
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
File: F9X-Mj6_2ajTROd7c3majnViQ1I.mft (raw, json)
Hash identifier: xZEbDmjSBDGSlH3ptYv2EgoQ2sU8jR6eYe0EUkMF+IU=
Subject key identifier: 4C:D2:AE:72:72:06:EE:83:0F:8D:37:D1:D3:DC:BD:C7:71:39:0A:72
Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
Certificate serial: 033E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
Manifest number: 0314
Signing time: Mon 27 Jul 2026 02:23:53 +0000
Manifest this update: Mon 27 Jul 2026 02:23:53 +0000
Manifest next update: Mon 03 Aug 2026 02:23:53 +0000
Files and hashes: 1: F9X-Mj6_2ajTROd7c3majnViQ1I.crl (hash: sYvVl6QmoZnjA2z54Vahnlhzh20UCMJRQkVop8CgwTw=)
2: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (hash: 02sqYdbDRE0+Eg/3piDn9CDT+5Zx0sH2Kq685uMN8gM=)
3: 4BBA96965CD511EE9A078180C4F9AE02.roa (hash: WW5v8VEKPHY5cRU6NklWON7UCKUk27Vdm5aFanhH4uA=)
4: BEE96BA212A811F1A54B75AE3D3D8C67.roa (hash: /SEWCKuQ68wowgWrkDXt8HCOPB77auVAxoefhm+aSXY=)
5: 50AF1E205CD411EEBADBCF7DC4F9AE02.roa (hash: e3yNZFVgkQCVhCm/QmSqoyQKXUJmq53Q3jA7sKU7YTQ=)
6: 1030CBF02BE911F1BE5DE9B7C4833773.roa (hash: EpKA0Qcr8+YCVzQw+n1+P9eI1+6tzWoY6uRcXseyDfg=)
7: F6CCABBA580311F18246AAE39B833773.roa (hash: Sy10tfcnlP/icaTyyPCajx/jJSM+JdeLmpgnQckiwew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl
rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:23:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 830 (0x33e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
Validity
Not Before: Jul 27 02:23:53 2026 GMT
Not After : Aug 3 02:23:53 2026 GMT
Subject: CN=6a66c139-3f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9a:de:ea:43:8b:37:cb:19:f6:c2:77:53:dc:
ac:44:5f:1b:11:49:2d:67:db:1b:f6:cb:b5:07:10:
7d:c7:86:15:cd:44:3a:db:b0:75:69:66:79:61:3c:
bc:65:e2:11:e9:ce:af:8f:94:25:09:56:3f:09:9d:
c4:97:d2:dc:7d:39:39:b9:85:1e:70:12:ec:72:25:
27:9f:05:7e:50:96:87:30:ce:50:ef:ba:12:ef:53:
4b:9e:6c:28:2e:4b:58:9a:0e:92:2b:65:b3:94:32:
d4:8d:d0:c5:a5:c2:45:ad:5d:81:8b:be:b8:28:64:
a2:d7:88:dd:c2:bc:7b:6e:d5:a5:6d:a5:89:ac:3b:
f7:7b:9d:71:9b:99:22:03:15:9f:43:10:d9:4b:43:
4b:2c:55:f7:05:8c:ad:fd:db:ef:d9:3b:9e:fd:cf:
43:f0:1a:62:c2:c7:54:0a:fd:76:2b:d7:bb:b8:c7:
0f:33:f0:57:bf:47:8f:75:17:d2:9b:3a:dd:88:f0:
e6:c6:9d:3b:c2:13:31:51:28:ac:0b:96:c9:89:11:
27:2d:b4:22:b5:d7:e1:76:a4:dc:87:22:36:06:83:
f5:4b:12:42:fa:a4:b9:83:6a:a1:16:6d:8a:d9:6a:
4b:11:56:16:cd:dc:68:cf:b4:7a:5d:47:53:3a:a7:
0b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D2:AE:72:72:06:EE:83:0F:8D:37:D1:D3:DC:BD:C7:71:39:0A:72
X509v3 Authority Key Identifier:
keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d1:ce:1c:23:5d:d3:8a:ea:2f:de:e4:61:96:37:ed:cf:c2:
d3:3b:1f:c2:8a:a3:7f:03:6f:19:33:ec:cf:75:72:79:f0:78:
86:e7:c8:8f:96:5a:ec:dc:32:28:2d:ec:48:60:db:28:61:b3:
f6:dc:5e:c8:64:a9:fa:9d:9b:0f:ed:6d:86:f7:85:f9:90:c4:
9e:a0:e6:d2:11:ad:6f:bb:a2:7c:be:67:db:72:bc:96:56:d8:
2f:ba:f4:0e:58:ba:6f:3c:42:06:8e:7f:df:cd:9b:94:1a:59:
a8:db:f6:8b:a5:55:33:4d:38:fd:9c:8b:a9:b8:d3:b9:0c:63:
68:73:76:9e:d1:75:f5:dd:79:3c:35:2e:98:3e:d2:7e:55:fd:
61:eb:14:0b:cc:36:92:41:9b:9b:a1:6d:75:fa:5f:59:20:50:
b3:a6:4d:cf:b5:90:1f:7d:03:de:80:6d:54:3e:4f:4e:dc:c6:
08:ee:0c:60:bb:80:a9:4d:ec:05:04:66:f9:fe:4f:2b:6c:05:
3c:eb:1a:11:8c:3b:48:90:49:60:a5:6b:82:77:83:99:d5:c4:
a9:a3:1a:9c:90:70:da:71:77:99:15:71:5b:4d:47:46:26:9c:
37:1b:38:96:b8:7c:8f:65:a3:68:5f:4d:46:c7:ee:84:62:ba:
d5:bc:75:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:49:04 2026 by rpki-client