
$ rpki-client -vvf rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft
File: fkTc6XLxPIDlNLLmhf4dKg12FRI.mft (raw, json)
Hash identifier: KDOagOx9JshHnA/+pNYbqo7aEOmhkS/HHqSqLYMfNO8=
Subject key identifier: 62:09:D1:11:07:7C:E4:4D:40:77:66:CE:5E:DD:3A:EA:96:6A:36:ED
Authority key identifier: 7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12
Certificate issuer: /CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512
Certificate serial: 0382
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft
Manifest number: 035D
Signing time: Wed 13 May 2026 01:10:23 +0000
Manifest this update: Wed 13 May 2026 01:10:22 +0000
Manifest next update: Wed 20 May 2026 01:10:22 +0000
Files and hashes: 1: fkTc6XLxPIDlNLLmhf4dKg12FRI.crl (hash: HijVh5dsJBtwYXLO17KjZfUB/8Bkydbz2mAsxZRoYs8=)
2: 03D6E39A824C11F0B2CA540FC4F9AE02.roa (hash: v1c/7CojEGRaNp000m+6ubWlF6Q9FwpjN3RsWsFetvU=)
3: D08FF4F0BB7111EFACA16B1DC4F9AE02.roa (hash: jEbU+UZ6bH7hld9QXt1qM9jJKv0SNsetGnm09iu/Csc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl
rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 898 (0x382)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917270F, serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512
Validity
Not Before: May 13 01:10:22 2026 GMT
Not After : May 20 01:10:22 2026 GMT
Subject: CN=6a03cf7e-ddc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8a:c1:57:5d:52:32:05:15:88:f1:df:7e:e1:
6f:f4:a5:5b:71:e9:cd:02:1f:27:77:a1:47:64:21:
8f:3d:1a:0f:95:88:65:a0:9f:29:83:e0:cc:40:6a:
56:2d:12:3d:65:3f:34:e5:53:fa:72:7a:5b:0f:ff:
29:ab:8f:81:ee:28:6b:a9:e9:6b:b1:4b:e8:2c:be:
dc:89:74:8a:8d:4a:51:0f:92:d4:c8:ea:9d:b9:bb:
42:e9:37:e2:1d:36:fb:31:5a:6b:06:4b:ee:c1:88:
3e:85:98:99:13:0b:e4:fc:5f:73:a3:d7:3a:e5:68:
1b:3a:a6:fc:d4:82:35:8b:af:02:0c:52:3c:19:53:
cd:8e:2c:ea:88:7e:d6:03:94:e0:37:d8:d9:63:55:
ed:b9:09:f2:25:56:ae:4f:48:2a:3d:39:db:24:c3:
69:a0:24:cd:88:48:8f:7f:78:55:fe:cd:9f:ea:0e:
c3:08:15:c5:d1:c4:01:70:c5:db:19:0b:01:08:5b:
94:9f:48:0d:44:ac:8b:29:02:03:40:3e:17:9c:58:
e4:de:ce:85:25:2b:65:75:ca:be:97:21:97:60:35:
a6:cf:4d:9d:f3:f6:75:2c:c7:9b:7e:5d:3e:58:c1:
99:a8:c8:d2:3c:f6:85:10:48:6c:ed:43:f4:64:2b:
da:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:09:D1:11:07:7C:E4:4D:40:77:66:CE:5E:DD:3A:EA:96:6A:36:ED
X509v3 Authority Key Identifier:
keyid:7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:e8:ad:98:2c:5b:41:fc:57:4d:0d:29:a6:81:a7:21:02:77:
d6:d3:66:01:27:5a:e0:b3:24:1c:dd:85:23:91:fd:ef:6d:52:
01:ae:e0:a3:82:5b:2d:74:bc:7e:d8:f9:42:bf:05:08:98:26:
86:54:56:2d:ed:fd:57:7e:8a:f9:c4:1a:fb:41:47:e2:e3:f2:
2b:ed:11:e1:ae:9f:8a:8a:7d:64:44:90:ab:8f:e3:97:04:33:
02:37:f9:e4:3c:9d:34:8f:cd:7c:d2:98:21:0d:52:cf:ab:67:
e5:d1:6f:5e:b2:ad:1a:71:01:95:aa:b2:c7:7d:f1:25:dd:6d:
eb:49:bc:87:36:60:4a:f2:c6:4f:67:55:19:e1:ca:07:70:4e:
44:80:7b:d3:9f:8b:42:a2:1e:2f:88:be:ab:20:95:af:53:92:
b5:1d:fa:a3:8b:3c:ba:71:1f:ff:4c:74:15:a9:06:6c:1f:db:
34:19:00:20:c5:77:2a:d4:ee:ac:0f:d4:ac:29:a1:38:18:80:
63:7c:a4:59:3d:b7:ae:45:9d:dc:7d:2d:7b:25:48:a8:40:2d:
bf:9e:7b:7d:55:b2:a1:4c:08:b0:68:1e:5a:1a:9f:75:ac:5f:
3d:21:a4:e8:df:d6:7a:6e:25:6d:21:da:e4:cf:53:2b:f6:e6:
c7:33:d9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:49:51 2026 by rpki-client