
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
File: fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json)
Hash identifier: JPr1BT+47OmzY2wULgS9a2/B1Xu9vu08FqhDKthxKcY=
Subject key identifier: 0E:3F:89:9A:79:23:6D:62:7D:BA:97:3C:E1:64:1C:AA:06:8A:85:50
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial: 0D36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
Manifest number: 0C64
Signing time: Sun 20 Sep 2026 19:02:03 +0000
Manifest this update: Sun 20 Sep 2026 19:02:02 +0000
Manifest next update: Sun 27 Sep 2026 19:02:02 +0000
Files and hashes: 1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: I4Op42C5TZE7uQaQJgwHAyFn+YhwAucWOi/iTN5C308=)
2: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: +gaavVRD8B7wEFk6T+tpdPtOFmRhdaX1JhEF5NzSaRM=)
3: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: smGOjMVd2GLPpurMltuKcuhuCGMyzOm3zhphTWE/Ctg=)
4: E8819018178811EC876F5F50C4F9AE02.roa (hash: k8RYTUE2R9W0lvCqWeEJGJcaj3xzsyGqjLk5FFAGEEQ=)
5: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: fT0MQOczypsjHgqIISFNboLyF3R81xE+5ng5wnC/P64=)
6: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: UYiuYdXTVxBppiNsiI1q/movnzWH6/WJ+GXsUOQpZSc=)
7: C3290D00636F11F0A1C6DA70C4F9AE02.roa (hash: ISA0Y1MNiIaptJ9tTpLl0/OiQqSxEl/CZifftUJCmso=)
8: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: dlzlZoMUm2Cx9g19yLq+yFp31WbZhzVlN+kG3FUpBBA=)
9: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: QMsC3xiGNdSJW4HzT3eK1fAgUWFpi8CgaYI1dOuhzws=)
10: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: w14t0ZgvkmqPBwmiw//aiLUsh21WVJ/1hlAo42T5Txs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 19:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3382 (0xd36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Validity
Not Before: Sep 20 19:02:02 2026 GMT
Not After : Sep 27 19:02:02 2026 GMT
Subject: CN=6ab02dab-c3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2c:3f:ab:ed:1b:76:f7:15:c3:58:76:79:1f:
b9:df:be:8c:b8:20:41:68:ae:62:68:8a:94:f0:44:
f1:69:f3:65:c2:82:77:3f:ad:b5:8f:70:0d:11:26:
7e:8c:6b:c2:3c:64:a0:45:e0:fb:b5:dd:73:0c:73:
98:c7:69:5a:22:17:48:10:0a:d2:2b:ee:04:04:4d:
13:8f:1b:7c:10:b8:84:f9:e2:87:a3:57:f6:77:85:
b4:52:2f:f1:ca:c6:85:87:56:2e:04:bc:9c:03:32:
94:16:fe:dc:30:3d:54:40:8e:eb:a5:16:75:11:1b:
6d:66:2a:1f:15:6d:af:83:ea:a5:1b:6d:81:01:99:
3f:5d:9b:88:61:a9:c2:65:e3:56:fd:04:e2:6e:aa:
09:cd:29:a2:1d:a2:04:a1:43:cb:64:a2:72:e0:fa:
dc:38:9d:d3:9b:e4:b4:0b:b1:02:d8:ff:eb:ec:c4:
df:5d:f0:58:0a:8e:2a:54:78:c8:0a:03:ec:60:4f:
b3:d8:df:db:53:90:a9:93:7d:94:86:8d:5b:23:f4:
9b:aa:5a:a8:ef:1b:db:2c:cf:72:6c:75:15:6c:7d:
ed:f2:25:9e:62:96:c0:e8:97:ed:65:2b:0f:f1:1b:
69:83:bd:3a:34:d6:65:35:9d:2a:bd:a2:00:b5:8c:
46:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3F:89:9A:79:23:6D:62:7D:BA:97:3C:E1:64:1C:AA:06:8A:85:50
X509v3 Authority Key Identifier:
keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:05:8d:2c:d4:6a:e8:f5:c4:3a:a4:19:39:3b:cf:7a:b0:cb:
aa:dd:2d:6f:2d:70:67:28:2b:49:7c:ce:e3:97:cf:37:0c:7a:
1a:6a:dd:c1:e7:9b:53:a6:7b:d5:fa:bc:6a:39:ff:d4:e9:2d:
99:ec:cf:2a:6f:ff:4f:eb:d8:1d:6e:be:d1:c4:5c:f0:38:e1:
df:4d:ed:83:b7:d9:7e:96:9d:c6:00:b4:c5:68:83:7d:f1:db:
d4:9c:9c:72:75:f1:10:f1:5d:5c:5f:75:b9:61:0c:24:07:9d:
48:56:52:ae:69:8e:c8:c0:51:fd:b9:fb:2a:3c:32:39:c8:72:
6c:89:6a:87:c4:20:8f:e3:6a:e8:cf:ec:ee:90:aa:c6:36:51:
3b:43:99:cb:ca:e8:52:58:f5:22:c8:70:e4:8d:56:a0:9e:55:
88:87:9d:1b:5d:91:88:af:87:0e:e2:fc:96:27:e9:bc:64:d8:
3a:c8:6c:5d:1d:12:0c:6b:43:eb:58:8f:a1:c3:58:cf:04:63:
33:08:f6:a7:57:b6:cb:78:f1:13:40:cc:b6:45:aa:d7:20:e1:
66:ef:3f:e6:21:82:f5:4c:a3:54:e0:cd:0b:ac:26:bf:bb:da:
26:ee:b7:0a:d2:7c:8c:43:04:13:71:86:3b:1a:0b:bf:f4:db:
b0:60:12:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:38:38 2026 by rpki-client