
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
File: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft (raw, json)
Hash identifier: TY6CnahcHSA5NRHqf3Pdk9K9lJV+gMi8UWoVmhxpn/Y=
Subject key identifier: 61:80:D1:9E:CC:C2:30:02:81:6B:B6:7A:5B:AC:85:9A:C6:A6:93:95
Authority key identifier: 14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8
Certificate issuer: /CN=A911C564/serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8
Certificate serial: 05F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
Manifest number: 05EB
Signing time: Tue 24 Mar 2026 22:38:34 +0000
Manifest this update: Tue 24 Mar 2026 22:38:34 +0000
Manifest next update: Tue 31 Mar 2026 22:38:34 +0000
Files and hashes: 1: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl (hash: s7B+sRPqDscXVW83zHCZSFWGHZk5Sk39P9lMvZJ77zI=)
2: A3B2B0A8EE9711EB8EF1A50AC4F9AE02.roa (hash: NQX7JB0+/eWjbVIYCyPV0TJwdeszpx4RpQyQ+f5a0uw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl
rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:38:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1522 (0x5f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C564, serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8
Validity
Not Before: Mar 24 22:38:34 2026 GMT
Not After : Mar 31 22:38:34 2026 GMT
Subject: CN=69c3126a-5b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9f:7f:c4:b2:fd:82:76:e0:17:98:11:20:b7:
43:85:16:39:46:af:dd:7a:a1:c9:77:28:5d:44:e8:
2b:90:ce:e6:cf:87:1b:dc:ce:ed:f5:82:ac:77:32:
75:98:a2:06:fb:b7:12:aa:58:ac:d0:e6:45:81:97:
ff:48:2f:19:a4:10:fd:3b:4e:c1:ea:fb:5d:8e:e3:
80:01:f2:27:c7:03:6f:a2:94:b3:eb:e1:a1:ec:40:
43:30:12:d0:30:f7:b2:e9:70:2f:43:4b:b4:07:1c:
a2:bf:62:5f:09:e9:34:f1:17:7d:0a:16:f6:a1:97:
b1:be:f0:b4:16:7b:d7:80:6d:32:08:4d:5a:fc:34:
04:5f:72:60:e1:6c:aa:bf:3c:ec:a4:67:56:4a:ec:
97:f7:35:d5:ec:27:01:bb:51:ac:53:19:ed:da:4d:
2b:2b:a1:4e:8d:91:81:28:33:57:85:4e:3a:32:58:
3c:32:34:65:68:df:99:26:3a:13:4c:cc:49:37:90:
48:5a:f1:11:f6:df:f7:ec:18:b8:48:96:79:ee:89:
70:93:b5:dc:6c:87:cc:c2:85:79:91:ea:48:08:24:
ac:5c:20:c5:f1:46:ed:59:76:df:9e:46:c9:ed:db:
35:a1:00:63:ad:2d:1b:1a:0e:61:9c:11:64:c2:21:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:80:D1:9E:CC:C2:30:02:81:6B:B6:7A:5B:AC:85:9A:C6:A6:93:95
X509v3 Authority Key Identifier:
keyid:14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:b4:ba:15:2e:3b:8f:cf:f7:09:44:f5:45:45:38:88:78:4a:
bc:96:7a:a6:86:03:73:b4:1c:12:30:64:d1:65:28:24:2c:7b:
0a:ee:3e:34:2f:f6:2c:ff:c2:f9:03:cf:d7:3c:18:df:07:ff:
3c:f5:a8:6d:cb:e0:a8:b8:c7:20:23:dc:eb:99:00:60:c3:b8:
71:1e:7d:9f:90:05:dc:29:e7:e9:4b:69:67:e4:b5:f8:87:13:
44:32:95:0e:b5:25:ff:c5:f2:37:43:65:5a:b8:05:bc:a5:db:
6c:14:fc:85:f0:5e:3d:85:36:30:f8:fb:6e:f6:62:93:90:1a:
2d:27:3b:de:8b:ce:02:27:10:d9:ee:51:68:0e:91:ae:52:a3:
0f:bc:0d:75:22:5c:a8:57:d2:e4:4b:e8:74:13:d4:ae:48:39:
89:48:f0:3d:ad:2d:14:48:10:56:29:40:a2:00:97:14:10:fd:
7e:c3:28:7d:93:ba:b6:4d:e7:84:d2:63:2b:d7:ec:f7:83:b9:
cd:2e:73:e6:c5:c2:32:28:f0:f5:1b:be:49:92:26:6f:9a:ff:
85:98:6b:92:17:05:f2:b9:36:25:02:66:8e:09:63:7f:d9:be:
64:19:3e:14:b0:83:24:f1:da:7e:88:be:3d:4e:12:34:61:4d:
c0:52:00:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:15:50 2026 by rpki-client