
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
File: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft (raw, json)
Hash identifier: aIwW3GlERJAC6teCuRnus/Ot2xMT2+gEcVP9w6QmUWQ=
Subject key identifier: 62:11:B1:4C:23:06:9E:50:FB:11:28:3F:51:61:93:02:4F:2E:3E:1E
Authority key identifier: 14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8
Certificate issuer: /CN=A911C564/serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8
Certificate serial: 0652
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
Manifest number: 064A
Signing time: Tue 22 Sep 2026 22:21:36 +0000
Manifest this update: Tue 22 Sep 2026 22:21:35 +0000
Manifest next update: Tue 29 Sep 2026 22:21:35 +0000
Files and hashes: 1: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl (hash: 7CNw2zb1HqPIKNhXUzgF9zFFjUAd/ATKnAVfM0/MX/g=)
2: A3B2B0A8EE9711EB8EF1A50AC4F9AE02.roa (hash: LsWT9PH7lpuuB3Eu7lPQZ/DRwq+wHiTPxrXabXBYi5Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl
rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1618 (0x652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C564, serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8
Validity
Not Before: Sep 22 22:21:35 2026 GMT
Not After : Sep 29 22:21:35 2026 GMT
Subject: CN=6ab2ff6f-b827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a2:fd:07:a2:0b:e4:1c:73:7e:54:f8:51:69:
72:da:73:7f:2e:85:b1:20:de:8d:0c:06:ee:51:c5:
df:b1:95:fc:8b:d7:43:49:97:82:d8:d2:5b:60:63:
9f:9b:05:42:4f:e7:de:e6:ea:25:c6:c6:17:a6:75:
17:25:35:5f:41:21:82:62:4d:7d:4d:06:5f:d5:35:
2f:5a:51:a0:27:d2:6b:e7:d6:50:59:df:e9:b7:84:
d9:a2:3f:16:b9:d5:94:d8:9a:03:75:45:75:22:ea:
c8:a0:60:8c:b6:75:f0:e2:6a:cb:37:a8:ef:ec:08:
83:7b:3b:32:8c:92:1e:0c:0f:20:b3:61:25:aa:a4:
f7:0e:8e:f7:0f:34:23:79:97:05:9d:00:5b:10:71:
f8:41:23:65:00:16:05:bc:73:6e:c5:98:03:62:1e:
78:b5:2e:97:9b:fe:73:39:81:f9:d2:cb:6e:00:14:
8e:1b:5f:ed:4c:e2:12:ef:f1:b5:86:62:67:c2:b0:
1b:a6:06:a1:90:0d:2f:4a:20:c5:ce:2c:88:7b:19:
e1:66:41:77:e5:9a:58:5c:0c:32:03:9f:45:e5:ae:
a3:41:7a:9c:fa:38:dd:ee:20:9c:3b:33:fb:f2:9a:
be:70:dc:19:94:b3:1e:0b:b7:fd:0a:57:ad:99:a3:
8c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:11:B1:4C:23:06:9E:50:FB:11:28:3F:51:61:93:02:4F:2E:3E:1E
X509v3 Authority Key Identifier:
keyid:14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:b9:94:ef:38:ba:a7:10:43:d2:72:f0:34:c5:e1:1d:43:ba:
63:34:4a:dd:27:af:01:e0:a5:dc:f2:2d:f7:57:19:88:0d:fe:
db:5b:d1:a7:33:a5:3d:4d:3c:95:84:28:f6:42:c7:fc:bf:b9:
cb:76:fa:18:69:88:3e:0b:68:5e:a1:d4:04:84:d7:db:ae:6e:
8a:12:be:4f:b8:38:fb:13:17:e5:4e:81:eb:32:2c:9b:bb:68:
16:da:bd:36:6e:5a:35:27:41:20:f9:f0:3f:3a:ea:fa:c3:c2:
00:f4:43:cf:b1:4a:9e:d6:11:8a:29:35:b5:60:dd:04:df:54:
42:d3:09:ca:43:fe:c8:99:29:5a:17:72:6f:15:aa:48:a8:1c:
4d:a8:60:16:c8:7d:8d:89:a0:77:b4:27:3d:27:2e:15:12:8f:
77:15:e1:11:96:33:e8:9a:ef:7f:8f:cf:fa:c6:30:7e:ea:57:
6b:14:08:9b:d4:5a:80:c5:9c:ce:98:19:04:e2:0f:5a:00:0c:
7a:9f:37:84:30:5b:af:d1:3a:dc:fe:63:61:1d:e4:3e:cf:19:
6a:36:c2:f5:58:42:fd:e8:d4:56:60:e0:ba:c9:8f:e3:79:5a:
4d:9d:64:06:1d:4a:ad:9e:19:43:ff:1a:e9:0c:f4:a3:f4:40:
6c:9a:da:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM1NjQxMTAvBgNVBAUTKDE0MDJCNjRGOUFFNzgxNjFEMEQ2NURBNzI1RkREMEJC
QzhFMTUyRDgwHhcNMjYwOTIyMjIyMTM1WhcNMjYwOTI5MjIyMTM1WjAYMRYwFAYD
VQQDEw02YWIyZmY2Zi1iODI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz6L9B6IL5BxzflT4UWly2nN/LoWxIN6NDAbuUcXfsZX8i9dDSZeC2NJbYGOf
mwVCT+fe5uolxsYXpnUXJTVfQSGCYk19TQZf1TUvWlGgJ9Jr59ZQWd/pt4TZoj8W
udWU2JoDdUV1IurIoGCMtnXw4mrLN6jv7AiDezsyjJIeDA8gs2ElqqT3Do73DzQj
eZcFnQBbEHH4QSNlABYFvHNuxZgDYh54tS6Xm/5zOYH50stuABSOG1/tTOIS7/G1
hmJnwrAbpgahkA0vSiDFziyIexnhZkF35ZpYXAwyA59F5a6jQXqc+jjd7iCcOzP7
8pq+cNwZlLMeC7f9CletmaOMEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGIRsUwj
Bp5Q+xEoP1FhkwJPLj4eMB8GA1UdIwQYMBaAFBQCtk+a54Fh0NZdpyX90LvI4VLY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzU2NC9FODA4QUVENkVF
OTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdXSFExbDJuSmYzUXU4amhV
dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZBSzJUNXJuZ1dIUTFsMm5KZjNRdThqaFV0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzU2NC9FODA4QUVENkVFOTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdX
SFExbDJuSmYzUXU4amhVdGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkLmU7zi6pxBD0nLwNMXhHUO6YzRK3SevAeCl3PIt91cZiA3+21vRpzOlPU08
lYQo9kLH/L+5y3b6GGmIPgtoXqHUBITX265uihK+T7g4+xMX5U6B6zIsm7toFtq9
Nm5aNSdBIPnwPzrq+sPCAPRDz7FKntYRiik1tWDdBN9UQtMJykP+yJkpWhdybxWq
SKgcTahgFsh9jYmgd7QnPScuFRKPdxXhEZYz6Jrvf4/P+sYwfupXaxQIm9RagMWc
zpgZBOIPWgAMep83hDBbr9E63P5jYR3kPs8ZajbC9VhC/ejUVmDgusmP43laTZ1k
Bh1KrZ4ZQ/8a6Qz0o/RAbJrafg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:27:54 2026 by rpki-client