
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft
File: Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft (raw, json)
Hash identifier: g07T+aqi6EjjDyas8Gb4JJoHzmZvKWcKDJkWFyQY3CU=
Subject key identifier: 50:5E:5A:15:97:69:CB:1A:A3:CA:9B:C5:D0:77:65:16:0F:49:5B:62
Authority key identifier: 16:7D:6E:C3:2A:D0:B3:58:15:F2:88:47:AD:D7:97:0E:B6:7F:2D:BA
Certificate issuer: /CN=A9197CBD/serialNumber=167D6EC32AD0B35815F28847ADD7970EB67F2DBA
Certificate serial: 020B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft
Manifest number: 0206
Signing time: Thu 15 Oct 2026 03:57:20 +0000
Manifest this update: Thu 15 Oct 2026 03:57:19 +0000
Manifest next update: Thu 22 Oct 2026 03:57:19 +0000
Files and hashes: 1: Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl (hash: t4IwMl+SMWYOgCzZfaWVIDi74Xlv3cFO6EI9ZQ9WxsU=)
2: BD16D2BCB11411EE9B803C66C4F9AE02.roa (hash: qpM8Z2/aK8tIWbW9LEWOpp+9seUQHE+IP9vStE3DYZ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl
rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 03:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197CBD, serialNumber=167D6EC32AD0B35815F28847ADD7970EB67F2DBA
Validity
Not Before: Oct 15 03:57:19 2026 GMT
Not After : Oct 22 03:57:19 2026 GMT
Subject: CN=6ad04f1f-d7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:52:39:5c:87:1b:95:8c:3d:73:0a:ce:7b:9f:
b2:21:d4:47:b1:ca:1d:c0:00:c6:99:41:9e:e1:e3:
29:cf:6b:b8:3d:d6:9e:2e:83:b1:d7:40:3a:75:77:
fa:0c:b5:5b:37:46:f6:d0:13:6e:5a:62:fa:be:c9:
9d:cf:9b:19:06:43:79:34:09:ba:e2:65:17:93:5b:
cf:e4:9f:6c:8b:14:04:9f:b8:6a:44:33:51:6b:be:
46:88:c5:c5:d4:76:50:c2:4e:46:d2:9e:88:c4:10:
fd:a8:8a:61:1c:7c:dc:82:51:26:2c:2f:b7:3c:d2:
bc:33:b9:0f:2e:f0:60:ef:9b:d9:fc:6a:5e:1a:89:
82:a5:71:17:86:51:14:76:f7:23:49:a0:68:03:a5:
c1:20:eb:ce:c3:32:26:7e:98:16:d2:7f:d3:5e:69:
50:cc:c7:04:28:ef:a1:15:56:06:c1:d2:7b:6e:89:
6c:b1:c5:fb:be:82:45:29:74:20:86:61:ec:96:67:
1c:fe:eb:3a:c0:76:8b:37:f7:f7:fa:bf:60:01:f6:
4e:f3:ca:bb:da:a8:a1:90:8f:79:0f:e0:4a:be:66:
67:ab:a6:0f:9e:36:5f:e4:09:70:9f:23:0f:09:00:
fa:d3:fd:30:1c:41:2c:a2:5a:bc:c7:c4:80:a7:7f:
78:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5E:5A:15:97:69:CB:1A:A3:CA:9B:C5:D0:77:65:16:0F:49:5B:62
X509v3 Authority Key Identifier:
keyid:16:7D:6E:C3:2A:D0:B3:58:15:F2:88:47:AD:D7:97:0E:B6:7F:2D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:e7:06:d4:c2:d9:cb:b1:e5:a5:1e:74:06:14:eb:1a:cf:f2:
3b:cf:52:ac:fa:e7:32:cf:0d:99:6d:32:0b:ed:78:20:34:c7:
45:d5:d8:5a:69:39:56:8b:46:af:41:27:9e:96:5a:b5:02:a5:
da:41:17:e6:51:04:76:c6:0e:7c:b6:b5:b6:f4:58:9e:e1:1f:
c6:71:ad:75:f7:19:00:b5:9d:5e:0a:f3:e5:eb:1e:39:8d:a9:
3d:33:54:81:aa:49:75:42:34:95:c7:62:98:f0:1a:f8:55:55:
82:82:62:85:ef:69:13:2e:2e:16:9e:68:b6:c9:9c:e2:27:aa:
ea:1f:04:f4:c9:8f:5b:4e:b7:67:fa:18:98:c4:55:c8:3f:ab:
6c:b3:2b:16:52:a1:f4:19:2d:a1:2e:0f:5f:31:bf:ab:2c:23:
65:ca:13:1f:80:59:72:04:e1:e4:70:93:2e:e8:ed:a5:d2:af:
d4:82:f3:1e:9b:e3:5f:5e:36:4d:c0:f0:b5:3c:54:8b:2c:02:
6e:81:64:89:5d:12:12:c1:8c:1b:fb:ed:49:b6:3f:d6:e9:91:
5d:fd:75:78:f4:25:34:81:2a:cf:4d:20:09:09:29:08:bb:9f:
5b:ff:a5:46:54:5e:0a:9e:05:ae:c8:82:a6:c8:e1:78:41:36:
bd:4f:35:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 11:04:27 2026 by rpki-client