
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft
File: FU2hKxG1QFxQywEZ42qL8-0NIbw.mft (raw, json)
Hash identifier: tvvmn2hZgKStfn67hCy1UUpu4q5lDcyKzulebfJ6vkM=
Subject key identifier: BC:ED:8C:84:57:EF:2E:32:14:41:14:D5:6C:49:D4:17:6C:37:28:84
Authority key identifier: 15:4D:A1:2B:11:B5:40:5C:50:CB:01:19:E3:6A:8B:F3:ED:0D:21:BC
Certificate issuer: /CN=A912A2C1/serialNumber=154DA12B11B5405C50CB0119E36A8BF3ED0D21BC
Certificate serial: 1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FU2hKxG1QFxQywEZ42qL8-0NIbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft
Manifest number: 1E
Signing time: Thu 23 Jul 2026 10:58:26 +0000
Manifest this update: Thu 23 Jul 2026 10:58:25 +0000
Manifest next update: Thu 30 Jul 2026 10:58:25 +0000
Files and hashes: 1: FU2hKxG1QFxQywEZ42qL8-0NIbw.crl (hash: V6bPzO2x7rEOoIQmplp6CzXmeKMZxY51Yseh+mi4Nn0=)
2: 77A068EA57D611F1A509C21FCD833773.roa (hash: obXRKQp33behMNw0kLg97yChlSrOJ2Iv9yjscfOnr/I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.crl
rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FU2hKxG1QFxQywEZ42qL8-0NIbw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:58:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A2C1, serialNumber=154DA12B11B5405C50CB0119E36A8BF3ED0D21BC
Validity
Not Before: Jul 23 10:58:25 2026 GMT
Not After : Jul 30 10:58:25 2026 GMT
Subject: CN=6a61f3d2-119f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:07:ec:e8:59:41:6c:fa:c3:cf:46:35:8b:
d4:2d:ad:db:2a:77:54:26:4e:62:8b:28:64:0e:0b:
48:4e:3c:e1:1e:89:e3:5d:3d:8b:08:a3:25:4e:df:
7b:cb:0f:df:28:a5:fa:53:b3:95:a9:86:ae:22:a2:
bb:55:ba:10:91:d2:b8:52:db:27:a2:d9:21:cb:a6:
be:2e:aa:5a:a5:ee:43:37:ba:91:3e:45:39:9a:b0:
ee:42:64:95:20:45:28:cb:41:29:e7:4b:c6:ef:75:
5d:82:76:7a:43:87:9a:ea:32:88:56:b6:2b:80:7d:
b4:a4:1a:9e:d3:e2:b1:7b:8a:29:c4:d3:17:5b:c4:
7e:e6:5b:8a:8e:aa:16:67:73:7a:f5:cb:4a:5e:b8:
2d:a6:8a:1b:cd:af:67:67:80:62:a0:da:bf:e0:3b:
1f:12:7a:e8:74:aa:f3:79:73:9b:73:ea:93:38:8b:
6a:0b:79:ad:e9:1f:ba:d1:cc:39:00:c8:80:16:b0:
c0:3b:cc:99:f5:68:27:ee:cb:fe:4a:ac:01:01:90:
0b:55:a5:78:7e:22:66:38:80:a4:27:00:e9:5d:b5:
35:c6:e7:dd:34:b1:25:9a:ef:0a:90:2c:be:a2:7a:
dd:82:c6:4b:37:81:52:35:5b:62:a8:f0:30:4b:c3:
3f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:ED:8C:84:57:EF:2E:32:14:41:14:D5:6C:49:D4:17:6C:37:28:84
X509v3 Authority Key Identifier:
keyid:15:4D:A1:2B:11:B5:40:5C:50:CB:01:19:E3:6A:8B:F3:ED:0D:21:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FU2hKxG1QFxQywEZ42qL8-0NIbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:34:8e:2c:c4:8c:c3:98:7b:e7:62:e5:0f:af:e5:55:de:fe:
2b:2e:c8:81:e6:48:f9:1e:95:e9:9d:22:c1:33:33:fa:36:5f:
80:60:c5:68:d1:c2:62:a4:aa:4c:10:7f:7b:79:48:97:f1:48:
bc:83:b2:40:78:f8:65:ac:8d:f3:cf:4c:63:cc:8b:95:d1:1f:
6d:79:5d:80:03:b4:27:ff:cd:c5:8b:d7:c1:71:fe:9e:33:ac:
17:07:2c:02:25:02:52:64:c7:f2:d4:93:47:db:7b:7a:90:9d:
1c:76:d0:99:1b:b7:ca:0d:f4:f4:5b:03:ca:78:d8:c9:e2:af:
fd:d0:f8:a8:8a:f4:f0:ad:43:f9:a3:76:6d:7b:91:22:d5:a2:
77:83:f1:28:38:6f:6a:81:42:75:65:04:22:18:3e:bd:e7:20:
3c:34:27:d9:c7:4a:07:20:82:7d:3e:fd:2c:20:e0:3d:40:8d:
f7:ac:fb:fc:86:36:89:4b:31:70:0d:87:b6:a2:8e:f3:50:d7:
e5:16:e8:c0:33:9a:fc:18:88:d6:81:3c:65:e3:cf:92:1a:b7:
28:c1:08:57:5e:c0:34:2b:3e:6f:fb:d7:e4:08:89:fe:56:11:
1b:ef:90:e9:df:49:de:77:3b:13:83:fb:9e:4b:30:96:3b:c2:
61:0b:25:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:20:39 2026 by rpki-client