
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
File: FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft (raw, json)
Hash identifier: 2jNymsaGDDZbEEQ0gTx3ryR1+P+SqKIwJkYy5SA8UM0=
Subject key identifier: 4A:CF:3E:53:7D:8A:32:B4:82:29:85:22:C6:38:A7:29:D8:07:04:BF
Authority key identifier: 16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45
Certificate issuer: /CN=A911A0C0/serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45
Certificate serial: 19F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
Manifest number: 19E8
Signing time: Tue 28 Jul 2026 16:27:53 +0000
Manifest this update: Tue 28 Jul 2026 16:27:52 +0000
Manifest next update: Tue 04 Aug 2026 16:27:52 +0000
Files and hashes: 1: FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl (hash: ZAGYEfmxnj0zZMF4h3oq+mgKdZD9VjooMnjf+1E+NlE=)
2: 543AF5B283D911E78F2FA066C4F9AE02.roa (hash: VmS/Q3+6coESHGoEMtOrtTGznEUVw0iY/NUTCTx6zGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl
rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:27:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6648 (0x19f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A0C0, serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45
Validity
Not Before: Jul 28 16:27:52 2026 GMT
Not After : Aug 4 16:27:52 2026 GMT
Subject: CN=6a68d889-2e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:86:b8:75:c1:f6:56:00:fd:0c:c6:83:31:93:
b7:11:3e:ce:28:7b:7d:7e:07:d4:09:f7:ea:ab:b9:
15:a0:75:a9:b6:ed:97:9b:3e:4e:05:7b:21:e1:a8:
63:9e:e6:3e:3b:4d:3a:ff:94:ec:f0:f1:96:84:fa:
00:eb:9e:dd:ef:dc:dd:d4:c4:c6:0c:25:57:41:ce:
31:3f:a7:44:c0:2c:d3:97:20:82:70:4b:5a:38:4d:
98:80:e5:31:2b:d5:be:c4:d9:13:61:ae:e2:95:d7:
a2:bb:98:83:ee:3d:10:9b:f2:62:62:01:15:b3:9d:
f2:06:75:fa:8a:40:29:d0:18:43:63:03:e3:96:3e:
a8:c6:76:97:fd:1f:b2:3d:43:dd:8c:66:b3:97:fc:
ff:9d:13:b0:89:72:ee:8a:d4:46:ac:97:8b:73:04:
70:7e:ec:5b:0e:1f:08:94:be:3c:ab:f5:d0:4a:73:
5e:d1:86:d0:88:3a:2f:3e:5d:3d:75:5d:0f:3c:c5:
9f:67:65:11:97:73:bc:b3:16:4f:30:9c:14:7a:08:
87:ad:1e:aa:b1:0d:14:65:06:aa:8b:14:91:40:91:
06:bc:88:32:f1:95:df:ae:6b:f5:3e:3f:b3:8b:69:
14:2c:da:00:f4:4b:7d:ec:88:38:86:77:a9:a6:77:
50:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CF:3E:53:7D:8A:32:B4:82:29:85:22:C6:38:A7:29:D8:07:04:BF
X509v3 Authority Key Identifier:
keyid:16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ab:21:6c:95:e1:46:7f:72:8b:1d:73:17:8d:78:5e:56:f3:
7b:f5:a2:4c:0c:27:61:5c:1a:21:15:e0:73:63:2e:1b:79:cf:
e5:04:b1:f9:3d:57:c3:40:d7:cd:a4:09:b9:a7:05:bc:6f:07:
d4:8b:ba:87:41:ea:ba:a6:b5:15:df:e0:2b:d4:64:72:6c:91:
b9:35:bb:dc:b1:c0:40:c5:70:5e:de:96:7a:de:56:57:1f:3e:
ad:52:e7:7a:e7:e8:b3:ff:4f:f0:b4:86:11:d7:b5:12:32:24:
7d:6e:8c:b9:26:5c:8b:05:be:bc:07:34:e6:09:28:a4:02:4c:
85:0b:69:a4:39:93:cc:63:06:90:ea:c3:22:f0:f0:88:9e:03:
ec:b4:6a:22:c6:4a:3b:22:6f:17:a3:06:1c:f8:3f:49:b7:b4:
2b:13:67:37:74:f7:26:9b:e8:a9:36:ee:be:a6:98:dc:73:a2:
9e:d0:5a:0c:6b:35:43:84:3a:e3:16:5d:b0:56:6e:af:36:19:
a4:ed:73:c5:a2:20:2d:79:e6:c1:9a:92:29:f7:65:a0:04:58:
16:2d:4e:69:a5:e9:c7:bf:45:83:76:61:1b:86:ee:70:d9:63:
46:84:ad:f7:0b:bb:fa:f3:79:95:f2:d4:86:79:9b:97:51:e1:
2d:6e:a0:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUEwQzAxMTAvBgNVBAUTKDE2MDY0RUFCODFBRTE4NzNBMTAxOUQwOTI4OTZGOTIy
N0E1RUVGNDUwHhcNMjYwNzI4MTYyNzUyWhcNMjYwODA0MTYyNzUyWjAYMRYwFAYD
VQQDEw02YTY4ZDg4OS0yZTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAooa4dcH2VgD9DMaDMZO3ET7OKHt9fgfUCffqq7kVoHWptu2Xmz5OBXsh4ahj
nuY+O006/5Ts8PGWhPoA657d79zd1MTGDCVXQc4xP6dEwCzTlyCCcEtaOE2YgOUx
K9W+xNkTYa7ildeiu5iD7j0Qm/JiYgEVs53yBnX6ikAp0BhDYwPjlj6oxnaX/R+y
PUPdjGazl/z/nROwiXLuitRGrJeLcwRwfuxbDh8IlL48q/XQSnNe0YbQiDovPl09
dV0PPMWfZ2URl3O8sxZPMJwUegiHrR6qsQ0UZQaqixSRQJEGvIgy8ZXfrmv1Pj+z
i2kULNoA9Et97Ig4hneppndQCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFErPPlN9
ijK0gimFIsY4pynYBwS/MB8GA1UdIwQYMBaAFBYGTquBrhhzoQGdCSiW+SJ6Xu9F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBDMC8wQjMwNDY3MDgz
RDgxMUU3Qjc1RjI1NjVDNEY5QUUwMi9GZ1pPcTRHdUdIT2hBWjBKS0piNUlucGU3
MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZnWk9xNEd1R0hPaEFaMEpLSmI1SW5wZTcwVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QTBDMC8wQjMwNDY3MDgzRDgxMUU3Qjc1RjI1NjVDNEY5QUUwMi9GZ1pPcTRHdUdI
T2hBWjBKS0piNUlucGU3MFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXqshbJXhRn9yix1zF414Xlbze/WiTAwnYVwaIRXgc2MuG3nP5QSx+T1Xw0DX
zaQJuacFvG8H1Iu6h0Hquqa1Fd/gK9RkcmyRuTW73LHAQMVwXt6Wet5WVx8+rVLn
eufos/9P8LSGEde1EjIkfW6MuSZciwW+vAc05gkopAJMhQtppDmTzGMGkOrDIvDw
iJ4D7LRqIsZKOyJvF6MGHPg/Sbe0KxNnN3T3JpvoqTbuvqaY3HOintBaDGs1Q4Q6
4xZdsFZurzYZpO1zxaIgLXnmwZqSKfdloARYFi1OaaXpx79Fg3ZhG4bucNljRoSt
9wu7+vN5lfLUhnmbl1HhLW6gVg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:59:06 2026 by rpki-client