
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
File: F9X-Mj6_2ajTROd7c3majnViQ1I.mft (raw, json)
Hash identifier: NbquVn9RkZu7gyA7iV8J8GVXviZ1yn21oaanl2JTNh8=
Subject key identifier: 4B:AC:8C:B9:AA:26:0F:C2:5E:D7:39:1A:43:3B:4F:9E:E5:73:DC:5F
Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
Certificate serial: 0385
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
Manifest number: 0346
Signing time: Mon 21 Sep 2026 00:54:53 +0000
Manifest this update: Mon 21 Sep 2026 00:54:53 +0000
Manifest next update: Mon 28 Sep 2026 00:54:53 +0000
Files and hashes: 1: F9X-Mj6_2ajTROd7c3majnViQ1I.crl (hash: Lhu/znGgCvMvf17HxBWNyEDJ2CjWvb+KRYL65Z8hxkQ=)
2: EB259DA0B32811F1945B3D586A11F970.roa (hash: 7eLutbGIYOQSljYtW1RnN1uUIe+foY+Rp748DOXdmOo=)
3: 50AF1E205CD411EEBADBCF7DC4F9AE02.roa (hash: e3yNZFVgkQCVhCm/QmSqoyQKXUJmq53Q3jA7sKU7YTQ=)
4: 4BBA96965CD511EE9A078180C4F9AE02.roa (hash: WW5v8VEKPHY5cRU6NklWON7UCKUk27Vdm5aFanhH4uA=)
5: 674FABEA9DFE11F1A590ACA54711F970.roa (hash: JA9jJvsUHbiL7kzbgateu3mZ/L7MqDA79t8h6ItSPj4=)
6: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (hash: 02sqYdbDRE0+Eg/3piDn9CDT+5Zx0sH2Kq685uMN8gM=)
7: BEE96BA212A811F1A54B75AE3D3D8C67.roa (hash: /SEWCKuQ68wowgWrkDXt8HCOPB77auVAxoefhm+aSXY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl
rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:54:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901 (0x385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
Validity
Not Before: Sep 21 00:54:53 2026 GMT
Not After : Sep 28 00:54:53 2026 GMT
Subject: CN=6ab0805d-a333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2e:37:5a:18:20:9e:81:ec:e2:f8:90:a5:49:
30:7e:d3:b2:b2:d6:77:b6:22:b2:8c:41:73:53:11:
98:eb:04:89:be:67:56:2d:8a:0d:35:7c:e8:6a:bb:
c2:d2:e0:29:47:0f:e3:c4:a8:b1:77:16:3b:de:8c:
4e:6f:d0:52:c2:d7:a7:f0:4b:5e:25:3e:33:25:ec:
14:0d:38:07:c3:16:33:36:7b:41:fc:c2:5b:e0:d8:
16:27:27:b3:c4:bd:68:c2:77:51:c2:c3:2e:cf:97:
e3:66:72:b0:d9:00:c8:51:b4:0a:d0:d0:5d:23:f7:
f8:a4:da:25:90:5a:fe:6b:e0:08:4c:36:28:3f:21:
96:b8:2a:8f:6f:c4:66:02:7c:17:67:4e:75:10:91:
a9:69:b3:4b:43:f4:73:7e:75:44:25:88:1c:df:88:
b6:16:2e:8c:af:62:00:17:21:b9:10:d5:15:db:52:
82:69:8d:b4:e6:1a:37:48:c1:54:a4:68:f7:3e:71:
a2:ef:c1:c4:58:ee:2d:c2:82:1a:c0:4d:57:73:76:
fa:ff:a9:ec:1c:c7:ef:98:87:b5:65:fc:49:0a:65:
1f:e9:ca:3b:74:15:1a:3a:8c:5a:b1:5a:47:b3:6c:
ec:36:15:50:39:ad:9c:7b:1b:5d:e7:be:ad:8d:6f:
17:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AC:8C:B9:AA:26:0F:C2:5E:D7:39:1A:43:3B:4F:9E:E5:73:DC:5F
X509v3 Authority Key Identifier:
keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:f1:c3:53:20:4e:2d:01:f7:92:48:91:15:a6:16:e0:ec:11:
ea:a9:89:15:db:9a:14:f4:4c:63:68:4a:29:84:8a:a7:0b:f2:
16:e2:75:e5:98:ce:41:4f:53:08:0d:91:d2:fd:50:a6:bb:4f:
98:dc:c9:2e:ba:13:07:ed:7d:1c:46:20:0c:62:8a:bb:fe:85:
28:4c:ed:f3:48:c0:3e:3a:8e:e4:7c:79:57:e0:c9:22:27:91:
88:e2:0b:77:8f:24:72:15:92:af:1e:eb:1b:25:e6:25:e2:96:
c1:93:f6:71:94:a8:62:a4:3a:f7:51:bf:9e:1f:dc:7b:ae:45:
3b:d9:3b:42:3b:61:78:d3:00:7a:38:0c:9d:13:b2:07:e8:97:
fe:73:81:07:b9:ac:a9:1b:90:71:36:fa:e5:0f:15:a4:76:43:
2b:38:cb:fb:4f:5c:24:28:5e:17:a5:8b:3f:fd:a8:6b:bd:6e:
bb:47:2c:e8:c9:0e:34:cc:60:d4:d3:b7:ea:68:0a:53:d2:11:
6c:a3:9b:7f:ce:5c:d9:af:9e:9c:fd:9e:7d:3e:88:53:5a:f5:
9f:37:da:08:21:9d:7b:c1:50:e9:3d:2f:75:d8:e2:1c:3b:ca:
bd:1e:46:93:e0:7c:8d:c1:b4:a6:dc:96:6b:e7:2a:50:f6:75:
4a:d0:b1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:42:15 2026 by rpki-client