
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
File: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft (raw, json)
Hash identifier: QPlJPrbm31uudZORYbpYmfQ/3iSHQwz9QmFyf0hb59U=
Subject key identifier: D6:A5:D9:C0:39:36:2D:69:4A:AB:D1:5A:39:D8:18:52:8E:B3:8F:92
Authority key identifier: 14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8
Certificate issuer: /CN=A911C564/serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8
Certificate serial: 060B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
Manifest number: 0604
Signing time: Tue 12 May 2026 22:57:53 +0000
Manifest this update: Tue 12 May 2026 22:57:52 +0000
Manifest next update: Tue 19 May 2026 22:57:52 +0000
Files and hashes: 1: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl (hash: Ek+Pki3a2l/c4ONybPMT4TKW68jG/tgWtAOefdIRz/s=)
2: A3B2B0A8EE9711EB8EF1A50AC4F9AE02.roa (hash: NQX7JB0+/eWjbVIYCyPV0TJwdeszpx4RpQyQ+f5a0uw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl
rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:57:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1547 (0x60b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C564, serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8
Validity
Not Before: May 12 22:57:52 2026 GMT
Not After : May 19 22:57:52 2026 GMT
Subject: CN=6a03b070-9c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:de:9b:2b:e3:d9:cc:02:54:b0:c5:86:67:62:
d6:f0:9b:ea:fa:73:82:0c:fd:7f:f7:2c:a8:7e:c7:
36:87:c1:01:7c:55:56:fd:ba:9a:6e:e4:65:db:4d:
7e:8a:2f:40:cf:d0:98:a2:c1:48:c3:eb:47:99:b8:
9e:31:5d:61:07:1d:1b:6e:e4:54:34:32:4c:f0:58:
10:d2:e3:d9:d1:b5:73:a5:3a:62:e2:ab:62:57:41:
99:af:8d:41:9e:a6:8d:84:8f:66:eb:19:50:de:06:
3a:7b:2e:66:63:eb:79:d0:9e:02:b6:ad:91:0d:dc:
8d:b4:0c:2f:8a:bd:17:70:24:4d:87:4c:60:ce:1f:
69:d1:eb:b8:d9:9f:81:34:22:87:96:0a:b5:d1:4d:
2a:2a:31:0c:cb:cf:70:0c:f4:7c:b6:fd:99:45:f8:
31:a4:e7:29:15:ac:4f:36:2a:cf:56:17:d1:54:e4:
67:df:b5:07:bb:ed:68:6c:9c:b4:ce:27:54:82:42:
52:97:74:5c:ec:1f:6b:ad:41:00:b8:90:6b:f6:e7:
81:ca:5c:4f:95:be:02:0f:58:95:cc:e7:97:7b:e6:
57:37:8d:32:60:8b:57:8d:3d:4f:4a:0a:df:0f:15:
d6:2c:d9:0a:ea:97:82:de:fd:19:5a:ac:cd:81:7c:
96:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A5:D9:C0:39:36:2D:69:4A:AB:D1:5A:39:D8:18:52:8E:B3:8F:92
X509v3 Authority Key Identifier:
keyid:14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bd:d8:c0:60:12:1c:96:60:4a:15:13:ad:29:20:a0:fc:8d:
27:57:78:8b:64:ed:40:41:fb:01:f0:4d:9a:75:a1:26:76:6e:
ac:c0:ab:a0:97:59:cc:63:fc:ad:60:34:2c:5c:a8:0c:fb:28:
80:fd:b9:bb:e2:ef:7c:0b:4a:9e:de:95:e7:6e:74:d7:8a:ee:
16:78:cd:a0:c8:07:52:28:2a:47:ac:12:ef:cc:e5:cb:29:a1:
c3:2d:fa:db:99:dd:ee:5b:12:49:3e:39:e1:fe:c7:0c:75:60:
28:f7:02:8c:d7:f0:aa:1c:d0:d0:56:08:a4:50:ed:3c:cf:8a:
f1:9f:80:f7:db:48:2e:7b:12:46:ec:14:2f:1d:2b:a0:00:ff:
f2:21:25:a0:65:b5:18:75:9a:30:3c:8c:57:a7:42:8d:fd:01:
e0:ee:4f:f2:2c:99:2f:9b:6a:08:46:61:39:6f:06:04:2f:20:
5c:44:7e:36:08:c7:0c:9d:32:57:6b:ac:fa:92:73:80:c4:25:
6a:45:f5:71:aa:74:ba:5a:34:c1:df:57:27:38:41:50:28:a2:
84:7a:e6:13:da:df:de:16:c1:10:eb:be:76:6f:90:a4:45:55:
f1:53:c0:c7:96:80:22:77:a4:35:57:df:3a:f7:20:ac:74:3f:
4e:d9:59:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM1NjQxMTAvBgNVBAUTKDE0MDJCNjRGOUFFNzgxNjFEMEQ2NURBNzI1RkREMEJC
QzhFMTUyRDgwHhcNMjYwNTEyMjI1NzUyWhcNMjYwNTE5MjI1NzUyWjAYMRYwFAYD
VQQDEw02YTAzYjA3MC05YzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9d6bK+PZzAJUsMWGZ2LW8Jvq+nOCDP1/9yyofsc2h8EBfFVW/bqabuRl201+
ii9Az9CYosFIw+tHmbieMV1hBx0bbuRUNDJM8FgQ0uPZ0bVzpTpi4qtiV0GZr41B
nqaNhI9m6xlQ3gY6ey5mY+t50J4Ctq2RDdyNtAwvir0XcCRNh0xgzh9p0eu42Z+B
NCKHlgq10U0qKjEMy89wDPR8tv2ZRfgxpOcpFaxPNirPVhfRVORn37UHu+1obJy0
zidUgkJSl3Rc7B9rrUEAuJBr9ueBylxPlb4CD1iVzOeXe+ZXN40yYItXjT1PSgrf
DxXWLNkK6peC3v0ZWqzNgXyWWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNal2cA5
Ni1pSqvRWjnYGFKOs4+SMB8GA1UdIwQYMBaAFBQCtk+a54Fh0NZdpyX90LvI4VLY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzU2NC9FODA4QUVENkVF
OTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdXSFExbDJuSmYzUXU4amhV
dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZBSzJUNXJuZ1dIUTFsMm5KZjNRdThqaFV0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzU2NC9FODA4QUVENkVFOTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdX
SFExbDJuSmYzUXU4amhVdGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb73YwGASHJZgShUTrSkgoPyNJ1d4i2TtQEH7AfBNmnWhJnZurMCroJdZzGP8
rWA0LFyoDPsogP25u+LvfAtKnt6V525014ruFnjNoMgHUigqR6wS78zlyymhwy36
25nd7lsSST454f7HDHVgKPcCjNfwqhzQ0FYIpFDtPM+K8Z+A99tILnsSRuwULx0r
oAD/8iEloGW1GHWaMDyMV6dCjf0B4O5P8iyZL5tqCEZhOW8GBC8gXER+NgjHDJ0y
V2us+pJzgMQlakX1cap0ulo0wd9XJzhBUCiihHrmE9rf3hbBEOu+dm+QpEVV8VPA
x5aAInekNVffOvcgrHQ/TtlZqg==
-----END CERTIFICATE-----
Generated at Wed May 13 06:32:52 2026 by rpki-client