
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft
File: FU2hKxG1QFxQywEZ42qL8-0NIbw.mft (raw, json)
Hash identifier: aa5zzmRj6mQc0hD5BFU5P+htytOLKLQiYzfi9+Y3QuA=
Subject key identifier: 6B:A2:CD:DE:68:65:4A:AF:23:23:F1:B1:6A:3B:30:BC:A7:EC:CC:B5
Authority key identifier: 15:4D:A1:2B:11:B5:40:5C:50:CB:01:19:E3:6A:8B:F3:ED:0D:21:BC
Certificate issuer: /CN=A912A2C1/serialNumber=154DA12B11B5405C50CB0119E36A8BF3ED0D21BC
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FU2hKxG1QFxQywEZ42qL8-0NIbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft
Manifest number: 0B
Signing time: Sat 13 Jun 2026 09:12:20 +0000
Manifest this update: Sat 13 Jun 2026 09:12:19 +0000
Manifest next update: Sat 20 Jun 2026 09:12:19 +0000
Files and hashes: 1: FU2hKxG1QFxQywEZ42qL8-0NIbw.crl (hash: qqtmkKk4lFaYkIasU5FFboHdCFV/I/OchoQUJnzz31U=)
2: 77A068EA57D611F1A509C21FCD833773.roa (hash: obXRKQp33behMNw0kLg97yChlSrOJ2Iv9yjscfOnr/I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.crl
rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FU2hKxG1QFxQywEZ42qL8-0NIbw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 09:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A2C1, serialNumber=154DA12B11B5405C50CB0119E36A8BF3ED0D21BC
Validity
Not Before: Jun 13 09:12:19 2026 GMT
Not After : Jun 20 09:12:19 2026 GMT
Subject: CN=6a2d1ef4-0daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:bb:1a:98:86:2a:40:58:01:b3:07:f8:ee:
b6:38:8a:cf:38:9d:60:5b:08:f4:50:4d:51:19:91:
50:1f:20:c5:84:71:2b:2a:f1:36:93:90:0f:2e:f1:
5f:0d:13:4d:6f:f6:6e:f0:39:42:34:20:fe:e8:53:
5b:a9:c7:d8:8c:fc:7a:6e:e6:23:d4:7e:b6:ee:8c:
1b:43:4f:90:5e:94:6f:ea:0a:42:1d:9b:89:ef:51:
7a:5d:b2:f2:0e:48:ab:3d:03:9e:16:f4:12:5c:1e:
40:cc:aa:f7:93:8e:c5:26:11:e6:fd:a7:f7:2b:cb:
1e:b9:33:22:1a:51:ad:d6:6e:52:cc:58:4a:49:8a:
1d:38:f3:66:41:c9:53:38:07:77:2e:6e:d4:d4:a3:
a8:d7:dc:ee:d8:47:67:79:5b:6a:00:92:e9:21:37:
70:e5:16:88:07:e0:4e:c3:91:12:10:cd:e2:56:ea:
76:06:82:39:78:25:75:2f:ae:78:ee:40:f0:be:21:
d0:84:ed:5c:32:f7:77:85:3c:02:2f:3c:3e:6d:ba:
0b:7d:24:d8:bd:bf:1b:12:ed:81:b7:95:49:ce:22:
45:2d:4f:7b:f1:5d:2b:6e:ec:8d:88:32:c7:e5:e1:
34:8e:25:ea:c2:b6:04:c7:86:70:74:fa:53:3c:c1:
b8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A2:CD:DE:68:65:4A:AF:23:23:F1:B1:6A:3B:30:BC:A7:EC:CC:B5
X509v3 Authority Key Identifier:
keyid:15:4D:A1:2B:11:B5:40:5C:50:CB:01:19:E3:6A:8B:F3:ED:0D:21:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FU2hKxG1QFxQywEZ42qL8-0NIbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:37:06:18:53:96:eb:20:09:dd:4a:d1:d5:47:d7:d0:27:0e:
e4:ec:db:fa:1f:f5:56:60:f8:34:62:90:aa:ef:86:84:f7:fd:
63:70:8d:4b:51:dc:a8:61:90:93:d7:c7:86:db:1a:f3:04:62:
8a:05:a5:24:19:a9:ae:b3:cc:83:48:5d:3b:c9:a8:0c:43:a6:
6e:bf:dd:37:b4:63:e4:7c:16:b5:f7:fd:a6:63:f6:9d:7b:ad:
61:86:6b:10:a1:77:66:fe:3e:60:28:8b:b9:fd:f3:7f:d5:b1:
36:71:83:66:90:fe:da:c5:7d:12:f1:71:4c:53:d2:e3:53:c1:
51:b8:48:9f:90:b0:f5:a4:3b:33:bf:59:6e:a5:2f:28:bb:b7:
d0:66:20:ec:d0:1f:c7:fb:d3:c8:8f:83:ea:1e:d8:fb:93:2a:
79:7b:15:70:5d:23:b2:00:4e:f6:5b:81:9e:89:2d:1e:ff:83:
0c:d5:88:b0:dc:68:59:7e:90:14:c9:1c:2a:04:55:31:0f:7d:
3d:02:20:4e:77:14:8a:c7:8b:27:6a:d9:8a:62:57:e3:8d:18:
31:de:99:22:d0:7b:73:b1:60:98:66:29:5a:1c:c3:45:70:dd:
26:23:74:de:d9:5e:19:58:c9:9b:aa:f2:7f:3d:24:ac:a0:9f:
dd:a8:96:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:06:56 2026 by rpki-client