
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
File: FSUB4tXSvcrhiMNKZT5A9Amittc.mft (raw, json)
Hash identifier: AF8St2TLZuAa8EvSAyUivbaycBK969tc3ZqX+A7kfaM=
Subject key identifier: 25:9C:9D:FF:78:CE:BA:7B:C6:31:71:D9:F9:4D:21:14:0D:14:7A:85
Authority key identifier: 15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7
Certificate issuer: /CN=A913D3CE/serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7
Certificate serial: 01A2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
Manifest number: 0199
Signing time: Fri 25 Sep 2026 04:23:30 +0000
Manifest this update: Fri 25 Sep 2026 04:23:30 +0000
Manifest next update: Fri 02 Oct 2026 04:23:30 +0000
Files and hashes: 1: FSUB4tXSvcrhiMNKZT5A9Amittc.crl (hash: P8kgBJqfajEk4UdEoHC6u58TMHecC2n2FfmaO7xy6Ew=)
2: E0E7D5E6495E11EF8EE0647AC4F9AE02.roa (hash: TgqFeQEiOow8mjVjqqPJMFCLvimvcGFbTEBJ8HUE50g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl
rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418 (0x1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D3CE, serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7
Validity
Not Before: Sep 25 04:23:30 2026 GMT
Not After : Oct 2 04:23:30 2026 GMT
Subject: CN=6ab5f742-a754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3b:28:10:d3:bf:a7:70:8f:ae:72:18:70:99:
f7:21:1e:ab:0f:d5:74:1e:ba:f7:46:b0:ed:7b:ce:
ea:d6:53:b4:ae:72:f0:1a:15:8b:78:d5:4d:97:db:
51:24:b7:3a:66:15:f2:95:ff:55:0c:64:11:c8:4f:
6b:cf:fc:aa:0c:61:50:d3:1f:93:70:d5:82:ed:02:
4b:41:9a:52:21:d6:4f:f3:0f:91:b0:c9:41:d3:3e:
ef:e1:86:28:cc:b9:94:be:2f:bb:14:e8:49:b4:d8:
87:71:6b:00:ca:6c:1a:41:a4:ee:31:76:71:52:76:
48:c8:98:19:79:1e:33:f4:4c:8b:46:a7:0b:7e:67:
ac:21:94:3b:dc:80:19:43:7f:e5:18:12:61:12:fc:
0d:b8:0b:e7:9b:9c:86:c3:7f:71:60:7e:5f:79:5c:
29:a9:71:0f:dc:32:d8:3c:1b:32:7a:38:f2:91:7e:
0b:7e:41:ab:0b:ff:bb:37:1b:f7:2b:e1:3a:7d:71:
0c:fd:bc:21:19:d4:73:16:1d:1d:ae:48:bb:dc:de:
b6:13:a3:c4:72:04:eb:3f:a3:df:c1:0c:66:cd:0a:
01:65:7d:04:8b:44:f3:41:ec:32:1c:5e:44:70:70:
86:67:a0:4b:cf:08:e9:5c:22:7e:c5:90:ec:75:50:
2f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9C:9D:FF:78:CE:BA:7B:C6:31:71:D9:F9:4D:21:14:0D:14:7A:85
X509v3 Authority Key Identifier:
keyid:15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e9:83:93:df:55:fd:8d:e7:61:f6:f2:13:85:87:9c:5e:ad:fe:
07:13:41:df:db:2c:7a:75:5c:95:c0:34:43:89:b6:6f:d1:3a:
7f:bc:f4:60:c0:2c:09:ff:e2:5e:03:77:5c:7b:ad:4f:e4:dd:
54:88:42:d3:d1:eb:43:d2:0d:73:62:ae:83:4b:28:7c:7b:84:
2d:6d:a7:6b:58:ef:6a:84:ee:01:2c:05:9a:6c:a1:57:87:40:
43:5d:31:96:a4:a3:e6:7a:0f:46:68:52:6f:8f:e2:f3:57:18:
f1:07:a9:36:72:8f:3a:22:44:39:44:15:b9:5c:ff:b5:e9:7f:
12:43:63:d1:76:73:6f:8d:27:1b:c2:1e:84:e1:8c:70:5e:17:
8b:53:cc:d6:2f:e1:b5:6a:ff:2e:d7:f4:ff:81:43:82:90:63:
74:81:d7:83:3c:b5:21:7c:e9:1c:f3:8d:3f:dd:26:4f:c1:b4:
68:95:69:b2:04:c8:d2:50:d1:c8:c3:cf:61:f6:b2:70:3f:57:
00:a8:50:c9:1e:66:90:c0:f5:77:e9:73:35:4f:6a:24:29:69:
29:9b:f9:a8:44:6d:e5:9e:30:b8:20:2c:ba:a2:89:8a:59:68:
6c:22:a9:46:9b:58:78:29:41:8f:7b:d6:09:af:be:ab:ba:7e:
c3:4b:61:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QzQ0UxMTAvBgNVBAUTKDE1MjUwMUUyRDVEMkJEQ0FFMTg4QzM0QTY1M0U0MEY0
MDlBMkI2RDcwHhcNMjYwOTI1MDQyMzMwWhcNMjYxMDAyMDQyMzMwWjAYMRYwFAYD
VQQDEw02YWI1Zjc0Mi1hNzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzzsoENO/p3CPrnIYcJn3IR6rD9V0Hrr3RrDte87q1lO0rnLwGhWLeNVNl9tR
JLc6ZhXylf9VDGQRyE9rz/yqDGFQ0x+TcNWC7QJLQZpSIdZP8w+RsMlB0z7v4YYo
zLmUvi+7FOhJtNiHcWsAymwaQaTuMXZxUnZIyJgZeR4z9EyLRqcLfmesIZQ73IAZ
Q3/lGBJhEvwNuAvnm5yGw39xYH5feVwpqXEP3DLYPBsyejjykX4LfkGrC/+7Nxv3
K+E6fXEM/bwhGdRzFh0drki73N62E6PEcgTrP6PfwQxmzQoBZX0Ei0TzQewyHF5E
cHCGZ6BLzwjpXCJ+xZDsdVAv9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCWcnf94
zrp7xjFx2flNIRQNFHqFMB8GA1UdIwQYMBaAFBUlAeLV0r3K4YjDSmU+QPQJorbX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDNDRS8xNDJBMkIwODQ5
NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3ZjcmhpTU5LWlQ1QTlBbWl0
dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0ZTVUI0dFhTdmNyaGlNTktaVDVBOUFtaXR0Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDNDRS8xNDJBMkIwODQ5NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3Zj
cmhpTU5LWlQ1QTlBbWl0dGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA6YOT31X9jedh9vIThYecXq3+BxNB39ssenVclcA0Q4m2b9E6f7z0YMAsCf/i
XgN3XHutT+TdVIhC09HrQ9INc2Kug0sofHuELW2na1jvaoTuASwFmmyhV4dAQ10x
lqSj5noPRmhSb4/i81cY8QepNnKPOiJEOUQVuVz/tel/EkNj0XZzb40nG8IehOGM
cF4Xi1PM1i/htWr/Ltf0/4FDgpBjdIHXgzy1IXzpHPONP90mT8G0aJVpsgTI0lDR
yMPPYfaycD9XAKhQyR5mkMD1d+lzNU9qJClpKZv5qERt5Z4wuCAsuqKJillobCKp
RptYeClBj3vWCa++q7p+w0thxw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 08:56:11 2026 by rpki-client