
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
File: FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft (raw, json)
Hash identifier: 6ICC0ZOSTdp6MSZEC75vQ41jWI/zSsn6T3vBtWXHP4w=
Subject key identifier: 92:41:58:9F:0C:2B:58:38:EA:77:CC:38:34:36:72:36:CA:57:EA:7A
Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29
Certificate issuer: /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29
Certificate serial: 01E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
Manifest number: 01E2
Signing time: Sat 13 Jun 2026 03:27:06 +0000
Manifest this update: Sat 13 Jun 2026 03:27:05 +0000
Manifest next update: Sat 20 Jun 2026 03:27:05 +0000
Files and hashes: 1: FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl (hash: yJlzOGJ95Lc6StHcA19T3MJwyNgbvk09iro/bW225wk=)
2: 91FC411C836411EE80C08641C4F9AE02.roa (hash: y7rF5vkt8RhtipSe8v56RC2oUIIDL8ARxP+tAlU5uD0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl
rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487 (0x1e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121188, serialNumber=1466407758A8D7B935694896D50275280679AF29
Validity
Not Before: Jun 13 03:27:05 2026 GMT
Not After : Jun 20 03:27:05 2026 GMT
Subject: CN=6a2cce0a-db42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:74:a7:36:90:94:81:2a:50:a6:fa:f8:37:51:
68:4d:9c:f4:7f:4d:4b:9e:86:7c:bc:56:03:fb:7d:
c1:e2:49:a6:49:58:ca:3a:f2:be:2b:7d:dd:06:a2:
9c:e7:b6:d3:aa:05:98:3e:f2:d5:01:2a:56:3d:50:
62:c2:9e:89:13:8b:55:fe:a1:c9:27:f2:69:e3:b5:
48:76:7b:76:17:df:a2:6d:4c:75:79:a6:50:38:21:
74:c8:a5:b4:4c:90:2f:74:98:11:0b:bb:a8:91:7a:
d8:df:f6:36:da:51:cc:26:25:46:79:3a:4f:96:61:
a9:a8:2f:ef:50:c9:4a:1b:7c:f8:77:d9:88:87:35:
24:52:69:ae:87:ca:65:52:ac:3a:05:dc:b3:ee:53:
c4:1f:f9:28:14:76:8d:5e:85:92:d9:3c:3b:89:35:
78:4a:92:ac:e8:c0:5c:7b:92:6d:3c:3b:af:0f:53:
3a:a1:23:2d:97:49:ba:45:a8:29:49:ef:ed:8d:1d:
03:8a:47:ee:45:91:e8:6a:08:15:a7:8b:29:98:96:
3f:5d:62:c5:2f:18:f7:1c:fd:f7:d6:f1:95:62:7f:
3f:32:27:9d:fc:77:23:4d:b3:bd:42:0d:34:5b:f3:
63:c3:9a:23:e5:8a:c6:f5:39:58:d3:ce:3d:25:b3:
a2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:41:58:9F:0C:2B:58:38:EA:77:CC:38:34:36:72:36:CA:57:EA:7A
X509v3 Authority Key Identifier:
keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:73:0d:32:e0:18:c0:a0:de:87:ec:3f:b6:b6:ef:bc:b1:d0:
25:9c:14:6e:ff:d9:f2:f3:3b:76:e1:ba:98:c5:d4:fb:b5:33:
e0:10:22:e9:79:c4:69:c4:79:38:4a:1f:a9:73:18:b0:ca:3f:
69:c2:63:1f:1c:b1:33:91:9b:95:f7:03:0f:85:4d:22:03:51:
14:be:e3:3f:fd:69:31:db:44:0c:4f:6b:11:ef:6c:75:d2:82:
6b:3c:26:7a:cf:f3:0b:d2:9f:41:ac:b5:5e:2e:8f:f1:27:74:
14:9c:04:1e:57:d3:ac:7f:c7:54:8f:e3:80:fb:d3:d0:93:9d:
4c:8e:22:9e:da:a1:97:96:95:35:2a:c1:75:bd:b6:1a:bb:80:
e1:e4:bf:f7:22:4d:d5:a1:f8:b1:b6:2a:12:50:22:9c:22:74:
d5:ce:28:8e:c5:5f:8e:7c:57:e7:20:82:51:88:1b:4c:61:c9:
0d:bd:a4:1c:0c:82:8d:fd:24:1e:74:19:35:99:2a:f4:f3:54:
e2:b5:d3:98:52:69:8b:26:05:25:f7:0f:2d:60:a0:f1:5f:0c:
db:e5:10:34:20:55:49:65:4d:a3:db:74:b8:c7:d6:dd:07:41:
b3:ea:42:80:9e:60:fd:5a:ee:99:b5:49:5b:0b:e1:79:b8:83:
b1:d9:29:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:51:46 2026 by rpki-client