
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft
File: FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft (raw, json)
Hash identifier: IYi7rpTId7u8arYkFDYYBbMSRWOpWphmKScASjgFdRk=
Subject key identifier: 21:78:A4:EA:81:AE:5B:4F:17:70:8B:B3:DB:65:D1:6F:F7:61:A2:F2
Authority key identifier: 16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57
Certificate issuer: /CN=A9188F77/serialNumber=16315A68A745080BDDB6C8F0156D043068931B57
Certificate serial: 01AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft
Manifest number: 019B
Signing time: Mon 27 Jul 2026 06:08:58 +0000
Manifest this update: Mon 27 Jul 2026 06:08:57 +0000
Manifest next update: Mon 03 Aug 2026 06:08:57 +0000
Files and hashes: 1: FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl (hash: +/61TnjeCyM0LDe19ZLsCuH+4xMfirzcXo9S0L806Pw=)
2: 1501E24625F511EF8F342F3EC4F9AE02.roa (hash: ezZJRYxLK6j3OTpYQ1JWUPNDJf7+Fv6xmBdkXwcseTQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl
rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188F77, serialNumber=16315A68A745080BDDB6C8F0156D043068931B57
Validity
Not Before: Jul 27 06:08:57 2026 GMT
Not After : Aug 3 06:08:57 2026 GMT
Subject: CN=6a66f5fa-9383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ff:17:80:d8:3e:28:9d:a3:83:f1:6a:e4:ce:
99:80:15:a6:68:c5:c8:c8:de:29:e0:76:94:c3:fd:
53:89:b9:23:4b:c2:90:71:56:4b:68:76:2a:ec:ca:
3b:14:6b:ad:94:c0:54:ff:83:c4:95:b3:dc:f3:8e:
cc:b6:43:fe:ad:32:9d:ba:74:72:08:4e:90:4e:87:
69:0e:ce:b6:7b:e3:77:31:bf:2e:95:cd:37:29:a1:
23:79:e9:59:ca:cd:49:d2:53:a9:16:70:80:fe:b7:
c1:8f:fa:d8:0e:59:79:24:21:f5:b9:07:b6:6f:af:
95:39:60:16:87:21:30:f3:ba:83:5f:21:17:75:d0:
6c:7a:19:82:e2:e8:b2:40:7c:9c:31:25:99:c6:4e:
51:4a:dc:82:6d:6e:be:48:30:86:38:2e:cb:a7:c1:
23:62:43:26:01:e4:ec:ee:c2:ab:7d:0a:47:d7:d1:
6b:98:b0:10:1a:44:b4:91:27:03:5d:e5:e3:ec:45:
c8:56:16:aa:09:f8:cd:79:57:29:de:90:c4:9a:79:
82:3a:75:72:fc:1f:6c:69:ba:25:ed:25:06:8a:12:
f5:ae:d8:65:b2:a3:c8:4f:c6:c7:43:af:0a:1f:7a:
7e:80:58:fe:09:70:ff:c2:4a:fb:99:48:62:f0:9d:
f9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:78:A4:EA:81:AE:5B:4F:17:70:8B:B3:DB:65:D1:6F:F7:61:A2:F2
X509v3 Authority Key Identifier:
keyid:16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:52:cf:1e:44:d8:28:cf:10:66:15:97:8a:46:cd:d0:7b:06:
ae:01:c9:13:6a:b8:b4:43:92:17:24:af:35:d8:a2:c7:e5:99:
10:96:5f:87:c0:35:a5:6b:30:75:12:3b:37:91:4e:45:48:54:
f0:fd:3e:8e:09:19:86:e7:c5:00:7c:45:37:39:17:af:39:02:
cd:6c:8a:af:d4:91:37:75:cd:3e:b4:b6:93:88:87:8f:8b:d9:
45:39:9c:04:53:69:bf:7b:25:53:7b:43:70:6c:e5:3e:02:c0:
bb:e2:c3:b5:0b:f4:05:cc:7d:45:c8:11:44:af:f1:a8:16:eb:
fa:f6:12:04:15:a1:ad:ca:81:af:d6:ae:11:ca:5f:ce:da:82:
84:3b:b2:71:41:2d:67:d4:bf:79:11:f3:17:f1:2a:67:16:7a:
1f:73:fb:44:6d:60:ca:52:d9:ba:05:aa:0f:4d:e3:1e:28:37:
8d:c3:28:76:77:38:dc:4e:6e:32:1c:ed:f8:36:ce:49:25:3e:
03:24:50:94:f1:6d:10:e2:a0:eb:ff:96:0f:63:c4:d4:00:0c:
c9:3f:3d:ff:8e:03:05:c8:c2:e4:52:72:e0:d3:d7:ac:f9:1c:
25:a1:fc:dc:47:65:63:b2:0b:2e:79:1a:fb:72:d5:9b:a8:cf:
c5:94:0f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:47 2026 by rpki-client