
$ rpki-client -vvf rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
File: FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft (raw, json)
Hash identifier: h7LE5X5XcgWdhctdaiY5YdzsRhJJ5W29xaF5ItzY1qg=
Subject key identifier: 8E:9C:D9:5B:96:C0:28:8F:7F:5E:88:C2:19:90:77:01:5F:DC:CA:FB
Authority key identifier: 16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14
Certificate issuer: /CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
Certificate serial: 02C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
Manifest number: 02AB
Signing time: Sat 13 Jun 2026 01:32:47 +0000
Manifest this update: Sat 13 Jun 2026 01:32:47 +0000
Manifest next update: Sat 20 Jun 2026 01:32:47 +0000
Files and hashes: 1: FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl (hash: IqRhdmsiL3NlnpCBkMewjsGctoJk9wgNd76djPazhJg=)
2: 1083BE64499711EE86AE452DC4F9AE02.roa (hash: 9LFaLc8meqLBp289mlYACBm+5v+NFT6EUQrjqf3aYig=)
3: 7DD0E8845A3211EDB637E665C4F9AE02.roa (hash: eg3pUwfwQDE+9YQzOG9BMq0Bkyet7crQzC1+mV0wngc=)
4: 7D0DFE0A5A3211EDB637E665C4F9AE02.roa (hash: EgHfoXDPWkSf9EMELvfB9wprgOdP6M6i5C22XOX+eIg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl
rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:32:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705 (0x2c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91314BC, serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
Validity
Not Before: Jun 13 01:32:47 2026 GMT
Not After : Jun 20 01:32:47 2026 GMT
Subject: CN=6a2cb33f-02b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:50:cb:b1:9b:19:78:bc:82:67:18:6e:97:74:
59:f7:53:03:2f:c1:53:13:a8:90:e9:c5:e4:60:83:
24:49:c3:f8:f1:4a:c3:b8:c5:cc:d9:58:10:8f:2c:
10:7b:ce:53:35:a1:66:1a:21:78:96:96:40:af:63:
d8:71:7d:0b:71:df:5e:fd:d4:33:62:da:cb:34:3b:
70:e1:ab:dc:a3:b2:f0:04:2c:dc:3d:2b:b6:32:3f:
54:bd:c2:8d:3a:c3:1b:4b:d9:d1:6a:88:23:20:97:
20:53:4e:f2:6f:b8:bb:62:e6:28:49:92:5c:2c:d6:
49:68:5d:45:0a:48:78:1e:50:97:7c:23:2a:c5:34:
2e:b6:89:ad:ab:c5:14:7c:da:6e:4b:1e:75:78:ee:
63:01:1e:f8:f2:03:e4:fc:0a:b5:d0:60:4c:f0:37:
94:ea:f0:28:41:2b:6a:fc:55:72:b2:33:8f:42:85:
fa:f5:e7:52:0e:fd:1e:0f:ed:43:87:99:cc:13:35:
f4:f2:ed:02:ac:f8:30:2a:4f:db:ef:34:5c:ca:11:
26:f0:b9:93:68:3a:06:fe:97:30:fb:90:68:86:6c:
a6:f8:a1:3f:ec:90:63:b4:c7:50:bb:a8:43:6e:99:
f4:1d:72:7c:3d:c2:9b:e4:e7:7a:88:e7:f3:10:d9:
5c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9C:D9:5B:96:C0:28:8F:7F:5E:88:C2:19:90:77:01:5F:DC:CA:FB
X509v3 Authority Key Identifier:
keyid:16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:1f:78:68:71:4c:c8:f0:9a:65:fd:62:3c:26:fc:0e:d3:c7:
2c:ad:06:d4:7b:bd:fa:4c:21:ea:70:bd:ba:5f:7c:89:a1:f3:
8c:60:62:f8:98:0f:8e:8f:86:b2:15:f3:48:45:3f:d1:c4:f3:
e6:5d:34:50:ce:f9:0a:78:f4:b5:5c:31:b1:b0:a3:62:eb:70:
d9:8e:b9:96:b5:9f:82:1e:a7:e2:53:8a:e5:5f:80:af:dd:a6:
91:7f:04:8d:f1:a6:82:2f:dd:6f:07:01:b5:da:76:9f:4f:1e:
9f:79:f0:ef:93:fc:82:cd:5d:ae:ad:91:17:a3:50:10:f6:21:
e8:90:0d:ad:10:aa:6e:e5:1e:d9:6d:f2:30:a2:36:8c:c2:ea:
8f:17:4e:94:34:d1:7f:77:0e:9c:51:d7:21:2c:5f:0c:63:b7:
19:ba:14:ca:8d:91:95:69:9a:88:b7:d2:6a:89:53:88:12:4f:
4b:50:7d:bb:61:1a:64:4d:cf:7d:b0:82:7c:22:fb:47:fa:b4:
fc:ce:88:fa:8d:72:55:f0:09:cb:f8:a7:32:d0:d1:64:30:f9:
1c:2b:fa:38:83:10:0a:64:3e:87:b8:5f:42:b1:2b:e3:40:e8:
3b:fd:4f:c8:11:f4:e7:b7:69:38:d5:e0:2f:b5:4d:56:3a:dd:
57:14:4e:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE0QkMxMTAvBgNVBAUTKDE2ODQxNUMwQzEzNDAxQzBENzcxNTcxREY4NkY4Q0Q1
Rjg1MDNCMTQwHhcNMjYwNjEzMDEzMjQ3WhcNMjYwNjIwMDEzMjQ3WjAYMRYwFAYD
VQQDEw02YTJjYjMzZi0wMmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA41DLsZsZeLyCZxhul3RZ91MDL8FTE6iQ6cXkYIMkScP48UrDuMXM2VgQjywQ
e85TNaFmGiF4lpZAr2PYcX0Lcd9e/dQzYtrLNDtw4avco7LwBCzcPSu2Mj9UvcKN
OsMbS9nRaogjIJcgU07yb7i7YuYoSZJcLNZJaF1FCkh4HlCXfCMqxTQutomtq8UU
fNpuSx51eO5jAR748gPk/Aq10GBM8DeU6vAoQStq/FVysjOPQoX69edSDv0eD+1D
h5nMEzX08u0CrPgwKk/b7zRcyhEm8LmTaDoG/pcw+5Bohmym+KE/7JBjtMdQu6hD
bpn0HXJ8PcKb5Od6iOfzENlcLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI6c2VuW
wCiPf16IwhmQdwFf3Mr7MB8GA1UdIwQYMBaAFBaEFcDBNAHA13FXHfhvjNX4UDsU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTRCQy83RkQwMTY2QzVB
MkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFjRFhjVmNkLUctTTFmaFFP
eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZvUVZ3TUUwQWNEWGNWY2QtRy1NMWZoUU94US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTRCQy83RkQwMTY2QzVBMkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFj
RFhjVmNkLUctTTFmaFFPeFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKR94aHFMyPCaZf1iPCb8DtPHLK0G1Hu9+kwh6nC9ul98iaHzjGBi+JgPjo+G
shXzSEU/0cTz5l00UM75Cnj0tVwxsbCjYutw2Y65lrWfgh6n4lOK5V+Ar92mkX8E
jfGmgi/dbwcBtdp2n08en3nw75P8gs1drq2RF6NQEPYh6JANrRCqbuUe2W3yMKI2
jMLqjxdOlDTRf3cOnFHXISxfDGO3GboUyo2RlWmaiLfSaolTiBJPS1B9u2EaZE3P
fbCCfCL7R/q0/M6I+o1yVfAJy/inMtDRZDD5HCv6OIMQCmQ+h7hfQrEr40DoO/1P
yBH057dpONXgL7VNVjrdVxROQg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:49:02 2026 by rpki-client