
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
File: FyPctBoEJopYeqzoz9na5fn1Hfc.mft (raw, json)
Hash identifier: r9y4ziZ/0jomqNBKWPIFgT5wvTvV29LqPNoX+Yyh4Bg=
Subject key identifier: 9A:17:25:DE:11:4C:EE:55:7F:D8:EA:0D:B3:76:03:DD:C8:AC:5E:6F
Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Certificate serial: 0841
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
Manifest number: 0810
Signing time: Mon 02 Mar 2026 02:07:42 +0000
Manifest this update: Mon 02 Mar 2026 02:07:41 +0000
Manifest next update: Mon 09 Mar 2026 02:07:41 +0000
Files and hashes: 1: FyPctBoEJopYeqzoz9na5fn1Hfc.crl (hash: zL9dkRTUwQaS/lqxC5JhS0CqRZt7Layzn9rJ8BGrByg=)
2: 68DAAA1A749711EFB4EDA45FC4F9AE02.roa (hash: jQKMgjpzfVC4yr89ThGiT9ygh+/rUur+KtBDxKUm250=)
3: 8037BC50EB2E11EDB835EF4AC4F9AE02.roa (hash: f2nEio6eLUyv7yDtFiV3KwH4vS6At+iiNXP9RqT+g84=)
4: 2840D3A225FF11EBAF634966C4F9AE02.roa (hash: EtwqGb/CzlP64HTzen0hEAfqgQV3m0e0KLHXsR7RmN0=)
5: 3CD29BF4D46911EE8B36431CC4F9AE02.roa (hash: hJLGe+zYrwYxwpdQvFaS8hi/p8W1GhibzXeCk3G6BNI=)
6: 7AA7B416E01011EEA1CA127CC4F9AE02.roa (hash: b0lsSLqk839sfXbmjzCscLovBQK1FxU7wYdESQOxP2U=)
7: 26D56F6425FF11EBAF634966C4F9AE02.roa (hash: /kyIgZiBfNWT65KeLq4ju9c7Mhij++QBadeo1QUbPok=)
8: 284E9E9E1D5611EB891ADC6CC4F9AE02.roa (hash: 0K9xo1NevqH2KRC8xQxUcHRpqfQKIdlyoCnPNU33oSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2113 (0x841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Validity
Not Before: Mar 2 02:07:41 2026 GMT
Not After : Mar 9 02:07:41 2026 GMT
Subject: CN=69a4f0ee-ea41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:79:9b:ff:c9:79:64:fc:35:30:71:ed:04:
b8:df:10:83:13:4b:ce:62:d9:c2:32:1f:e1:6c:ec:
c0:e4:33:e5:82:69:9d:61:82:bb:58:82:57:e4:4c:
e6:ca:ff:26:b2:56:61:a1:93:b9:74:11:8f:91:aa:
e7:db:c5:b9:eb:15:de:e9:52:47:62:b1:92:0b:d0:
0e:73:13:4a:58:72:d7:36:21:36:e1:4c:da:5b:a8:
f0:82:96:9f:ad:26:e4:30:71:cc:70:73:f1:80:f5:
2d:89:1e:01:8e:1c:38:a9:09:90:da:58:f3:13:ae:
c5:6d:33:ef:15:47:55:b8:74:a5:93:b7:81:38:b7:
ae:2a:b1:d2:79:18:30:1c:4e:9c:87:e6:0a:f9:c8:
0c:4d:31:23:70:e5:0b:a3:88:67:5c:18:57:fc:d0:
83:d4:0a:67:fe:32:fb:01:92:8b:58:a1:98:8c:dc:
1b:7f:81:d4:a2:96:22:10:b5:bc:c9:8f:dd:32:e0:
9c:53:96:87:86:ff:22:ba:b8:da:ab:bc:3f:b8:1c:
c7:ee:15:0d:90:14:d6:0b:ff:3e:3a:61:46:21:7d:
44:d2:78:c9:92:52:cb:8c:16:93:84:16:2b:e9:30:
84:2f:05:2d:86:4d:94:65:db:db:17:c3:1d:0c:71:
0c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:17:25:DE:11:4C:EE:55:7F:D8:EA:0D:B3:76:03:DD:C8:AC:5E:6F
X509v3 Authority Key Identifier:
keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:c3:d2:1e:52:ca:e0:6b:7a:a7:4a:e0:55:2d:b7:c0:10:7e:
43:ea:8b:af:58:3d:19:66:38:d7:1b:c4:33:ef:fb:c4:f0:1b:
02:4d:d7:28:c0:87:0c:2c:0a:a1:b2:fa:65:3a:ac:95:4a:6d:
d5:06:4e:61:fd:02:34:fc:13:d0:22:15:d6:13:8d:36:3d:c7:
21:a4:9e:35:c0:d6:68:30:0b:ea:bd:ed:c4:fa:83:c0:71:d5:
4c:73:9d:e7:ea:2f:5d:22:7f:27:df:68:75:11:34:ff:2f:6c:
2b:8a:d7:b1:4f:6a:fb:82:85:d3:a9:56:75:32:ea:fb:f7:27:
a2:45:8c:c1:76:0d:dc:cc:9f:1a:79:a4:90:b6:f0:f0:49:1b:
32:9d:59:08:19:ee:fe:ed:ab:1d:8f:4b:a4:3a:b5:10:b4:12:
f9:d3:6f:89:41:40:77:4e:31:af:9f:4b:49:17:62:8c:34:b1:
b3:6f:37:da:93:82:58:0c:63:34:df:6d:19:e8:90:15:cd:67:
18:6d:3d:59:90:66:da:55:24:15:d7:90:23:1e:42:69:67:23:
dd:80:00:17:41:7c:3d:aa:c3:3d:2e:31:f1:d5:e9:cb:00:a1:
31:0a:5c:bb:02:43:46:e8:83:d9:04:5e:84:2e:5f:25:6d:b3:
df:97:fd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:33 2026 by rpki-client