
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173526/79B99B749AAC11F1B63AA1684111F970/fOoThFDUNhs1PnBX2C_Bx2qMflg.mft
File: fOoThFDUNhs1PnBX2C_Bx2qMflg.mft (raw, json)
Hash identifier: sNyVTZRYlfQ5p8V9CRqVLruEDeGpw9ccofJ1OWWRhA0=
Subject key identifier: FC:D3:64:DA:C6:2D:26:89:AF:C2:C0:0A:0F:C8:EB:F6:50:74:1E:F4
Authority key identifier: 7C:EA:13:84:50:D4:36:1B:35:3E:70:57:D8:2F:C1:C7:6A:8C:7E:58
Certificate issuer: /CN=A9173526/serialNumber=7CEA138450D4361B353E7057D82FC1C76A8C7E58
Certificate serial: 16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fOoThFDUNhs1PnBX2C_Bx2qMflg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173526/79B99B749AAC11F1B63AA1684111F970/fOoThFDUNhs1PnBX2C_Bx2qMflg.mft
Manifest number: 15
Signing time: Mon 21 Sep 2026 09:02:08 +0000
Manifest this update: Mon 21 Sep 2026 09:02:08 +0000
Manifest next update: Mon 28 Sep 2026 09:02:08 +0000
Files and hashes: 1: fOoThFDUNhs1PnBX2C_Bx2qMflg.crl (hash: 79tC+pHt+Vl4d/FpF0Tgzy1ZtjoAAKI0bDsEfsHQddw=)
2: 864D2A94A1C411F1A29B73897011F970.roa (hash: CjCIDj8MlgWZJjzO4IRsVZ7VxVfQnt0GwQFvWoydvek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173526/79B99B749AAC11F1B63AA1684111F970/fOoThFDUNhs1PnBX2C_Bx2qMflg.crl
rsync://rpki.apnic.net/member_repository/A9173526/79B99B749AAC11F1B63AA1684111F970/fOoThFDUNhs1PnBX2C_Bx2qMflg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fOoThFDUNhs1PnBX2C_Bx2qMflg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 09:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173526, serialNumber=7CEA138450D4361B353E7057D82FC1C76A8C7E58
Validity
Not Before: Sep 21 09:02:08 2026 GMT
Not After : Sep 28 09:02:08 2026 GMT
Subject: CN=6ab0f290-5da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:43:9d:6a:35:3d:ee:b7:89:5c:63:22:c2:e6:
ee:e1:29:11:f2:e6:8a:89:50:82:aa:35:2c:10:53:
65:a3:72:e7:f5:c9:e8:7c:9b:69:d8:62:6f:91:1d:
94:3d:6a:ca:ee:13:51:7f:c3:57:65:32:7c:d9:d3:
1f:dd:9b:fb:b9:69:55:e0:9d:f9:ec:1c:fc:36:9a:
2b:e4:8b:10:09:8d:4d:43:4c:cb:06:86:b3:7d:c0:
c1:fb:57:a4:b7:57:68:c7:ed:f9:da:af:a5:72:45:
a2:b3:d4:81:bf:41:88:86:de:fe:a0:91:78:27:94:
dd:1d:80:bc:45:b4:85:04:b8:80:bd:ac:e7:2e:85:
08:5c:3c:c6:16:a2:b2:d0:c6:d8:09:64:56:3f:70:
55:4a:2e:dc:cf:7f:0c:6c:ca:97:f7:7b:5e:5d:35:
c6:45:9e:1f:17:69:9d:25:6d:b5:c5:ec:fa:88:36:
31:92:3b:4a:3c:34:ba:cd:f0:d0:8e:a5:17:b7:ff:
97:22:03:e8:ba:f8:c4:e4:3c:c9:59:81:fb:35:0a:
58:dc:8b:5b:72:b8:2d:65:8e:bc:b7:51:58:0a:03:
80:26:d7:ab:52:ae:e2:a4:6c:b5:bc:25:75:ab:a5:
2c:f8:c0:bb:f8:36:d0:71:b2:17:8b:40:50:26:8c:
b0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D3:64:DA:C6:2D:26:89:AF:C2:C0:0A:0F:C8:EB:F6:50:74:1E:F4
X509v3 Authority Key Identifier:
keyid:7C:EA:13:84:50:D4:36:1B:35:3E:70:57:D8:2F:C1:C7:6A:8C:7E:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173526/79B99B749AAC11F1B63AA1684111F970/fOoThFDUNhs1PnBX2C_Bx2qMflg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fOoThFDUNhs1PnBX2C_Bx2qMflg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173526/79B99B749AAC11F1B63AA1684111F970/fOoThFDUNhs1PnBX2C_Bx2qMflg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:aa:a1:1a:2a:76:d2:27:51:6d:f6:9e:21:4e:32:d0:54:2e:
c5:0c:80:56:45:db:be:f3:0d:51:08:07:5f:44:30:53:83:14:
82:d1:aa:31:06:e1:da:17:6d:9a:ee:04:fa:10:33:97:97:28:
59:17:ec:7d:2b:bc:11:42:87:d4:08:f1:f6:f4:c8:a1:f0:1f:
6c:a6:5d:de:ed:53:09:a0:b7:46:1b:6d:0d:3d:72:a0:83:2f:
41:c2:19:f5:00:14:fd:f0:84:76:f7:62:b8:02:2a:ba:7a:87:
64:ee:e2:3a:54:88:c8:7b:7d:64:88:9e:7b:fb:c4:a6:bc:fb:
d0:bb:34:14:44:07:93:7b:77:6c:9d:f6:03:68:0e:a6:e7:c6:
57:66:a7:db:96:5a:83:8b:e6:05:30:60:e6:43:17:5c:3b:e4:
fc:27:20:02:28:d6:80:78:0d:59:ee:ab:5a:6d:0d:d7:47:cd:
52:04:5c:58:96:57:36:da:68:da:3b:e0:b6:60:e9:69:30:ca:
05:02:fe:a3:ca:6b:89:d6:c9:52:b4:00:2c:ef:b7:e3:43:8c:
31:cd:4b:3e:4c:0e:81:e7:a7:a8:43:fe:9f:a6:fd:dc:cb:4e:
93:f6:0c:d5:dc:20:76:49:bf:af:f3:f7:1f:2c:cb:9c:b2:74:
ab:28:81:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:02:17 2026 by rpki-client