
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
File: CfwHfzPjrWe_FHdVFno61OrLHnw.mft (raw, json)
Hash identifier: AHmNPYwkq4scELGsXS/z3OfYE49rvIudTbhGJQeBbhY=
Subject key identifier: AB:C9:51:E3:24:23:EE:52:79:1F:9D:A1:8B:9E:34:02:3A:4B:AA:55
Authority key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Certificate issuer: /CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Certificate serial: 077D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
Manifest number: 06E5
Signing time: Fri 02 Oct 2026 22:55:19 +0000
Manifest this update: Fri 02 Oct 2026 22:55:18 +0000
Manifest next update: Fri 09 Oct 2026 22:55:18 +0000
Files and hashes: 1: CfwHfzPjrWe_FHdVFno61OrLHnw.crl (hash: UYVtF1goih3RZMHeYnRqOZVQDcXogoOG835j8tG2wh8=)
2: 32A0AE9A487111F1B156B37CA7833773.roa (hash: DKe9Z65ECDEnGziuZbJ9KLM7gjdSljl8GxgLXc635yg=)
3: 8D664A16A25C11F19D382E926011F970.roa (hash: LWyLS10UuV6wfy1JeOA6UNLZZwSP/rMl0ubgGjKS/Ww=)
4: AEEA30A444C911F0B1847067C4F9AE02.roa (hash: dH0ygpV7vVR6WPP93i2YDDYSIOB5Zm2w4tTvZ0XAWas=)
5: ACDC465C7AEF11EFA321CE80C4F9AE02.roa (hash: 68nTBOCU/1/3H8N2zjrctZPWLd9ya5LsGa6lIGjMhkc=)
6: 30904BA8329711EE8EC1E923C4F9AE02.roa (hash: 0d8bbf6HjJPorzi+T4Hyc8LZ4syqGpJzbgTNxkLreXg=)
7: 80AD3A9AE53E11EB9E429C44C4F9AE02.roa (hash: X+spXolOWWwuHY9Z83c9dy9Vthj0rRVggTg5yRTJYB0=)
8: 639394F4B05611EF95B2931BC4F9AE02.roa (hash: QT8qZMQxmuuDteCOnOSOp3NwZ0+//1IQE1zDb3G1+qs=)
9: 81618D88E53E11EB9E429C44C4F9AE02.roa (hash: 5OgF+X2LoxN0P+i647U0hTdD4GO+IWC1F/YvG+N71mY=)
10: 167A6086BBD211EEABCC0D23C4F9AE02.roa (hash: 39GHxxx7Fn5zKnCQd2JJT99uUGGd/APAhehkZtN8lrM=)
11: 7F2A4208E53E11EB9E429C44C4F9AE02.roa (hash: Xo9SbW0hHxgSfQuZO4oC/bgXuLNqUVMBniXjZSkvX0c=)
12: 8023B518E53E11EB9E429C44C4F9AE02.roa (hash: PmZWdw64LAwMI3NXzeEum/iMQ1lGbZaRPEZVFE8w0Kc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl
rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 22:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1917 (0x77d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161613, serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Validity
Not Before: Oct 2 22:55:18 2026 GMT
Not After : Oct 9 22:55:18 2026 GMT
Subject: CN=6ac03657-b3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a0:28:fa:4b:80:6c:73:c0:2d:62:a4:53:52:
9d:66:93:bb:b6:22:66:18:be:64:5a:12:1c:82:0f:
75:ae:07:15:78:d1:bf:ec:62:c4:1f:a3:9a:6d:80:
99:34:61:f7:06:bd:ad:f0:99:a7:4b:24:87:03:e6:
2f:e1:b5:39:1e:0d:ac:e0:84:9d:a2:72:70:3a:0f:
1e:6c:91:be:14:2c:ba:ba:f4:8b:55:ed:13:57:77:
e6:05:2c:4c:ba:55:f7:b1:63:f8:f8:bb:77:64:46:
a4:f4:2c:97:57:b0:d0:00:39:72:6d:4a:f9:33:af:
17:7b:d9:7b:76:f3:58:75:78:99:30:d3:10:73:81:
14:16:d0:be:f7:95:cf:8f:74:41:59:6e:ef:f0:e5:
ea:59:8f:5e:13:d8:a0:12:af:08:d8:7c:32:7f:59:
b0:07:70:9c:8d:a1:07:83:5a:61:09:32:aa:23:93:
c4:c0:8f:63:62:bf:9d:70:22:5e:5e:af:d4:21:0a:
7a:26:86:24:d1:a3:45:81:2c:7f:a3:c1:b3:3c:36:
38:1a:5f:93:45:0c:52:74:5c:4b:6c:b5:88:aa:92:
a4:a3:49:aa:09:58:ec:74:1b:ec:3b:8e:a9:50:37:
4f:5b:78:ac:73:a0:d0:4e:01:a4:aa:a4:c6:a1:eb:
d3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C9:51:E3:24:23:EE:52:79:1F:9D:A1:8B:9E:34:02:3A:4B:AA:55
X509v3 Authority Key Identifier:
keyid:09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:13:6d:02:c5:d4:66:fd:35:cc:bf:f0:71:7e:9d:0e:5e:29:
e4:e2:c2:eb:32:19:47:94:df:5a:27:79:09:2e:9d:c1:68:4d:
9f:66:54:2e:e8:48:18:24:d5:0f:59:5b:c7:46:9a:6f:0e:26:
4e:56:1b:dc:6f:e3:07:e9:65:e0:43:4a:01:95:ca:aa:0b:3f:
20:15:06:a3:2f:c4:be:16:67:24:aa:75:41:99:e0:d5:97:93:
f3:d5:64:4e:1f:fe:12:0f:c8:a6:ba:27:2e:5a:00:85:a8:f8:
65:01:52:29:71:ae:cf:c7:4e:22:0b:b4:97:b3:bb:f5:d4:2a:
d4:c9:e3:3e:ae:74:64:18:3f:de:0f:02:dc:85:12:cf:ff:75:
49:26:98:a1:20:7b:7a:f5:b1:11:f1:f0:e3:9c:c5:2e:d4:02:
2e:2f:de:b3:69:da:f3:0b:f0:a9:ca:eb:55:e1:46:ba:a2:6c:
04:12:f4:59:ee:d4:16:59:14:11:d7:16:b8:bd:fb:50:68:a0:
11:13:d0:eb:df:cf:ad:1d:d0:6d:0f:5e:be:92:8b:cb:d8:79:
8b:99:4a:ca:03:bc:45:be:4b:1f:99:d3:cb:3e:38:47:87:6d:
5f:d2:e9:4c:32:71:d5:b1:e1:bf:60:8a:38:1c:b3:74:7e:d4:
6d:3b:0c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:08:12 2026 by rpki-client