
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft
File: f2OOENa_P0qFS8YKE8I5svNdFOE.mft (raw, json)
Hash identifier: WBalfeMto1n758ooaip9zwoirkcNwaGQSPIsC/6Ji0Q=
Subject key identifier: 19:A7:C8:0B:E8:B1:3D:3E:DF:C1:05:06:9D:31:8C:7F:80:8D:A2:E0
Authority key identifier: 7F:63:8E:10:D6:BF:3F:4A:85:4B:C6:0A:13:C2:39:B2:F3:5D:14:E1
Certificate issuer: /CN=A9173D5E/serialNumber=7F638E10D6BF3F4A854BC60A13C239B2F35D14E1
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft
Manifest number: 79
Signing time: Sat 19 Sep 2026 07:50:15 +0000
Manifest this update: Sat 19 Sep 2026 07:50:15 +0000
Manifest next update: Sat 26 Sep 2026 07:50:15 +0000
Files and hashes: 1: f2OOENa_P0qFS8YKE8I5svNdFOE.crl (hash: ELoowCVQv3RkB/AHuEqUgwRbSxYKf2JJuSPSdT/V6D8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.crl
rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173D5E, serialNumber=7F638E10D6BF3F4A854BC60A13C239B2F35D14E1
Validity
Not Before: Sep 19 07:50:15 2026 GMT
Not After : Sep 26 07:50:15 2026 GMT
Subject: CN=6aae3eb7-9e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:9a:13:b6:db:c6:05:35:51:06:21:a0:42:
0b:a9:3b:4a:eb:46:6e:f2:5d:67:ad:da:1e:a6:23:
b1:6c:93:42:76:d7:e9:a0:bf:d3:dc:66:74:62:84:
f8:5a:94:4d:80:2d:80:b3:0d:47:6b:e4:1c:e6:50:
97:bd:6f:cd:24:17:17:de:a8:90:78:5f:89:42:2a:
9a:bf:b0:be:9f:61:eb:72:09:01:a8:34:32:b0:8d:
9e:4b:09:7b:82:cc:4d:61:25:1f:ad:ea:1f:9f:5c:
78:14:10:3f:e1:18:42:8b:06:27:8a:46:61:25:b8:
aa:5c:a9:2d:20:35:ca:93:cf:cb:30:f7:48:a7:1d:
c1:3d:2b:ca:7d:4a:f1:a7:95:e9:72:76:63:59:ab:
c9:af:92:7a:50:2d:3a:9a:2d:eb:15:a5:06:72:65:
eb:d3:8f:71:01:d5:36:b8:16:01:27:67:41:3d:dc:
85:3e:b5:c4:67:f5:66:7f:be:1a:8e:8e:3e:d6:57:
e5:6b:cf:4b:00:69:f6:30:e6:c9:8a:3e:6a:29:ac:
5b:4e:b5:57:2a:7a:43:35:2a:d3:ca:c9:65:56:06:
21:ba:4b:89:a8:01:13:fc:bf:1c:07:80:68:da:53:
32:29:9c:76:53:75:a2:31:b4:04:d1:fa:1c:67:98:
6b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A7:C8:0B:E8:B1:3D:3E:DF:C1:05:06:9D:31:8C:7F:80:8D:A2:E0
X509v3 Authority Key Identifier:
keyid:7F:63:8E:10:D6:BF:3F:4A:85:4B:C6:0A:13:C2:39:B2:F3:5D:14:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:0b:09:0f:f3:fc:a7:ec:41:71:c2:08:2b:6b:3c:d5:1b:19:
e0:fd:0d:71:51:c7:ba:fc:48:f4:47:f0:2c:74:90:50:94:ee:
f3:04:97:84:46:58:06:38:bf:72:29:b7:1b:02:96:de:08:b3:
b0:63:0a:db:94:66:0c:d2:68:df:70:62:14:23:6e:0e:a2:50:
55:ae:d5:72:02:80:12:db:10:02:80:a5:c2:eb:97:8c:d3:34:
27:8f:41:3d:a8:33:e0:24:57:f4:23:71:62:cd:6f:d0:71:24:
13:16:08:51:74:86:69:a9:6c:ac:67:52:8a:3a:33:56:e7:9e:
3d:c4:90:2a:37:07:f9:7b:58:26:61:37:ea:45:65:95:ee:67:
b6:e3:d6:7f:3e:b7:bd:cd:e1:bb:be:9e:fd:2a:89:d0:d4:d2:
ee:24:5e:56:b9:f4:29:2a:01:12:12:65:db:9f:05:00:d3:e8:
df:e4:88:52:2e:1f:d7:8a:f7:20:ba:a8:71:50:34:25:34:31:
5e:78:41:ad:1b:0d:fd:e1:b1:9e:ef:e5:b3:55:18:4c:ce:e1:
cd:d1:1e:83:0d:1f:ab:a0:bb:e6:7f:38:4b:f2:30:40:4a:07:
02:35:74:9d:11:75:36:69:bc:f3:7c:6d:4d:0f:45:33:f3:79:
37:4e:0b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:58:16 2026 by rpki-client