
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
File: FN2GhClPGzOjE6-48OuhyKADeAk.mft (raw, json)
Hash identifier: 7RSvW1nUJ3JjnW+ob/wOBpalckIpgV28MHQpaHmnQ/g=
Subject key identifier: 49:A8:F1:FA:1B:BF:AB:EC:29:E4:AD:10:87:E7:B2:4D:C2:E4:02:BE
Authority key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
Certificate issuer: /CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
Certificate serial: 0171
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
Manifest number: 015E
Signing time: Mon 27 Jul 2026 06:58:22 +0000
Manifest this update: Mon 27 Jul 2026 06:58:21 +0000
Manifest next update: Mon 03 Aug 2026 06:58:21 +0000
Files and hashes: 1: FN2GhClPGzOjE6-48OuhyKADeAk.crl (hash: ht1x+KErFGAPZ4lm3nQEwKLWUreAU6P35i0QPMn0N5k=)
2: F7981812F38811EFAC05053AC4F9AE02.roa (hash: EK3pUqrH9H4fquoX1peOlD1L2xEfn/Ee2ouiE9JS3Uk=)
3: E9B0903AF38811EF81B8CE39C4F9AE02.roa (hash: SSKa739rT23rOpIYYisZx12/v/K7+nclE63wWrbXXlU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl
rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:58:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160A05, serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
Validity
Not Before: Jul 27 06:58:21 2026 GMT
Not After : Aug 3 06:58:21 2026 GMT
Subject: CN=6a67018e-a60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:78:23:96:b7:28:97:09:d3:62:1d:ca:c7:f5:
ce:32:a7:c9:82:05:f4:e7:da:8a:c2:ba:40:f0:3b:
f9:4a:19:58:94:e7:29:82:c6:94:28:a6:f6:cd:5a:
52:fd:84:fb:83:95:7a:32:0b:4b:b7:6a:c4:2f:e8:
55:ef:92:39:07:9b:da:ce:c8:44:de:d2:f6:cb:5f:
b2:98:bb:c5:20:9e:39:b3:42:a2:03:c2:6f:e6:b5:
11:38:a3:bf:60:f1:92:ed:ed:39:ec:cf:09:ef:c2:
77:03:d5:6e:03:3a:20:bb:08:35:eb:e6:1a:f4:27:
1b:75:b3:b9:e6:2e:d3:d4:40:a9:07:70:d8:cf:cd:
f0:5c:65:3d:7d:f0:a8:01:e6:73:a1:59:3e:47:fb:
9c:32:6b:6a:fd:49:86:8e:6c:b9:89:30:d0:a3:d5:
75:4e:d1:3c:56:c1:7d:6c:97:8e:78:79:8e:e3:98:
f1:23:35:2b:e5:5f:26:b2:13:3b:08:bd:32:1b:57:
87:c1:f1:9a:b6:44:5e:d0:0c:09:99:6e:73:64:5e:
14:88:61:ef:46:83:c1:ed:20:19:bb:dc:74:63:8d:
8e:fb:8e:f2:2e:12:8b:36:ca:3b:43:13:01:01:98:
eb:b4:4b:00:8a:71:72:f6:71:f5:61:f6:09:18:62:
65:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A8:F1:FA:1B:BF:AB:EC:29:E4:AD:10:87:E7:B2:4D:C2:E4:02:BE
X509v3 Authority Key Identifier:
keyid:14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ea:c1:27:1a:4a:b3:95:6b:04:da:b3:97:64:6c:72:da:46:
b7:2c:c9:8c:38:57:ef:1e:3a:d1:f1:f3:ec:f9:68:7a:5b:70:
06:3b:8d:a1:7a:08:75:ed:50:71:23:d2:6b:3f:0a:0f:bf:3f:
ab:91:1f:1e:8c:ed:57:cf:ba:aa:36:06:01:cd:bf:a2:3b:a6:
17:5a:76:16:1a:fa:b9:d0:f8:8d:39:4f:20:38:a6:2d:8c:28:
86:b0:03:84:76:07:00:60:b0:08:ca:b5:db:3f:a3:17:fa:b0:
f3:84:36:ab:63:ef:96:aa:2b:b4:3d:5e:81:79:42:d6:c3:57:
a1:60:18:0c:f4:49:ab:03:4c:3d:33:37:1c:27:ba:d3:49:f7:
20:1e:31:ce:3a:21:e1:3f:bc:db:ae:bd:59:eb:03:c1:b0:21:
ec:4b:11:b9:7e:00:b6:89:23:70:20:8a:e6:82:cb:0f:fb:c6:
95:1d:09:85:3b:08:16:af:1b:f4:1e:85:b3:27:b4:19:da:cc:
1c:e0:58:a1:c9:b2:83:ea:f3:84:df:08:f4:1b:d1:ae:24:ad:
02:76:68:4e:dc:d4:08:5a:65:74:a3:09:ad:5e:14:f7:f8:bd:
56:b5:e9:1d:cd:04:7d:db:f5:75:e1:95:f0:b2:10:65:e8:b5:
a7:14:55:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBBMDUxMTAvBgNVBAUTKDE0REQ4Njg0Mjk0RjFCMzNBMzEzQUZCOEYwRUJBMUM4
QTAwMzc4MDkwHhcNMjYwNzI3MDY1ODIxWhcNMjYwODAzMDY1ODIxWjAYMRYwFAYD
VQQDEw02YTY3MDE4ZS1hNjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA33gjlrcolwnTYh3Kx/XOMqfJggX059qKwrpA8Dv5ShlYlOcpgsaUKKb2zVpS
/YT7g5V6MgtLt2rEL+hV75I5B5vazshE3tL2y1+ymLvFIJ45s0KiA8Jv5rUROKO/
YPGS7e057M8J78J3A9VuAzoguwg16+Ya9CcbdbO55i7T1ECpB3DYz83wXGU9ffCo
AeZzoVk+R/ucMmtq/UmGjmy5iTDQo9V1TtE8VsF9bJeOeHmO45jxIzUr5V8mshM7
CL0yG1eHwfGatkRe0AwJmW5zZF4UiGHvRoPB7SAZu9x0Y42O+47yLhKLNso7QxMB
AZjrtEsAinFy9nH1YfYJGGJlZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEmo8fob
v6vsKeStEIfnsk3C5AK+MB8GA1UdIwQYMBaAFBTdhoQpTxszoxOvuPDrocigA3gJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEEwNS9EMTdDODg2ODdD
OEExMUVGOEZBQjY5MDlDNEY5QUUwMi9GTjJHaENsUEd6T2pFNi00OE91aHlLQURl
QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0ZOMkdoQ2xQR3pPakU2LTQ4T3VoeUtBRGVBay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MEEwNS9EMTdDODg2ODdDOEExMUVGOEZBQjY5MDlDNEY5QUUwMi9GTjJHaENsUEd6
T2pFNi00OE91aHlLQURlQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj+rBJxpKs5VrBNqzl2RsctpGtyzJjDhX7x460fHz7PloeltwBjuNoXoIde1Q
cSPSaz8KD78/q5EfHoztV8+6qjYGAc2/ojumF1p2Fhr6udD4jTlPIDimLYwohrAD
hHYHAGCwCMq12z+jF/qw84Q2q2PvlqortD1egXlC1sNXoWAYDPRJqwNMPTM3HCe6
00n3IB4xzjoh4T+82669WesDwbAh7EsRuX4AtokjcCCK5oLLD/vGlR0JhTsIFq8b
9B6Fsye0GdrMHOBYocmyg+rzhN8I9BvRriStAnZoTtzUCFpldKMJrV4U9/i9VrXp
Hc0Efdv1deGV8LIQZei1pxRV4w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:10:49 2026 by rpki-client