
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
File: FizOhuKjaX6Ri3y11W2goALHk3E.mft (raw, json)
Hash identifier: ZFJkqv25Ew9WlV4sDHYbjOGiwMcRE+PUsUzlJVxvhmA=
Subject key identifier: 7A:27:3F:3D:EA:6A:E4:FF:E6:7D:74:1A:EC:7A:B7:23:B1:44:4C:99
Authority key identifier: 16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71
Certificate issuer: /CN=A91D17E6/serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
Manifest number: EC
Signing time: Thu 23 Jul 2026 08:10:00 +0000
Manifest this update: Thu 23 Jul 2026 08:10:00 +0000
Manifest next update: Thu 30 Jul 2026 08:10:00 +0000
Files and hashes: 1: FizOhuKjaX6Ri3y11W2goALHk3E.crl (hash: CROQhY07qSNuAqxRwyWnOaK9/fZcIBem0dEozycrAJ8=)
2: AF69D6BA4C0311F08D3CD93AC4F9AE02.roa (hash: cpq7k1JX/xbHtsPCC0YYOWWVGpVC7cEuSLkMccTVKVc=)
3: BA5D351C4C0311F0ABCEF33AC4F9AE02.roa (hash: CzRt1Vpg04doCx/2AnXX00Zgt+5+vt+JMpvQg/HVV4g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl
rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:09:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D17E6, serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371
Validity
Not Before: Jul 23 08:10:00 2026 GMT
Not After : Jul 30 08:10:00 2026 GMT
Subject: CN=6a61cc58-aba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:11:00:a8:5a:ba:77:8b:ae:a9:ef:4f:f8:
c0:c1:62:83:6d:13:72:57:53:65:9d:ed:fd:ff:e0:
ef:c3:3f:89:cf:45:ac:dd:f9:89:f5:3b:93:87:9e:
e6:af:48:ad:fe:ce:19:6e:2f:f6:b6:91:af:cc:12:
3a:f6:ee:ff:ed:8f:b0:0b:ae:9a:d0:2d:cb:08:d4:
f0:d8:94:fa:0a:7f:52:61:d3:6b:c1:c6:b5:1c:33:
78:51:06:81:cc:94:88:1b:04:06:47:f6:49:55:47:
c3:60:19:01:6d:6e:0d:0d:b8:ba:d4:9e:c2:33:cb:
42:40:ad:1e:03:5f:13:1c:78:10:76:83:1a:02:59:
3c:d6:5c:fd:46:a2:32:3a:2c:b2:6a:31:63:e4:f4:
a4:90:b4:7a:a2:d4:bf:7b:7e:cf:48:24:28:ae:dd:
25:32:11:33:17:1b:8d:cc:d3:82:9b:3a:72:35:c5:
99:0e:86:3f:8f:21:46:f8:84:1c:64:59:77:ec:16:
3f:a8:86:b3:fb:e4:68:d0:70:37:e1:af:e4:50:c0:
f2:a4:14:4f:95:ba:e5:cc:08:d9:53:e9:d4:ef:41:
28:3a:17:bc:f1:48:36:ae:99:77:39:17:47:d5:7e:
d8:9a:59:b2:35:8f:26:b1:b4:8e:23:35:2a:54:f6:
b6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:27:3F:3D:EA:6A:E4:FF:E6:7D:74:1A:EC:7A:B7:23:B1:44:4C:99
X509v3 Authority Key Identifier:
keyid:16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a8:85:bc:35:a1:d6:43:c4:6a:7c:44:e5:0e:cc:ca:b2:4b:
a7:7a:b2:d0:f2:b8:c8:cd:c8:5d:65:f7:3d:ea:6a:61:78:35:
46:0c:29:0d:6e:6d:2d:cb:ea:81:be:15:54:f7:78:d6:71:dd:
fb:ae:31:92:dd:47:50:19:9c:ff:46:f5:b6:c7:49:ef:68:4e:
88:60:2c:e7:a7:ec:47:ed:33:c4:73:cd:13:06:d0:7a:0f:cc:
6a:5a:93:63:5a:5a:35:ad:a5:35:88:e9:15:62:dc:69:85:05:
9c:2f:85:fa:ef:da:64:b7:10:ef:06:51:54:40:49:a5:f4:28:
0f:ca:a6:db:b5:cb:3c:57:b2:00:9e:4b:d1:d8:41:19:7f:25:
c6:3c:80:17:1c:90:6b:8a:f3:76:76:94:03:6b:5e:25:6f:7a:
3f:aa:05:ce:e0:f2:74:ee:cd:cd:6a:7c:bb:87:32:bc:e1:c3:
73:48:d0:70:b2:84:fb:15:28:25:4d:a9:95:29:a5:75:61:dd:
86:fc:cd:61:33:c6:03:66:f6:d1:6d:8d:b1:4d:00:9e:56:12:
7b:89:9f:75:73:88:95:73:dd:1d:d1:36:83:1f:c4:79:8d:49:
27:0a:b0:fb:f8:f1:4a:af:a5:06:aa:55:23:89:f6:51:5d:ac:
c5:28:a3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:29:52 2026 by rpki-client