
$ rpki-client -vvf rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.mft
File: ffgmqR46CHq9KaYomhI7qR8RMF8.mft (raw, json)
Hash identifier: 8/WugAgsgySu6pfyChmmZ8OIZzfYvvzA4pn/agLaTJ0=
Subject key identifier: 20:78:A3:26:B7:81:27:09:E6:02:AE:81:27:4E:54:BC:55:A1:63:6F
Authority key identifier: 7D:F8:26:A9:1E:3A:08:7A:BD:29:A6:28:9A:12:3B:A9:1F:11:30:5F
Certificate issuer: /CN=A919542A/serialNumber=7DF826A91E3A087ABD29A6289A123BA91F11305F
Certificate serial: A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ffgmqR46CHq9KaYomhI7qR8RMF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.mft
Manifest number: A2
Signing time: Thu 23 Jul 2026 09:07:02 +0000
Manifest this update: Thu 23 Jul 2026 09:07:01 +0000
Manifest next update: Thu 30 Jul 2026 09:07:01 +0000
Files and hashes: 1: ffgmqR46CHq9KaYomhI7qR8RMF8.crl (hash: W4o8uqF25plQeSiezRdaY7BB9SA80YhQjzc4e/D6+xU=)
2: FC15F5FA8EE511F0BFFDD274C4F9AE02.roa (hash: dNdji1Fr3jK6/jkHnFcVdkdFZjgcGqOwAU51jGRYmhM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.crl
rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ffgmqR46CHq9KaYomhI7qR8RMF8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919542A, serialNumber=7DF826A91E3A087ABD29A6289A123BA91F11305F
Validity
Not Before: Jul 23 09:07:01 2026 GMT
Not After : Jul 30 09:07:01 2026 GMT
Subject: CN=6a61d9b6-029d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:0a:2d:2b:0f:0f:f5:43:39:e6:39:e4:eb:
ea:59:4f:ed:18:0b:71:5d:36:38:82:28:8c:53:8c:
cc:38:f7:c7:a2:ad:42:f6:05:cf:62:54:b6:18:92:
b9:26:b3:cd:fd:92:7a:55:0b:7e:73:68:3f:13:b9:
dd:4b:19:ab:d4:f4:72:59:e2:1d:e6:39:07:ba:96:
0d:fd:3f:06:40:c8:9f:f4:0f:a2:9e:6d:9b:39:32:
0b:44:57:45:37:6b:6b:ca:68:c0:18:ca:d4:d9:65:
a8:c9:b7:b4:1a:1d:b8:e2:b3:f2:b0:9b:83:6d:92:
d0:72:c9:b5:37:01:b2:d9:37:f5:73:34:67:07:d8:
ae:cc:10:69:50:61:ae:46:eb:5a:c2:72:3c:36:df:
2e:b8:c4:46:5b:78:2c:ad:a3:44:63:a1:c0:a1:90:
d8:1e:7d:18:9f:18:59:8c:b9:3d:ca:5e:d0:e5:e0:
29:37:95:a3:bf:a7:50:11:81:03:b3:b1:d6:96:64:
f2:0d:0e:9a:6e:21:2e:b2:af:8f:39:f7:06:d4:18:
35:35:3a:62:f4:52:bc:9a:e9:b2:b9:35:24:c6:ed:
e9:42:fd:0b:a6:b5:c7:e2:8a:13:ce:5e:25:dd:78:
fc:2f:3e:72:8f:9a:e1:c8:f5:76:1c:2b:e5:e1:52:
b0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:78:A3:26:B7:81:27:09:E6:02:AE:81:27:4E:54:BC:55:A1:63:6F
X509v3 Authority Key Identifier:
keyid:7D:F8:26:A9:1E:3A:08:7A:BD:29:A6:28:9A:12:3B:A9:1F:11:30:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ffgmqR46CHq9KaYomhI7qR8RMF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:4a:a6:fa:1a:bb:52:5c:57:ba:3e:88:a6:70:d4:71:74:44:
9c:f9:f6:88:15:25:64:b5:d3:96:a4:09:6e:ba:78:67:d3:96:
a3:12:0a:14:09:35:33:42:c6:3e:ff:8e:d2:aa:7b:d4:d6:4a:
2d:9b:6e:70:cb:cb:9c:c8:a3:d1:ec:dd:04:54:da:33:40:2b:
bf:6f:a6:0f:7a:f4:bb:58:48:f9:d7:a2:46:19:6b:ef:6a:0c:
5a:bd:e1:4c:34:f7:4d:95:cb:78:75:0a:7d:77:5f:aa:59:04:
b5:88:f3:58:16:1b:e1:50:cd:bb:a8:eb:52:76:a7:2c:a7:0f:
6a:0e:23:3a:60:b8:0e:12:cb:fe:9c:6a:cb:dd:77:0b:60:b2:
ac:c5:61:46:83:ff:29:13:13:cb:8e:91:96:a5:58:09:ca:2a:
3e:a9:15:a3:56:fc:79:a3:03:3e:65:e0:32:85:81:48:f9:a7:
ed:03:29:b6:a8:18:f5:5f:54:2f:41:3c:02:74:2a:8d:50:8a:
84:b6:06:8e:88:85:7e:d6:bd:60:81:05:60:47:39:20:28:b2:
51:1c:7c:04:5f:82:d0:ed:f4:f8:cb:b6:d2:f5:fd:f4:d9:56:
e7:6b:fd:3d:15:6a:05:9b:dc:96:c0:7a:ee:41:8e:c9:1e:e7:
42:45:a1:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTU0MkExMTAvBgNVBAUTKDdERjgyNkE5MUUzQTA4N0FCRDI5QTYyODlBMTIzQkE5
MUYxMTMwNUYwHhcNMjYwNzIzMDkwNzAxWhcNMjYwNzMwMDkwNzAxWjAYMRYwFAYD
VQQDEw02YTYxZDliNi0wMjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAweQKLSsPD/VDOeY55OvqWU/tGAtxXTY4giiMU4zMOPfHoq1C9gXPYlS2GJK5
JrPN/ZJ6VQt+c2g/E7ndSxmr1PRyWeId5jkHupYN/T8GQMif9A+inm2bOTILRFdF
N2trymjAGMrU2WWoybe0Gh244rPysJuDbZLQcsm1NwGy2Tf1czRnB9iuzBBpUGGu
RutawnI8Nt8uuMRGW3gsraNEY6HAoZDYHn0YnxhZjLk9yl7Q5eApN5Wjv6dQEYED
s7HWlmTyDQ6abiEusq+POfcG1Bg1NTpi9FK8mumyuTUkxu3pQv0LprXH4ooTzl4l
3Xj8Lz5yj5rhyPV2HCvl4VKwjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCB4oya3
gScJ5gKugSdOVLxVoWNvMB8GA1UdIwQYMBaAFH34JqkeOgh6vSmmKJoSO6kfETBf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTQyQS81QkU0MTg4MjhF
RTUxMUYwOTA5MDJENjhDNEY5QUUwMi9mZmdtcVI0NkNIcTlLYVlvbWhJN3FSOFJN
RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZmZ21xUjQ2Q0hxOUthWW9taEk3cVI4Uk1GOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTQyQS81QkU0MTg4MjhFRTUxMUYwOTA5MDJENjhDNEY5QUUwMi9mZmdtcVI0NkNI
cTlLYVlvbWhJN3FSOFJNRjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQkqm+hq7UlxXuj6IpnDUcXREnPn2iBUlZLXTlqQJbrp4Z9OWoxIKFAk1M0LG
Pv+O0qp71NZKLZtucMvLnMij0ezdBFTaM0Arv2+mD3r0u1hI+deiRhlr72oMWr3h
TDT3TZXLeHUKfXdfqlkEtYjzWBYb4VDNu6jrUnanLKcPag4jOmC4DhLL/pxqy913
C2CyrMVhRoP/KRMTy46RlqVYCcoqPqkVo1b8eaMDPmXgMoWBSPmn7QMptqgY9V9U
L0E8AnQqjVCKhLYGjoiFfta9YIEFYEc5ICiyURx8BF+C0O30+Mu20vX99NlW52v9
PRVqBZvclsB67kGOyR7nQkWhgw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:53:24 2026 by rpki-client