
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
File: f99iGPoBXQoAdKhEJFGAaij53fU.mft (raw, json)
Hash identifier: KmABpqKBPzHLOKuZO/ts4qDL06VoYl+FIzueitkoDAY=
Subject key identifier: 0D:14:C5:C6:91:68:98:80:7E:E1:69:55:60:B7:47:4E:76:AB:5D:97
Authority key identifier: 7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5
Certificate issuer: /CN=A9173060/serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5
Certificate serial: 08AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
Manifest number: 08A2
Signing time: Sun 20 Sep 2026 20:33:51 +0000
Manifest this update: Sun 20 Sep 2026 20:33:51 +0000
Manifest next update: Sun 27 Sep 2026 20:33:51 +0000
Files and hashes: 1: f99iGPoBXQoAdKhEJFGAaij53fU.crl (hash: ieM7kUljE6a+sxjGmObQ7JJWoqtMmBV6MsGJ7efQt58=)
2: 85E0F43E8C4B11F1B19DE8A35611F970.roa (hash: mLSyULYzajAtJ2vg9LM7fm/qvl7GMy/fczxSupefI4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl
rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2223 (0x8af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173060, serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5
Validity
Not Before: Sep 20 20:33:51 2026 GMT
Not After : Sep 27 20:33:51 2026 GMT
Subject: CN=6ab0432f-ca81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:13:7f:a8:a8:52:50:24:81:bd:24:b7:ac:b7:
0b:21:ef:87:ad:b1:f5:c6:6e:b7:fe:f8:27:11:91:
a4:de:22:7d:81:fa:25:6e:77:0e:88:77:87:d9:9c:
e2:82:da:b8:06:5e:c4:2d:a6:d0:f1:b6:45:87:79:
5f:6e:2a:42:18:d3:17:bb:dc:9c:ab:2b:6c:c1:ab:
46:c4:e6:2a:e4:28:5d:45:65:93:18:e1:66:61:da:
6e:be:72:4e:36:0f:a4:23:53:b3:c5:6c:b4:3e:13:
ba:45:63:6d:8d:18:8a:70:80:45:ca:4e:dc:25:77:
89:07:dc:b8:83:4e:83:c2:08:78:14:15:bf:a5:08:
da:90:ab:b3:d4:56:fd:68:84:01:8c:0b:80:cc:ab:
0f:44:ee:61:77:a0:fc:51:9c:d5:83:30:11:b0:51:
07:f4:79:c4:8b:f1:9e:0a:a5:83:71:81:75:fd:6d:
fd:78:6f:c8:8c:a0:7d:4a:d3:47:fd:da:72:4c:5a:
a9:16:43:a6:b9:04:1c:61:ce:e7:a6:12:26:29:03:
89:e2:e4:fc:c7:e9:1c:08:12:80:ab:94:00:a5:79:
4d:5a:a0:6b:f8:1d:02:bf:34:6e:57:be:32:0e:1b:
de:4e:57:2f:86:ec:9b:32:93:26:58:92:53:47:de:
7f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:14:C5:C6:91:68:98:80:7E:E1:69:55:60:B7:47:4E:76:AB:5D:97
X509v3 Authority Key Identifier:
keyid:7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:71:54:cc:4c:65:24:53:eb:ba:e4:9d:4b:36:e3:a6:c3:ac:
62:20:40:14:e7:39:12:29:65:9c:25:fb:ad:2a:e6:1c:92:55:
1b:d3:dd:0f:64:1c:af:c5:52:f5:4e:cf:25:1b:b7:7e:c7:62:
10:e7:ac:c8:e6:52:51:d3:39:ed:c8:a1:7a:03:c8:ed:e2:41:
0d:33:8c:4d:4d:e7:00:75:51:d2:7b:94:57:07:05:3e:79:83:
04:13:e6:7b:7e:54:07:f2:ac:b5:09:c4:87:d3:e4:14:4b:c7:
cd:87:85:a7:d7:ba:4b:8e:01:93:b0:fd:59:d5:70:7b:da:73:
9d:05:ca:b2:0d:5d:f8:13:2b:40:fd:06:99:00:b0:d7:29:c9:
dc:a9:69:0d:6c:47:ea:2e:5c:41:df:c5:7b:1c:a8:a0:b2:00:
71:1c:26:89:b5:38:20:84:21:7f:fa:20:e8:ca:90:d5:04:c4:
e0:b5:dc:75:5b:23:84:95:39:b0:c0:da:2e:bd:f3:95:87:b5:
92:18:b6:9d:d7:61:bc:cb:1e:4f:e5:d4:23:1f:ce:c0:e4:e9:
44:e5:18:db:e7:68:f4:ce:f3:aa:f1:7c:8c:06:f3:b5:38:aa:
59:34:4a:c0:a4:2a:d6:84:e6:87:bf:20:ad:a9:b9:06:b4:80:
f7:4e:6e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:57:45 2026 by rpki-client