
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
File: F9X-Mj6_2ajTROd7c3majnViQ1I.mft (raw, json)
Hash identifier: dYLCV5K9xT2K9lzz7J749+CYmvsvPU/K3L+F2sE1BpQ=
Subject key identifier: A7:29:FD:E2:AD:CE:EF:AC:C1:9E:B1:AB:C7:6E:71:4C:23:70:A8:66
Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
Certificate serial: 0328
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
Manifest number: 02FE
Signing time: Sat 13 Jun 2026 01:20:03 +0000
Manifest this update: Sat 13 Jun 2026 01:20:03 +0000
Manifest next update: Sat 20 Jun 2026 01:20:03 +0000
Files and hashes: 1: F9X-Mj6_2ajTROd7c3majnViQ1I.crl (hash: XdOL71Mu340Jkxr3FbQmJTGDk5hGVjLOFEuUgOg1uSY=)
2: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (hash: 02sqYdbDRE0+Eg/3piDn9CDT+5Zx0sH2Kq685uMN8gM=)
3: BEE96BA212A811F1A54B75AE3D3D8C67.roa (hash: /SEWCKuQ68wowgWrkDXt8HCOPB77auVAxoefhm+aSXY=)
4: 50AF1E205CD411EEBADBCF7DC4F9AE02.roa (hash: e3yNZFVgkQCVhCm/QmSqoyQKXUJmq53Q3jA7sKU7YTQ=)
5: 4BBA96965CD511EE9A078180C4F9AE02.roa (hash: WW5v8VEKPHY5cRU6NklWON7UCKUk27Vdm5aFanhH4uA=)
6: F6CCABBA580311F18246AAE39B833773.roa (hash: Sy10tfcnlP/icaTyyPCajx/jJSM+JdeLmpgnQckiwew=)
7: 1030CBF02BE911F1BE5DE9B7C4833773.roa (hash: EpKA0Qcr8+YCVzQw+n1+P9eI1+6tzWoY6uRcXseyDfg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl
rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:20:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 808 (0x328)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
Validity
Not Before: Jun 13 01:20:03 2026 GMT
Not After : Jun 20 01:20:03 2026 GMT
Subject: CN=6a2cb043-0470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a2:3a:34:61:57:a9:f3:21:e9:90:cd:90:67:
d2:ac:06:37:d3:61:bc:55:56:b6:9d:9e:e1:5e:f3:
02:2e:14:b6:ec:8c:6c:dd:3c:c1:93:b4:00:51:ef:
d7:fb:ad:8c:f9:e2:eb:ac:1e:52:65:52:91:87:93:
23:d6:43:21:b3:4f:79:c3:ea:9f:d4:05:69:7d:de:
7d:37:e2:37:b0:f4:b9:45:6f:a2:15:49:8e:a6:2b:
2c:08:01:93:9d:10:c2:80:c0:61:90:d8:53:c8:01:
82:90:7e:25:17:59:bb:7b:e4:2e:63:93:b6:35:3b:
9c:65:fd:18:ed:01:72:bf:e8:2f:1c:36:08:20:c3:
fe:fd:0a:d5:c9:3f:40:8e:94:9f:8d:75:79:58:57:
25:d2:c6:2d:30:90:7b:d0:81:09:ed:d1:8e:43:c2:
f1:0e:d2:b4:32:75:88:1a:e5:0e:6d:db:05:72:2d:
b9:70:3e:44:7d:53:af:b9:4c:32:53:d8:56:fb:c7:
ba:f4:2b:1f:3b:08:ee:cc:68:6e:e0:60:73:a5:2d:
88:5c:9a:db:61:23:d6:d7:76:7f:37:c2:b5:43:97:
bc:d1:31:6e:67:a8:fd:7d:33:ab:66:03:22:d7:d5:
d4:36:e9:ed:4e:c2:e5:43:9f:93:1e:33:ff:16:e8:
ef:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:29:FD:E2:AD:CE:EF:AC:C1:9E:B1:AB:C7:6E:71:4C:23:70:A8:66
X509v3 Authority Key Identifier:
keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:11:5b:e8:96:6d:b1:fd:0e:9d:79:13:52:a2:e3:d0:93:a5:
73:bf:ad:90:38:8f:83:e4:97:db:f2:2d:59:99:5c:a9:85:04:
c1:9e:4d:34:72:ac:ac:a2:62:d1:e9:c1:ea:9c:b4:3a:6d:87:
9b:97:41:91:dc:2a:6c:49:d0:57:b8:23:78:6e:fe:18:53:7a:
cb:af:ee:ce:19:f9:1f:34:e0:09:c5:b0:7a:91:ef:29:06:1f:
b1:d9:7d:f8:a6:d4:25:6a:01:04:7d:2b:d9:9a:ed:c2:8d:3a:
bb:81:26:c5:2f:70:b6:2e:9a:66:b7:53:e4:a8:92:38:15:05:
a1:b0:e0:51:ee:6e:ba:92:c4:ee:00:43:6e:bd:f5:fc:f7:29:
6d:48:b6:4d:4e:b3:44:25:af:cf:6f:81:a0:c5:17:30:b4:a7:
68:33:4b:24:a9:54:32:2e:b3:58:b5:e0:1a:87:ab:c1:22:e9:
7e:18:6d:39:21:85:ce:c6:50:52:f7:c6:1d:ad:06:a9:bd:8f:
32:46:ab:96:6b:3a:0a:ce:51:84:c7:a1:c6:0d:ef:e1:b5:17:
c7:39:47:79:8d:66:7b:35:b5:1b:3e:e8:1e:97:6c:40:31:58:
02:b5:0f:87:f8:c1:88:11:b4:97:a8:45:4d:df:8b:80:ff:e4:
1c:8b:c9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:27:09 2026 by rpki-client