
$ rpki-client -vvf rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
File: FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft (raw, json)
Hash identifier: n5HPm0ttR23w0Q4kS+QTjRY4A7VbCxCTbFVLu+/w9+g=
Subject key identifier: 6B:BF:13:0C:88:B3:3A:0C:D8:91:75:1E:70:A4:3C:6B:7C:81:C2:7C
Authority key identifier: 16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14
Certificate issuer: /CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
Certificate serial: 02B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
Manifest number: 029C
Signing time: Wed 13 May 2026 01:43:15 +0000
Manifest this update: Wed 13 May 2026 01:43:15 +0000
Manifest next update: Wed 20 May 2026 01:43:15 +0000
Files and hashes: 1: FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl (hash: PFFYbHTSk7dQvgJebyr6izJAm+gxeBXtrnHvM5I20RE=)
2: 7D0DFE0A5A3211EDB637E665C4F9AE02.roa (hash: EgHfoXDPWkSf9EMELvfB9wprgOdP6M6i5C22XOX+eIg=)
3: 1083BE64499711EE86AE452DC4F9AE02.roa (hash: 9LFaLc8meqLBp289mlYACBm+5v+NFT6EUQrjqf3aYig=)
4: 7DD0E8845A3211EDB637E665C4F9AE02.roa (hash: eg3pUwfwQDE+9YQzOG9BMq0Bkyet7crQzC1+mV0wngc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl
rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690 (0x2b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91314BC, serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
Validity
Not Before: May 13 01:43:15 2026 GMT
Not After : May 20 01:43:15 2026 GMT
Subject: CN=6a03d733-06e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1a:f5:5c:3d:8d:a7:9f:9d:72:91:77:9f:84:
52:7c:d8:7e:6a:d1:e9:0c:73:c5:3c:f6:dc:30:44:
84:72:7d:c6:10:b9:53:32:1f:9d:a7:ec:56:1c:b5:
eb:2d:55:16:44:0b:5b:8d:1f:09:e8:81:84:be:2b:
55:6b:e5:38:cd:a6:a6:fa:c9:e2:1f:a1:64:8f:78:
c5:84:31:c8:a5:cd:a2:6d:fe:30:bf:3a:29:18:23:
7b:4e:da:8b:b2:28:92:9f:52:44:eb:15:0c:ba:27:
f4:72:5a:e1:b7:a4:d2:fb:5e:ab:c4:78:40:3a:71:
c6:5a:bb:e9:85:d1:f0:95:e1:99:b9:b0:af:e4:2e:
09:c8:a5:25:39:b9:73:1c:ed:32:ad:c8:84:25:a2:
5b:f0:49:c1:76:58:43:63:db:10:f0:2f:2f:a7:bd:
88:b7:db:9c:c0:1d:02:74:ce:66:24:50:8a:62:c7:
a9:46:87:b5:8b:8b:b8:8c:d1:7c:4c:a0:08:53:a5:
95:ea:3a:a4:41:97:2c:4a:fd:7d:34:95:10:f0:5f:
8a:6e:76:c7:7d:2b:7e:6f:a6:1e:bf:11:05:27:99:
4d:79:1b:e3:8d:b8:d6:e4:ac:8c:40:ae:71:ae:12:
30:87:d4:0f:91:c1:b1:9d:37:96:29:c9:3e:08:f8:
bd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BF:13:0C:88:B3:3A:0C:D8:91:75:1E:70:A4:3C:6B:7C:81:C2:7C
X509v3 Authority Key Identifier:
keyid:16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:88:95:c2:2b:61:36:33:f8:b1:0d:e4:57:a2:e7:74:2f:88:
cd:9d:f3:6f:af:4e:87:61:46:e1:2f:0c:57:1e:d1:48:5f:46:
92:d5:f8:b4:0c:26:e3:3e:7d:5b:32:63:0a:52:61:9e:2f:d3:
00:01:72:39:49:c1:9a:25:36:64:07:33:d9:f8:5b:48:b4:cf:
d2:a2:82:e9:44:6a:ca:6a:66:5b:07:09:81:74:e3:6c:f6:7e:
94:83:2b:cb:16:34:38:f8:d2:64:92:5c:78:5b:a0:a8:c3:cf:
01:9a:79:35:71:f8:ee:49:b8:67:17:29:1e:25:ab:09:81:6f:
a4:82:0f:47:fe:a4:1c:4d:f1:83:86:c8:30:54:9b:93:01:a3:
40:92:08:c0:c3:0f:e1:92:a0:23:03:13:0b:e6:29:66:34:f3:
dc:bf:06:5b:55:5e:e4:38:1f:3d:93:9b:5a:de:c6:a7:30:25:
df:14:cc:72:15:dc:41:b6:84:da:11:64:e2:66:bd:0a:3a:ed:
fe:b3:60:25:0d:b3:87:41:3d:4f:ce:61:fb:b5:44:1a:0e:d4:
4b:11:cf:f2:69:09:d4:ba:d2:24:62:dd:f7:6c:41:d3:6a:51:
ce:a0:ea:09:fe:29:cb:be:07:31:9c:47:f0:71:89:76:ec:d2:
8a:bd:06:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICArIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE0QkMxMTAvBgNVBAUTKDE2ODQxNUMwQzEzNDAxQzBENzcxNTcxREY4NkY4Q0Q1
Rjg1MDNCMTQwHhcNMjYwNTEzMDE0MzE1WhcNMjYwNTIwMDE0MzE1WjAYMRYwFAYD
VQQDEw02YTAzZDczMy0wNmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Br1XD2Np5+dcpF3n4RSfNh+atHpDHPFPPbcMESEcn3GELlTMh+dp+xWHLXr
LVUWRAtbjR8J6IGEvitVa+U4zaam+sniH6Fkj3jFhDHIpc2ibf4wvzopGCN7TtqL
siiSn1JE6xUMuif0clrht6TS+16rxHhAOnHGWrvphdHwleGZubCv5C4JyKUlOblz
HO0yrciEJaJb8EnBdlhDY9sQ8C8vp72It9ucwB0CdM5mJFCKYsepRoe1i4u4jNF8
TKAIU6WV6jqkQZcsSv19NJUQ8F+KbnbHfSt+b6YevxEFJ5lNeRvjjbjW5KyMQK5x
rhIwh9QPkcGxnTeWKck+CPi98wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGu/EwyI
szoM2JF1HnCkPGt8gcJ8MB8GA1UdIwQYMBaAFBaEFcDBNAHA13FXHfhvjNX4UDsU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTRCQy83RkQwMTY2QzVB
MkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFjRFhjVmNkLUctTTFmaFFP
eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZvUVZ3TUUwQWNEWGNWY2QtRy1NMWZoUU94US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTRCQy83RkQwMTY2QzVBMkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFj
RFhjVmNkLUctTTFmaFFPeFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb4iVwithNjP4sQ3kV6LndC+IzZ3zb69Oh2FG4S8MVx7RSF9GktX4tAwm4z59
WzJjClJhni/TAAFyOUnBmiU2ZAcz2fhbSLTP0qKC6URqympmWwcJgXTjbPZ+lIMr
yxY0OPjSZJJceFugqMPPAZp5NXH47km4ZxcpHiWrCYFvpIIPR/6kHE3xg4bIMFSb
kwGjQJIIwMMP4ZKgIwMTC+YpZjTz3L8GW1Ve5DgfPZObWt7GpzAl3xTMchXcQbaE
2hFk4ma9Cjrt/rNgJQ2zh0E9T85h+7VEGg7USxHP8mkJ1LrSJGLd92xB02pRzqDq
Cf4py74HMZxH8HGJduzSir0GMQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:32:03 2026 by rpki-client