
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
File: F8IFAD4uuR49xG6qyJD20LUN5uI.mft (raw, json)
Hash identifier: cCT/mPyA4IpXpae9CoexyJPgV4znEH29tnQcuqSLypY=
Subject key identifier: 9A:7B:3F:91:89:C7:E8:58:D1:6D:1A:76:4D:CB:6C:87:95:ED:D2:70
Authority key identifier: 17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2
Certificate issuer: /CN=A9146AD7/serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
Certificate serial: BD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
Manifest number: B7
Signing time: Tue 28 Jul 2026 16:28:57 +0000
Manifest this update: Tue 28 Jul 2026 16:28:57 +0000
Manifest next update: Tue 04 Aug 2026 16:28:57 +0000
Files and hashes: 1: F8IFAD4uuR49xG6qyJD20LUN5uI.crl (hash: 9fcUhMCHoGiX/5Z6wdZt1+rPBdkL67TjHPpkUOcj1hA=)
2: 6FA6ED7E82C711F0AD86D64DC4F9AE02.roa (hash: HxueVyeG48TlpzJ0pvXXuxMket+vhTgEYarRY925CZ0=)
3: 404053A882BE11F0ADD6D367C4F9AE02.roa (hash: Rt1fqxpDUHKbQnEZeGSolrH7j72JJeAt6X3959FalwY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl
rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146AD7, serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
Validity
Not Before: Jul 28 16:28:57 2026 GMT
Not After : Aug 4 16:28:57 2026 GMT
Subject: CN=6a68d8c9-601e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:38:0d:77:84:c1:d3:28:3c:f0:8f:ba:d1:
1a:9d:6e:cb:ea:e4:de:d2:8c:45:ab:2a:24:9c:9c:
01:48:34:f3:51:6a:62:45:aa:5a:6f:ad:0c:7b:dc:
52:d2:cb:58:2c:88:ab:cf:07:aa:5f:92:00:43:cc:
27:6c:9b:d6:cd:64:ab:72:5e:f5:04:e5:10:d4:48:
e6:ca:88:83:c5:63:5d:10:1a:4a:98:cd:11:2f:8f:
46:79:73:86:c2:96:c3:aa:21:95:c6:69:13:a4:83:
e2:8b:a0:e5:a3:85:e3:2c:6a:30:41:30:63:b8:32:
d9:0e:7f:4f:f2:c6:2a:eb:fc:e6:06:09:05:5b:41:
c7:09:3b:42:ca:f4:9a:f9:a5:5b:48:27:61:1c:d9:
25:d6:b0:dd:d8:f5:2d:e7:79:1c:6f:2e:3a:36:36:
67:1e:04:9e:95:bc:6b:bc:16:39:d8:2e:a1:6b:8e:
94:ec:a4:7d:ac:43:f9:f8:a1:32:c3:a3:5c:ee:39:
f6:ee:f4:89:38:14:e2:23:d2:f3:fc:56:9d:58:ae:
27:45:8f:52:f7:1a:53:35:5d:86:cf:38:66:fd:f5:
81:30:c4:ad:e1:e1:5c:3b:4e:df:1d:80:61:9d:b4:
df:d3:05:8b:52:df:f3:6d:20:de:a0:4d:71:35:5b:
68:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7B:3F:91:89:C7:E8:58:D1:6D:1A:76:4D:CB:6C:87:95:ED:D2:70
X509v3 Authority Key Identifier:
keyid:17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:03:72:04:76:58:78:9b:b4:d1:e1:38:3f:02:97:98:33:ef:
9c:07:c0:b0:e1:02:73:b6:13:1f:6e:be:7b:f1:21:95:7c:c1:
80:34:51:48:fc:d6:dd:58:7f:52:72:c5:b9:81:e0:b4:24:bd:
50:75:55:8f:99:68:7a:b7:b9:73:9b:ef:9b:d3:3d:e2:20:ad:
c0:5d:12:46:66:26:b7:38:24:29:d6:97:de:30:6f:c6:11:bb:
e7:a1:55:e7:d1:28:42:7a:e8:bc:03:f1:84:76:71:a8:26:6b:
3d:48:09:f8:e3:d4:9e:f1:12:e6:33:aa:61:c6:c0:b5:26:b2:
5f:8d:5e:bc:b6:0e:a1:ff:0c:4a:cb:30:2d:9f:7f:a7:48:4a:
95:28:07:93:d3:70:b1:c5:7a:0d:13:a8:02:8c:c1:b9:39:af:
6c:67:80:ed:35:53:b7:f5:3c:d6:69:d2:c0:40:09:84:9b:55:
7d:f2:10:33:8d:38:3b:9f:27:bc:09:be:f9:95:0f:58:75:4b:
6d:29:b2:f7:78:ca:6a:91:1f:3a:3f:26:73:24:db:06:a8:6f:
ce:b5:16:15:30:46:4a:ad:eb:d0:ac:20:ba:53:ab:7b:99:5d:
c1:8b:c5:56:30:14:00:b9:9d:d9:1d:33:4e:76:d2:3b:2d:1f:
14:b1:7f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:12 2026 by rpki-client