
$ rpki-client -vvf rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
File: fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft (raw, json)
Hash identifier: izoElmH7qpI/tnN+LrYUjC8aHRgSqo/mBiOnDoIWyWY=
Subject key identifier: E5:5A:7D:2D:F2:1A:7C:23:46:01:BB:B1:0E:63:84:F6:3F:BD:00:3A
Authority key identifier: 7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB
Certificate issuer: /CN=A91380B5/serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
Certificate serial: 0417
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
Manifest number: 0405
Signing time: Thu 23 Jul 2026 01:19:28 +0000
Manifest this update: Thu 23 Jul 2026 01:19:28 +0000
Manifest next update: Thu 30 Jul 2026 01:19:28 +0000
Files and hashes: 1: fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl (hash: UwwEqo2k4g+dEVtd92MX5EaMKhFTAZMkthZcjKmRprg=)
2: 121437B45ABB11EF8C696E58C4F9AE02.roa (hash: 5qVS8yAP9geafMCui47y2bneVvGFNSs25MQvHFvL3Q0=)
3: 245B417CADD411EE95FF6C6DC4F9AE02.roa (hash: gLOFNsHejik+yQKsEBrjAw7cANoRp3jJQV4pA0a+JR4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl
rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1047 (0x417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91380B5, serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
Validity
Not Before: Jul 23 01:19:28 2026 GMT
Not After : Jul 30 01:19:28 2026 GMT
Subject: CN=6a616c20-51a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:85:9d:06:03:87:81:af:7d:3e:1d:29:61:
df:73:79:17:35:ee:a4:7c:15:32:de:9d:25:8f:b3:
08:5e:33:eb:6f:04:9b:d2:1a:fa:bb:85:88:00:7b:
28:d3:61:c6:ba:4e:e9:21:38:3c:d4:81:e7:e7:fc:
96:bb:81:eb:9a:f2:3a:53:7c:c6:88:74:30:13:fe:
db:ae:d0:3f:07:cd:54:41:d8:57:b9:50:1c:19:56:
92:d5:0d:b8:b7:c4:a9:95:57:6c:3e:4a:ff:10:68:
1a:d7:a4:3e:d7:de:a2:82:3e:c9:16:e8:a3:5d:e4:
f9:1a:2c:a4:8b:47:44:cc:47:5d:b2:b4:ee:a1:6d:
fc:32:67:23:bb:c7:73:bf:ad:23:b1:b4:a4:80:35:
cf:ca:71:3e:91:be:d0:b7:d2:d3:e7:4b:c0:a8:c6:
16:f9:d6:b9:e3:4e:d1:ea:e6:fd:b5:c1:93:ea:69:
64:62:09:9b:e8:cb:06:86:0c:46:a2:5b:3b:c4:0c:
0d:09:21:9c:b9:1a:ba:c6:d0:b1:47:f0:9f:f5:86:
66:4b:6f:fe:9e:4a:42:9c:ef:5a:f9:e5:3f:3e:3a:
4c:97:2b:c7:4b:6c:f3:9d:cc:d5:6f:ab:a8:42:14:
ac:be:38:8a:c4:74:95:ed:ab:6b:b2:37:ea:e4:84:
72:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5A:7D:2D:F2:1A:7C:23:46:01:BB:B1:0E:63:84:F6:3F:BD:00:3A
X509v3 Authority Key Identifier:
keyid:7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ef:c0:2e:58:23:50:50:30:c8:72:b1:9c:9d:5d:b2:ee:7f:
8e:c4:ed:d3:fc:76:2a:d9:64:7b:78:8e:82:63:ed:45:c8:60:
3a:07:51:9d:a2:80:44:a8:f7:b0:31:eb:f9:df:11:d9:47:7c:
5e:60:13:d4:8a:1a:82:87:57:26:7e:be:a2:c8:51:22:e7:4e:
7a:ee:d5:8f:72:4d:8c:04:d2:16:67:b2:d1:4d:a2:8d:21:95:
08:ab:be:6f:29:67:15:44:12:e5:73:e9:7b:9d:c4:db:07:13:
64:b4:d8:6c:f4:06:e4:68:99:9f:ba:d8:56:ee:25:61:5e:9d:
09:9f:35:b2:78:d1:70:bd:45:73:fa:04:fc:8b:49:5c:63:ed:
15:10:21:55:7c:fd:1b:36:2d:f8:13:32:0c:8c:1f:47:02:c6:
89:2e:1d:e2:a3:03:70:c7:c4:94:50:d2:42:51:13:4a:2c:92:
8f:05:a8:36:35:6e:d3:5d:75:00:f6:b2:4c:4a:53:f2:19:7f:
69:45:62:b1:fc:fd:c3:42:43:fb:32:3e:aa:28:db:07:f2:30:
56:8b:6a:3d:0d:43:23:da:55:0a:14:02:75:44:33:a4:5b:60:
b2:b9:78:ea:8a:3a:71:8a:3a:f8:d2:ad:ec:31:db:27:15:34:
59:b2:67:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgwQjUxMTAvBgNVBAUTKDdFNjVDNThGQTM0M0ExMEM1MzQzNTBBQjQ5N0ZEMDkw
Q0VFRkJGQkIwHhcNMjYwNzIzMDExOTI4WhcNMjYwNzMwMDExOTI4WjAYMRYwFAYD
VQQDEw02YTYxNmMyMC01MWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArfiFnQYDh4GvfT4dKWHfc3kXNe6kfBUy3p0lj7MIXjPrbwSb0hr6u4WIAHso
02HGuk7pITg81IHn5/yWu4HrmvI6U3zGiHQwE/7brtA/B81UQdhXuVAcGVaS1Q24
t8SplVdsPkr/EGga16Q+196igj7JFuijXeT5Giyki0dEzEddsrTuoW38Mmcju8dz
v60jsbSkgDXPynE+kb7Qt9LT50vAqMYW+da5407R6ub9tcGT6mlkYgmb6MsGhgxG
ols7xAwNCSGcuRq6xtCxR/Cf9YZmS2/+nkpCnO9a+eU/PjpMlyvHS2zznczVb6uo
QhSsvjiKxHSV7atrsjfq5IRysQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOVafS3y
GnwjRgG7sQ5jhPY/vQA6MB8GA1UdIwQYMBaAFH5lxY+jQ6EMU0NQq0l/0JDO77+7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODBCNS82OTQ2M0QwNENB
M0QxMUVDOTFBQzQyNkRDNEY5QUUwMi9mbVhGajZORG9ReFRRMUNyU1hfUWtNN3Z2
N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZtWEZqNk5Eb1F4VFExQ3JTWF9Ra003dnY3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODBCNS82OTQ2M0QwNENBM0QxMUVDOTFBQzQyNkRDNEY5QUUwMi9mbVhGajZORG9R
eFRRMUNyU1hfUWtNN3Z2N3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOu/ALlgjUFAwyHKxnJ1dsu5/jsTt0/x2Ktlke3iOgmPtRchgOgdRnaKARKj3
sDHr+d8R2Ud8XmAT1IoagodXJn6+oshRIudOeu7Vj3JNjATSFmey0U2ijSGVCKu+
bylnFUQS5XPpe53E2wcTZLTYbPQG5GiZn7rYVu4lYV6dCZ81snjRcL1Fc/oE/ItJ
XGPtFRAhVXz9GzYt+BMyDIwfRwLGiS4d4qMDcMfElFDSQlETSiySjwWoNjVu0111
APayTEpT8hl/aUVisfz9w0JD+zI+qijbB/IwVotqPQ1DI9pVChQCdUQzpFtgsrl4
6oo6cYo6+NKt7DHbJxU0WbJn6w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:31:09 2026 by rpki-client