
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
File: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft (raw, json)
Hash identifier: kjIJzOmr3g2cWxoa+BRfwMpAky16h3XxmMBuEUrNQuQ=
Subject key identifier: 5B:80:70:5E:07:5E:B8:17:55:67:BF:ED:63:8A:DF:E7:5B:C8:41:E8
Authority key identifier: 14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8
Certificate issuer: /CN=A911C564/serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8
Certificate serial: 0655
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
Manifest number: 064D
Signing time: Mon 28 Sep 2026 22:48:13 +0000
Manifest this update: Mon 28 Sep 2026 22:48:12 +0000
Manifest next update: Mon 05 Oct 2026 22:48:12 +0000
Files and hashes: 1: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl (hash: 4nj3lgw98xwt4N5c3y8vX56X5pJ4EYcVC7HJ5VOQtqo=)
2: A3B2B0A8EE9711EB8EF1A50AC4F9AE02.roa (hash: LsWT9PH7lpuuB3Eu7lPQZ/DRwq+wHiTPxrXabXBYi5Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl
rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 22:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1621 (0x655)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C564, serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8
Validity
Not Before: Sep 28 22:48:12 2026 GMT
Not After : Oct 5 22:48:12 2026 GMT
Subject: CN=6abaeead-1dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f5:ab:14:93:e7:5c:e3:67:65:35:c4:fa:64:
58:1d:1b:f1:e8:dc:85:9c:42:03:f3:ad:50:e2:74:
7d:c9:dc:47:da:da:57:5a:de:d6:f9:13:49:37:1f:
e5:f1:c9:27:4c:63:fb:54:d3:8b:28:93:4d:ae:3b:
d9:66:eb:06:a2:00:c3:0d:00:fb:1b:62:70:1f:f6:
c9:e8:ae:17:e5:5d:f2:63:75:02:9a:50:17:95:5c:
14:cd:8a:a2:14:53:20:30:46:8c:e2:16:e7:5c:02:
74:8c:9c:f5:3c:f2:f8:37:9d:ab:b6:98:0e:22:b3:
a0:ee:8d:d6:bd:81:ea:5d:f9:20:c5:53:14:83:4c:
9a:16:54:9e:a1:0a:66:6f:86:18:c6:6a:fd:2f:f1:
a2:3b:d1:91:96:24:78:cf:72:52:31:22:24:4a:46:
c7:e5:ae:31:76:f1:34:72:76:a7:43:00:42:82:7f:
a4:be:69:61:5a:9c:5b:dd:63:a0:56:0a:a4:27:fa:
24:4e:76:c4:f9:2a:af:46:17:f2:ee:b2:06:cd:3b:
34:ca:35:47:e9:e5:c2:98:29:25:16:f9:b1:dc:78:
bc:3f:45:61:33:73:fa:d9:b7:ac:4f:21:59:97:1f:
70:9d:a0:27:16:dd:3b:ba:7e:08:cc:a6:fd:c6:15:
dc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:80:70:5E:07:5E:B8:17:55:67:BF:ED:63:8A:DF:E7:5B:C8:41:E8
X509v3 Authority Key Identifier:
keyid:14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:08:22:f7:63:5a:b7:4f:a5:f9:dc:65:4d:a4:46:b9:10:b8:
d0:9f:3a:c0:ac:79:d3:14:a0:4e:3c:2d:a5:af:4e:d2:85:b7:
b4:a2:85:c7:b1:0b:9a:ab:7f:35:f4:f6:51:99:1e:d7:4b:f2:
22:4c:91:75:4d:d8:72:f1:4b:06:ab:6b:e8:6a:64:06:0e:a2:
85:06:d9:00:82:99:38:8e:05:98:6a:05:ee:18:25:77:45:b7:
21:43:e0:92:d7:a2:6a:ce:d3:34:b1:3d:14:bf:18:89:ae:15:
17:10:6f:3c:92:ba:26:09:a8:a4:27:26:7c:c7:2d:ec:b3:45:
ab:06:06:66:e0:f7:07:7f:ff:43:1c:3b:16:73:cf:17:88:8e:
31:73:3e:38:7d:18:db:63:31:96:5e:b7:70:34:a7:d2:a1:aa:
8e:40:aa:76:d4:99:e6:28:67:16:f3:03:d7:fd:b9:76:a2:6f:
44:ae:82:3a:0d:b3:c5:f7:dd:79:ee:c0:eb:cd:6e:b0:1d:2f:
d6:42:55:8d:a9:ba:dc:c1:10:87:e5:95:c8:bb:64:71:3d:c1:
c3:e5:dd:3e:1b:64:80:05:d3:54:4b:73:1a:64:ed:76:92:c4:
9a:c3:d7:01:8e:46:16:ff:7e:a4:66:92:f5:22:cb:c6:e9:5c:
cf:c1:63:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:58:31 2026 by rpki-client