
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
File: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft (raw, json)
Hash identifier: EhdXdAxCFq8kGh/ym5BYzgseoM+1pid2qSLOjdM9v/Y=
Subject key identifier: 34:D6:D7:88:CC:E2:28:3D:D1:B9:A1:25:26:E8:9C:03:AF:60:01:38
Authority key identifier: 14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8
Certificate issuer: /CN=A911C564/serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8
Certificate serial: 05E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
Manifest number: 05DD
Signing time: Sat 28 Feb 2026 23:32:43 +0000
Manifest this update: Sat 28 Feb 2026 23:32:42 +0000
Manifest next update: Sat 07 Mar 2026 23:32:42 +0000
Files and hashes: 1: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl (hash: 1QZuuUgdioDRqzJ+M2e2mt/VcgeGoRhmJ2LeXCdwzsQ=)
2: A3B2B0A8EE9711EB8EF1A50AC4F9AE02.roa (hash: T8wRLHwgRzAbwRJS9A54vWKieYY8OWEG7CceQpyt02E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl
rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:32:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1507 (0x5e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C564, serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8
Validity
Not Before: Feb 28 23:32:42 2026 GMT
Not After : Mar 7 23:32:42 2026 GMT
Subject: CN=69a37b1a-cf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:ae:22:d2:ae:4a:40:29:8f:0e:df:47:00:
db:54:01:27:22:ed:18:ac:8e:1b:d8:00:4e:e9:19:
5c:0c:6d:03:23:d5:96:e7:b5:4e:be:47:e1:40:81:
54:b2:46:b8:6a:ee:b2:8e:c8:9b:fe:d6:62:f8:68:
1f:46:95:f0:7e:03:e4:86:ac:95:17:d4:62:cc:21:
2c:60:3e:a9:6f:89:6f:57:c5:9c:fd:b7:e2:05:5b:
d9:5b:1a:46:70:f9:f2:a9:d7:21:08:c3:0e:c5:bc:
85:20:bd:e3:7e:36:3f:46:bf:e6:b0:f2:e6:41:78:
a1:9d:e3:ae:34:2a:e4:6b:3c:2d:96:f5:30:2f:61:
af:8d:7d:0c:6f:f3:f0:ad:8d:89:53:c7:e1:b7:d9:
14:84:fc:21:f3:8d:d1:fd:7f:41:1a:90:8f:d6:a8:
a9:ad:7c:ca:88:14:90:9c:8c:4c:cc:ae:05:a2:9c:
3f:eb:8f:1b:8f:0e:35:9d:05:99:dd:76:03:e8:40:
43:c2:96:31:f4:4a:cd:4f:58:82:67:9f:f6:9c:d4:
87:6d:d7:b7:bb:c2:ad:5a:4a:a8:ec:7b:dc:99:97:
e7:68:48:ba:57:46:28:9d:17:a2:5f:44:29:7c:54:
b5:00:7d:44:42:84:2d:1e:5c:d6:b4:c3:1d:14:0c:
3e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D6:D7:88:CC:E2:28:3D:D1:B9:A1:25:26:E8:9C:03:AF:60:01:38
X509v3 Authority Key Identifier:
keyid:14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e8:b6:48:be:81:03:54:12:a5:5c:e4:ab:9a:06:b2:01:1f:
68:1a:92:f3:05:b6:4f:a0:40:2f:35:fb:2d:a0:0c:6e:aa:4a:
c2:94:ef:18:98:49:88:c9:86:45:a4:87:2a:3f:89:06:e4:e3:
a8:1d:2b:aa:91:65:02:a0:c1:a1:a6:e6:a6:0e:a2:d8:14:d2:
16:9f:89:e1:ac:38:c6:b6:df:91:5e:f7:77:de:85:92:72:83:
fa:69:8d:78:9e:3a:4f:b1:9c:2a:45:6f:a4:93:1a:8e:96:f2:
f3:b4:02:4c:a4:fb:c7:2a:64:45:f3:b1:c7:19:31:4d:aa:c3:
55:32:18:5e:dd:56:23:33:9c:de:5e:31:5d:f9:fa:48:18:4c:
76:bb:cf:75:12:74:39:33:13:79:76:be:39:71:31:6a:cc:44:
3b:bb:8a:d8:89:26:93:03:34:2d:00:8e:7b:15:1a:08:f6:e9:
21:8e:6f:72:3e:24:95:1d:c0:88:e9:5b:27:cb:ce:1b:51:68:
c7:08:c3:f5:f7:3a:f9:9c:fa:f7:f9:36:71:14:fc:b4:5f:fb:
8c:c2:60:f9:5a:db:07:7e:f8:dc:d3:4e:15:be:8d:5d:f0:1d:
70:3b:51:a0:9d:5d:40:70:48:30:c1:3b:7d:15:44:cc:05:19:
80:30:11:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:10:35 2026 by rpki-client