:16:06:7F
X509v3 Authority Key Identifier:
keyid:15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b3:c7:22:b1:f6:13:0d:05:da:bc:bf:54:f3:c3:6d:4d:97:
01:ff:eb:a8:70:1f:8b:a0:49:2c:71:27:cc:d3:6b:c7:b5:fe:
73:c6:52:bd:64:d0:d6:61:3f:d4:5c:be:8f:1b:8c:5c:e1:4b:
ca:fb:f8:8c:2f:12:7f:28:d4:ab:92:09:ae:59:c2:d2:23:11:
5a:da:ed:f0:f4:01:81:88:7c:29:07:bb:14:2f:e7:82:79:54:
7a:22:d5:67:ad:7a:8a:89:80:46:8b:a2:92:95:27:e5:5b:9c:
8e:37:b2:79:1d:5a:de:03:8a:e0:2e:52:d8:7a:c7:c2:98:32:
8d:07:b5:26:6e:ac:5e:b8:63:a4:41:9e:c7:07:d3:52:47:ab:
7e:f0:f2:bc:65:e8:37:7e:d9:9e:79:b8:05:8f:c3:0b:b5:31:
97:6e:65:83:73:05:58:98:f2:6c:ad:84:89:da:34:6c:ea:96:
16:5e:01:3e:2e:c1:c1:96:55:ff:0b:1a:cd:36:ee:ef:02:2e:
0d:6d:a2:6c:54:c7:6f:c0:25:9e:f9:58:a9:75:40:65:57:3d:
97:83:f2:71:99:36:3f:e8:64:1b:a9:9a:30:c6:89:7a:0c:60:
de:96:17:fa:57:ad:64:c5:c1:24:3c:42:b4:e5:6c:9e:8c:8c:
da:3b:2a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:09:44 2026 by rpki-client