
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
File: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft (raw, json)
Hash identifier: Ip873NQXdDCG5X7JdhXR5cnT7ahEVSscfTbJEvdnGR8=
Subject key identifier: 1D:57:2D:21:9A:FE:C8:BB:95:DE:28:56:5B:70:7E:B7:DA:92:E4:C6
Authority key identifier: 16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09
Certificate issuer: /CN=A9158F08/serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09
Certificate serial: 0D13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
Manifest number: 170C
Signing time: Sun 26 Jul 2026 18:33:41 +0000
Manifest this update: Sun 26 Jul 2026 18:33:41 +0000
Manifest next update: Sun 02 Aug 2026 18:33:41 +0000
Files and hashes: 1: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl (hash: ZleHg63mHp9zBaLd20zOpGlHLvAU4ETqfbIVc0FvMxo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl
rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 18:33:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3347 (0xd13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158F08, serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09
Validity
Not Before: Jul 26 18:33:41 2026 GMT
Not After : Aug 2 18:33:41 2026 GMT
Subject: CN=6a665305-9cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:30:2e:d2:cd:fd:37:b7:bd:c2:dd:7a:b3:
a1:fa:0a:77:15:7b:db:87:57:95:99:99:c4:a7:60:
dd:26:c8:f7:9f:5d:4a:2a:a1:0a:c8:14:b7:da:da:
37:a0:77:c5:6c:5d:79:61:52:d4:b1:40:36:77:99:
32:44:71:3e:e0:0d:f3:39:1f:88:dd:2b:bd:4e:fd:
56:5e:39:ee:ad:da:05:ab:ca:64:4e:2a:dc:5b:7d:
e0:b9:62:10:1e:e5:4c:ce:a6:50:1e:56:e9:4c:86:
2e:33:30:57:32:40:ec:6f:79:4e:ad:ae:b7:78:df:
2e:c1:cd:2d:57:16:47:ce:21:5b:90:30:20:44:65:
9e:c2:61:c4:b6:2e:9c:a7:eb:25:7d:d4:e8:dd:ee:
02:ed:67:d4:a2:41:b9:98:e1:9d:8f:d6:c3:c8:e9:
08:46:d3:47:42:27:e3:ad:7f:5c:7d:59:52:2b:84:
c6:63:61:c2:89:7e:90:0d:01:e7:af:e2:d6:0f:7c:
a3:02:8b:8e:9b:47:30:48:06:06:17:d6:6b:af:3b:
95:5e:10:e8:ba:bf:62:96:8a:20:ec:95:00:ee:65:
a5:42:af:39:5d:57:94:d0:40:09:b7:1a:8d:d4:3a:
70:46:9b:0f:55:57:ec:99:1c:00:49:89:0b:34:de:
07:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:57:2D:21:9A:FE:C8:BB:95:DE:28:56:5B:70:7E:B7:DA:92:E4:C6
X509v3 Authority Key Identifier:
keyid:16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:66:d1:ea:ca:3f:73:4d:30:c8:1e:01:55:b6:69:a5:a1:99:
0e:a0:87:1a:8c:29:e0:10:ce:a6:5f:76:6b:a8:8f:e7:09:87:
0e:ec:39:5a:d8:b2:f6:a3:bf:44:76:91:ee:e0:60:09:7b:8d:
b2:98:88:7f:1e:8a:b2:15:22:c0:6e:bc:0f:a7:ea:02:89:51:
29:3f:b9:4a:0b:8c:cc:be:e3:31:dd:d9:3a:c5:20:60:2d:1f:
cd:89:27:df:81:1f:bb:d4:a6:0f:c1:60:7b:6c:8a:55:4d:ed:
4d:41:c1:61:ff:d9:79:4a:44:55:a9:3f:72:f1:03:77:13:f8:
6e:7c:d5:5a:a7:3d:b0:d0:1d:ea:de:5a:59:80:b3:8b:96:b4:
2f:28:3d:fa:8c:52:e2:74:c6:23:95:bc:40:2e:39:a5:9a:90:
f1:2b:1d:f7:53:e7:7e:51:4c:b5:fe:9c:11:2a:8f:e9:41:94:
63:4d:5c:3a:d6:99:66:03:d7:36:9f:da:34:12:d0:36:a0:89:
94:8e:c4:a2:1b:40:f8:73:d0:21:7a:d6:9e:9f:af:65:e4:eb:
72:72:ae:13:1d:c6:9f:06:65:f7:97:17:f3:28:5e:8a:d9:ac:
2a:44:ab:74:4b:9f:3b:d8:2d:56:24:01:f2:fb:02:a8:50:d3:
03:47:78:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:25:36 2026 by rpki-client