
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft
File: fFO_avST0kw7fGuiFrOCsMf3_CQ.mft (raw, json)
Hash identifier: Ih7MfwZIhr+Maevq/R6+6qziNhjlzrUXHHNv00UIXMw=
Subject key identifier: B8:A0:04:F9:F7:8B:FF:7F:AD:12:B9:DE:0C:5C:98:95:62:06:00:7A
Authority key identifier: 7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24
Certificate issuer: /CN=A913FA1D/serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24
Certificate serial: 094F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft
Manifest number: 093C
Signing time: Tue 12 May 2026 20:15:17 +0000
Manifest this update: Tue 12 May 2026 20:15:16 +0000
Manifest next update: Tue 19 May 2026 20:15:16 +0000
Files and hashes: 1: fFO_avST0kw7fGuiFrOCsMf3_CQ.crl (hash: qmjKmqXYTfQoA9JkSUMz3eHa9rR2EKlNVR6TDAapZWM=)
2: F86B8216BFED11EABE972E5AC4F9AE02.roa (hash: gfpq5Vgb/YI4qo4hAIBsJzMcZgPK7w4lTbQ0JqnYdL0=)
3: 2636893049C611F1A0494403A4833773.roa (hash: LbI/zXwrZvEy2m8RCRFUKgZJykGAWt1/GiJpmBz1/G0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl
rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2383 (0x94f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FA1D, serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24
Validity
Not Before: May 12 20:15:16 2026 GMT
Not After : May 19 20:15:16 2026 GMT
Subject: CN=6a038a55-1878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d6:23:d0:d6:08:51:d4:65:3f:39:d8:fb:c5:
0c:e0:9d:c7:79:37:ab:76:ef:34:bc:e9:c7:47:47:
5a:05:55:de:9b:cc:24:f8:de:2e:fa:08:ce:3b:dd:
63:6e:2b:5d:cd:8d:e2:b5:4a:62:bd:de:e1:e0:89:
90:0a:35:76:d5:1b:9d:6f:50:d8:75:58:8c:45:68:
e5:9e:44:bd:21:0f:1f:a4:70:90:fb:58:ca:eb:41:
06:e9:6e:04:dd:0f:83:d6:f4:18:37:ca:b2:52:60:
dc:ca:06:7d:b6:33:0c:0c:d1:20:cb:74:ea:40:e5:
02:94:36:66:38:e5:79:41:2b:1d:78:c9:c9:92:62:
2e:be:d1:b1:6a:bb:b3:c1:ad:65:cd:31:a0:ae:98:
75:d4:02:8c:18:2f:5e:31:5a:d8:9e:81:64:d1:6d:
a7:b3:8a:7b:a5:9c:2b:ef:5c:99:92:87:8a:54:cb:
e0:43:3f:d6:a8:68:1a:8e:8c:7a:38:5e:9e:08:d3:
a1:0d:43:e8:a7:65:d4:88:58:35:73:c9:25:f2:b6:
f1:9a:8b:45:2c:8f:6d:31:dc:26:eb:1f:6e:38:e1:
11:57:ad:3e:8f:3e:da:e2:83:78:2f:93:0d:7e:56:
f2:4f:6f:1a:6a:5b:92:f0:a4:d8:86:ef:5b:cd:e8:
dc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A0:04:F9:F7:8B:FF:7F:AD:12:B9:DE:0C:5C:98:95:62:06:00:7A
X509v3 Authority Key Identifier:
keyid:7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f1:ca:06:c1:59:b4:1a:96:1d:d2:ce:6f:02:5c:18:57:f7:
fe:31:1e:b0:e8:8f:86:46:29:55:33:34:87:9b:ba:ca:02:a4:
ee:6a:3d:ca:49:41:74:24:dc:2b:50:fa:d1:d8:b0:4c:dd:ce:
a1:b1:5e:0e:ae:e8:e0:22:55:d3:81:da:9f:be:59:81:9a:0c:
65:43:57:81:e2:54:2a:cd:ed:26:d1:39:80:38:3c:5d:af:45:
87:f3:46:e7:49:79:5a:37:64:45:ef:3a:33:15:9f:35:f3:7e:
24:01:48:f8:2f:79:42:dd:80:ed:69:f0:b8:b0:8b:88:ab:27:
26:7d:f5:a2:cd:b5:46:b5:50:65:a7:b7:a1:04:65:e4:70:43:
cb:ec:99:2c:71:81:dd:db:31:bd:7d:01:12:38:cd:06:93:ac:
bf:3e:dd:64:74:b7:ac:c6:65:58:29:e7:14:3e:a9:58:bf:64:
9a:5e:75:61:00:96:3f:9c:32:6f:5e:bf:43:65:cb:84:35:46:
88:b3:e9:11:cc:7b:e5:6f:77:b3:84:7b:d6:1b:19:f1:92:2a:
3d:07:05:4b:f1:71:79:10:9f:82:89:02:f8:45:4f:af:fb:ce:
ba:b4:77:d8:2b:21:10:35:0d:f9:fb:af:9c:11:83:2d:ea:f6:
00:6e:78:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:57:06 2026 by rpki-client