
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
File: FyPctBoEJopYeqzoz9na5fn1Hfc.mft (raw, json)
Hash identifier: flpTdcMIGc+m8ffanpvxpmg1FC28xHRL/BV8GJou5Do=
Subject key identifier: AD:68:05:4F:D8:FB:AC:DB:1F:31:28:44:6C:A8:9E:C2:74:A9:09:BA
Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Certificate serial: 0893
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
Manifest number: 085B
Signing time: Wed 22 Jul 2026 21:31:02 +0000
Manifest this update: Wed 22 Jul 2026 21:31:01 +0000
Manifest next update: Wed 29 Jul 2026 21:31:01 +0000
Files and hashes: 1: FyPctBoEJopYeqzoz9na5fn1Hfc.crl (hash: GY+ncY7ZSyB/LBxEea2tjotFXU8dPfWdLo+z/BEZ8QA=)
2: 8037BC50EB2E11EDB835EF4AC4F9AE02.roa (hash: gCroShM9MPy9hkOuo/TmE62NW3KmfiqLbSetYf/sQtk=)
3: 7AA7B416E01011EEA1CA127CC4F9AE02.roa (hash: SfIPzDPx+vk2QttaA/BFMlEfJZc2n17RQ43Dr50jvLs=)
4: 2840D3A225FF11EBAF634966C4F9AE02.roa (hash: L0U0RcVKixHM80nNmnQh09Mgzv1FHdU2PsTdoVdSV8U=)
5: 68DAAA1A749711EFB4EDA45FC4F9AE02.roa (hash: WAr5HKGDc2RarHCoXbJPfLibBljcpHIXpcteTrNCl3M=)
6: 26D56F6425FF11EBAF634966C4F9AE02.roa (hash: Gd7CExBZM5BBf+T9t2y84eMZfBgGlZ7L5uDoPb1T73A=)
7: 3CD29BF4D46911EE8B36431CC4F9AE02.roa (hash: KYjRsSmZFGs+FoyNnOuXfuvWzg10BoAKlArtMc3CJYg=)
8: 284E9E9E1D5611EB891ADC6CC4F9AE02.roa (hash: fTOR9/QC+OhH2+hrGoKHcs/jMnPvIkd1epQi4PDNnQE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2195 (0x893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Validity
Not Before: Jul 22 21:31:01 2026 GMT
Not After : Jul 29 21:31:01 2026 GMT
Subject: CN=6a613695-a71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:59:fc:8d:93:d0:45:d4:c5:64:d6:40:01:38:
75:3d:3d:55:e8:5a:13:b2:32:2d:9c:a7:e4:67:58:
cf:4a:00:0a:03:76:54:ff:1f:f8:a4:99:5b:d7:06:
36:6c:f8:87:b3:6e:09:d6:02:ce:60:f1:0b:0d:66:
aa:9b:55:83:1f:05:8a:85:04:08:14:ef:65:ac:53:
67:3a:45:07:8d:ae:3a:a5:df:57:fc:0b:af:98:c7:
a7:3f:e8:57:91:ce:f3:6d:5b:ae:de:88:85:5d:6e:
ea:47:91:5e:79:81:7b:19:46:24:31:17:81:ee:54:
50:97:04:ab:ef:0c:85:e8:f2:6c:2e:8a:1e:86:c0:
b6:6d:c5:37:7d:50:e7:96:0c:bc:5b:c4:b0:16:ac:
13:4f:2e:e9:fe:ec:ec:f2:0f:41:4b:7d:da:bd:88:
e1:40:2e:03:fc:98:3f:6b:55:61:a7:f3:48:3d:ae:
37:57:3f:81:f0:14:ac:0d:1a:4d:ad:b0:28:51:73:
9a:f9:cc:55:a2:d3:dd:d3:ba:46:08:5a:23:27:e2:
35:1c:5d:38:be:b4:81:87:c0:a6:f5:3b:c7:ad:d8:
75:92:36:83:bd:b6:59:9b:00:ed:f3:99:ed:14:42:
41:4b:61:98:82:13:63:3f:7a:2c:7a:c5:45:50:8f:
ee:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:68:05:4F:D8:FB:AC:DB:1F:31:28:44:6C:A8:9E:C2:74:A9:09:BA
X509v3 Authority Key Identifier:
keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:f5:27:18:cf:f1:a4:97:77:94:47:d0:b7:0d:10:eb:4d:84:
dd:59:90:56:c8:ba:95:3e:3a:b6:7b:ea:b9:58:8b:66:f4:cf:
bc:1a:84:b9:f6:6e:33:47:66:58:e6:95:bb:ef:cc:c0:07:50:
85:4f:f7:5b:ef:a4:59:c3:cc:4c:55:16:47:5d:41:22:bb:05:
07:b6:b2:c2:b8:eb:d5:d1:5e:3a:3c:91:0a:38:18:8d:6c:21:
3c:31:5b:5d:d5:fd:df:8f:d7:af:b1:21:a0:09:1e:36:42:3a:
ec:80:2c:95:fd:67:35:9b:87:60:a5:82:4b:eb:91:ca:21:82:
c4:7b:e3:d6:c5:89:d8:a8:d6:06:a3:8b:0c:b1:0a:d3:69:6d:
1f:50:5d:67:83:74:c1:2c:02:ab:e0:87:03:8a:b8:5b:a7:a3:
1f:a4:eb:9d:11:e8:2a:bf:d6:1e:01:5a:f5:61:45:5c:7b:02:
aa:f6:c4:17:ae:ab:bc:84:3e:32:b1:d5:3b:a6:c7:97:3a:85:
5c:c1:49:e1:92:f8:08:d5:08:87:cf:8d:4c:d3:d9:91:d2:01:
e6:38:78:fe:32:b8:c7:19:0c:7c:62:d1:2c:d8:c8:e2:e9:7f:
7c:ba:e5:f0:8d:a5:15:56:e3:a0:a4:ee:36:c0:5c:63:5d:67:
93:07:4d:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1
RjlGNTFERjcwHhcNMjYwNzIyMjEzMTAxWhcNMjYwNzI5MjEzMTAxWjAYMRYwFAYD
VQQDEw02YTYxMzY5NS1hNzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz1n8jZPQRdTFZNZAATh1PT1V6FoTsjItnKfkZ1jPSgAKA3ZU/x/4pJlb1wY2
bPiHs24J1gLOYPELDWaqm1WDHwWKhQQIFO9lrFNnOkUHja46pd9X/AuvmMenP+hX
kc7zbVuu3oiFXW7qR5FeeYF7GUYkMReB7lRQlwSr7wyF6PJsLooehsC2bcU3fVDn
lgy8W8SwFqwTTy7p/uzs8g9BS33avYjhQC4D/Jg/a1Vhp/NIPa43Vz+B8BSsDRpN
rbAoUXOa+cxVotPd07pGCFojJ+I1HF04vrSBh8Cm9TvHrdh1kjaDvbZZmwDt85nt
FEJBS2GYghNjP3osesVFUI/u/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK1oBU/Y
+6zbHzEoRGyonsJ0qQm6MB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4
N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI
ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OURDQi9FNEMwRjU2QzE4N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpv
cFllcXpvejluYTVmbjFIZmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhvUnGM/xpJd3lEfQtw0Q602E3VmQVsi6lT46tnvquViLZvTPvBqEufZuM0dm
WOaVu+/MwAdQhU/3W++kWcPMTFUWR11BIrsFB7aywrjr1dFeOjyRCjgYjWwhPDFb
XdX934/Xr7EhoAkeNkI67IAslf1nNZuHYKWCS+uRyiGCxHvj1sWJ2KjWBqOLDLEK
02ltH1BdZ4N0wSwCq+CHA4q4W6ejH6TrnRHoKr/WHgFa9WFFXHsCqvbEF66rvIQ+
MrHVO6bHlzqFXMFJ4ZL4CNUIh8+NTNPZkdIB5jh4/jK4xxkMfGLRLNjI4ul/fLrl
8I2lFVbjoKTuNsBcY11nkwdN0g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:49:40 2026 by rpki-client