
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
File: FyPctBoEJopYeqzoz9na5fn1Hfc.mft (raw, json)
Hash identifier: JbavYO5J/Bdxs/1rrztDoazAdLhn7repf0d3J2HZk3U=
Subject key identifier: 65:ED:DF:B6:FB:5A:15:EB:8D:48:C5:46:34:3C:FD:F5:46:CA:F7:FA
Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Certificate serial: 0896
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
Manifest number: 085E
Signing time: Tue 28 Jul 2026 21:23:23 +0000
Manifest this update: Tue 28 Jul 2026 21:23:22 +0000
Manifest next update: Tue 04 Aug 2026 21:23:22 +0000
Files and hashes: 1: FyPctBoEJopYeqzoz9na5fn1Hfc.crl (hash: UZyj7C0McdpFtDRxyvGtFu+MK6i90CPIHynHp6G6Q30=)
2: 2840D3A225FF11EBAF634966C4F9AE02.roa (hash: L0U0RcVKixHM80nNmnQh09Mgzv1FHdU2PsTdoVdSV8U=)
3: 8037BC50EB2E11EDB835EF4AC4F9AE02.roa (hash: gCroShM9MPy9hkOuo/TmE62NW3KmfiqLbSetYf/sQtk=)
4: 26D56F6425FF11EBAF634966C4F9AE02.roa (hash: Gd7CExBZM5BBf+T9t2y84eMZfBgGlZ7L5uDoPb1T73A=)
5: 3CD29BF4D46911EE8B36431CC4F9AE02.roa (hash: KYjRsSmZFGs+FoyNnOuXfuvWzg10BoAKlArtMc3CJYg=)
6: 284E9E9E1D5611EB891ADC6CC4F9AE02.roa (hash: fTOR9/QC+OhH2+hrGoKHcs/jMnPvIkd1epQi4PDNnQE=)
7: 7AA7B416E01011EEA1CA127CC4F9AE02.roa (hash: SfIPzDPx+vk2QttaA/BFMlEfJZc2n17RQ43Dr50jvLs=)
8: 68DAAA1A749711EFB4EDA45FC4F9AE02.roa (hash: WAr5HKGDc2RarHCoXbJPfLibBljcpHIXpcteTrNCl3M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2198 (0x896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Validity
Not Before: Jul 28 21:23:22 2026 GMT
Not After : Aug 4 21:23:22 2026 GMT
Subject: CN=6a691dcb-28c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:57:91:6c:70:df:db:a5:10:74:0d:b7:d3:ea:
28:5b:be:c8:0a:50:21:ad:72:84:01:2b:74:15:38:
55:ef:cb:72:a3:53:49:ee:17:1c:bf:7e:9d:48:3c:
33:48:92:42:d6:d5:4c:95:b1:5f:f3:25:83:64:9a:
4b:40:50:b3:ad:a2:72:eb:7f:7f:1b:75:23:63:65:
df:77:e3:f7:74:a4:ce:62:5e:ce:45:00:7e:58:ed:
47:07:71:73:1c:7c:8b:75:f7:3c:4f:55:28:8f:65:
4b:e5:67:f6:2a:d4:9f:69:52:02:c8:57:07:2a:e7:
e7:37:4d:70:e6:18:eb:f7:17:f2:be:4c:fe:5e:43:
98:63:3d:cd:df:a6:3f:63:78:0b:dc:60:22:3b:62:
dd:3f:47:b6:a8:b2:19:ca:96:da:78:2a:be:1b:eb:
26:cd:7c:8f:e8:e2:03:ed:a6:49:8e:8f:43:99:2a:
10:5c:56:95:0e:43:d2:72:bc:ee:ca:02:85:de:b4:
50:75:18:0f:9b:74:24:6a:88:9a:95:e5:73:f6:32:
9b:69:ad:e5:a6:0d:c2:11:78:72:a7:d4:14:b0:3d:
5c:5d:e1:4b:d8:3f:f9:ef:e0:82:d0:f0:fb:54:9f:
22:c3:05:00:b9:3c:11:3e:64:c5:12:9a:5f:eb:33:
15:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:ED:DF:B6:FB:5A:15:EB:8D:48:C5:46:34:3C:FD:F5:46:CA:F7:FA
X509v3 Authority Key Identifier:
keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:07:3a:e7:3b:ce:c8:c7:3d:2a:44:75:db:4a:b3:3b:9a:4f:
20:06:be:44:8a:d7:48:6f:09:2d:58:6f:d0:f9:4e:0c:a7:b6:
f1:a5:5b:3b:69:5d:fb:bc:f0:21:17:67:8e:4a:86:38:03:a5:
92:0b:c1:a6:52:e6:38:00:cd:94:54:03:7c:ac:cb:1b:89:55:
0b:e5:60:23:70:9a:7b:e8:e1:6d:24:94:52:0b:39:0a:d4:ae:
c9:34:9c:3f:d9:d3:ec:6a:0e:51:13:dc:c7:11:6d:48:85:c2:
4f:d1:bc:cf:ee:89:55:6c:ce:c1:c7:62:a7:99:4e:83:e2:a4:
10:3e:3c:ff:61:a8:97:11:bc:17:22:e9:15:39:6f:2f:a8:5e:
3d:bf:28:39:90:94:05:b3:7d:30:7f:a0:a3:de:82:0b:7d:7d:
a6:25:c9:5b:15:fd:e0:e5:8c:18:82:43:1a:c7:f8:bc:cb:44:
2d:ba:ea:76:96:c7:2b:9c:32:b5:e4:11:03:67:41:4c:e3:ef:
6b:29:ad:47:36:d5:90:53:58:c0:68:93:b1:5e:b2:46:2a:80:
9a:e5:a4:8c:79:3f:eb:23:16:ed:5e:4a:4f:bb:33:b6:b9:de:
6a:17:d6:ca:e7:80:25:04:57:81:6c:d2:b2:dc:92:0e:3c:a1:
2b:72:85:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:35:03 2026 by rpki-client