
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
File: FyPctBoEJopYeqzoz9na5fn1Hfc.mft (raw, json)
Hash identifier: /l1i+eP0iR1Yl7jPdHlg/hCzjUH7pAzwhdVmMxJGkhE=
Subject key identifier: 72:49:26:82:CE:EF:96:AC:CA:09:8C:30:B2:CE:01:B2:F4:C7:97:9B
Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Certificate serial: 08B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
Manifest number: 087D
Signing time: Sat 26 Sep 2026 20:58:39 +0000
Manifest this update: Sat 26 Sep 2026 20:58:39 +0000
Manifest next update: Sat 03 Oct 2026 20:58:39 +0000
Files and hashes: 1: FyPctBoEJopYeqzoz9na5fn1Hfc.crl (hash: hHU7WTVgVOki5+Le3rKaZPg9xyKlZ/rQrXGrrJLwshc=)
2: 284E9E9E1D5611EB891ADC6CC4F9AE02.roa (hash: fTOR9/QC+OhH2+hrGoKHcs/jMnPvIkd1epQi4PDNnQE=)
3: 7AA7B416E01011EEA1CA127CC4F9AE02.roa (hash: SfIPzDPx+vk2QttaA/BFMlEfJZc2n17RQ43Dr50jvLs=)
4: 26D56F6425FF11EBAF634966C4F9AE02.roa (hash: Gd7CExBZM5BBf+T9t2y84eMZfBgGlZ7L5uDoPb1T73A=)
5: 8037BC50EB2E11EDB835EF4AC4F9AE02.roa (hash: gCroShM9MPy9hkOuo/TmE62NW3KmfiqLbSetYf/sQtk=)
6: 3CD29BF4D46911EE8B36431CC4F9AE02.roa (hash: KYjRsSmZFGs+FoyNnOuXfuvWzg10BoAKlArtMc3CJYg=)
7: 2840D3A225FF11EBAF634966C4F9AE02.roa (hash: L0U0RcVKixHM80nNmnQh09Mgzv1FHdU2PsTdoVdSV8U=)
8: 68DAAA1A749711EFB4EDA45FC4F9AE02.roa (hash: WAr5HKGDc2RarHCoXbJPfLibBljcpHIXpcteTrNCl3M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 20:58:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2229 (0x8b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Validity
Not Before: Sep 26 20:58:39 2026 GMT
Not After : Oct 3 20:58:39 2026 GMT
Subject: CN=6ab831ff-a303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:76:24:1f:b6:b4:0e:8e:c5:17:ae:1d:9d:06:
45:48:a5:07:c6:9a:13:97:fb:7d:55:4d:e5:e7:47:
88:4c:bd:06:95:ce:00:b5:1a:01:d0:6f:7b:5d:fd:
a0:11:49:a2:9b:bb:df:36:57:58:d8:14:2b:fa:50:
7c:51:c7:30:96:8b:02:df:84:eb:36:b8:a5:a6:e9:
89:46:66:85:0b:73:43:81:fd:59:76:5c:e7:e8:b2:
5e:91:5e:8d:40:c8:b1:61:de:0b:c2:06:0f:46:fa:
9e:db:15:0b:9d:3c:2e:81:8c:2c:ab:a5:16:03:e5:
74:e3:6d:f2:5a:fb:55:5b:d8:61:dd:f6:a2:90:03:
d7:ce:5e:ec:c3:88:96:bf:cb:50:64:11:6f:23:96:
e6:9d:71:2f:5a:95:78:ad:85:71:ae:8b:91:8f:d6:
eb:fc:48:cf:7e:b2:17:b0:19:7d:a0:cb:cb:83:ab:
5f:a3:2f:64:d3:17:59:b6:bb:db:8f:c0:f9:a3:43:
dd:f4:c6:ba:da:78:cb:35:bc:22:8b:ec:27:07:78:
2d:32:c8:df:72:2c:15:1f:83:43:0f:d6:e4:90:93:
8e:4b:08:09:0c:9c:1d:09:32:8f:89:01:c0:b8:fa:
f3:a0:f0:6d:18:0d:45:96:be:10:d3:0a:86:ec:d0:
63:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:49:26:82:CE:EF:96:AC:CA:09:8C:30:B2:CE:01:B2:F4:C7:97:9B
X509v3 Authority Key Identifier:
keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:57:e0:c2:c3:1c:3e:ea:97:69:f8:eb:03:f3:80:39:da:34:
83:12:68:57:8a:07:ef:4b:da:f7:6e:ff:ee:f5:3e:d1:1f:56:
21:b5:17:1f:8f:40:38:64:6e:7c:4d:75:f8:90:14:fc:3d:dc:
2a:31:19:05:8f:8f:70:65:cb:62:0c:33:ed:7c:5e:9c:c2:33:
36:6c:5c:ac:9b:cb:7a:1e:a4:b0:5c:a7:c0:cc:ff:bc:5c:c0:
a6:bf:a6:07:a2:34:87:72:a2:87:ee:4d:2d:3c:4c:ee:1f:c9:
7b:79:53:e6:4f:ef:46:04:e9:50:44:99:3b:42:c5:f9:cb:2a:
7c:da:31:28:f7:0d:a8:37:69:9c:80:fd:5d:a3:89:db:32:37:
4e:33:6a:db:1b:f3:f9:d2:5a:f2:4a:2f:c1:74:28:2a:8e:bb:
3f:d2:5e:fe:01:f9:29:49:b2:41:b1:f4:77:e1:09:31:42:da:
d2:26:cb:fc:18:98:d2:9c:24:b8:75:3c:68:30:f1:cd:9c:81:
fc:a3:fe:c3:5e:a7:e3:50:65:a7:ee:c2:ad:03:d8:87:58:3a:
30:5a:37:f3:e1:7e:86:40:fb:a9:19:0e:57:a0:3d:3a:77:48:
b4:9a:13:e9:d4:eb:dd:ab:f7:b1:4c:6e:99:19:2e:bc:aa:af:
46:67:dd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:04:37 2026 by rpki-client