
$ rpki-client -vvf rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
File: FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft (raw, json)
Hash identifier: bwY0JnqCPMcjnDAz5CRkQWR40ONt+CPp0k4ScDP+LVs=
Subject key identifier: 13:DF:44:BD:67:0D:2E:8C:5B:35:7A:36:1F:8B:22:0C:F1:EB:BC:FE
Authority key identifier: 16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14
Certificate issuer: /CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
Certificate serial: 02D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
Manifest number: 02C1
Signing time: Mon 27 Jul 2026 02:38:08 +0000
Manifest this update: Mon 27 Jul 2026 02:38:07 +0000
Manifest next update: Mon 03 Aug 2026 02:38:07 +0000
Files and hashes: 1: FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl (hash: ukLJ4Rrfg9QORDO9VFKhDt4PKOzcSvumrqclf2RvWqs=)
2: 1083BE64499711EE86AE452DC4F9AE02.roa (hash: 9LFaLc8meqLBp289mlYACBm+5v+NFT6EUQrjqf3aYig=)
3: 7DD0E8845A3211EDB637E665C4F9AE02.roa (hash: eg3pUwfwQDE+9YQzOG9BMq0Bkyet7crQzC1+mV0wngc=)
4: 7D0DFE0A5A3211EDB637E665C4F9AE02.roa (hash: EgHfoXDPWkSf9EMELvfB9wprgOdP6M6i5C22XOX+eIg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl
rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 727 (0x2d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91314BC, serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
Validity
Not Before: Jul 27 02:38:07 2026 GMT
Not After : Aug 3 02:38:07 2026 GMT
Subject: CN=6a66c48f-1183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4f:4b:21:05:1d:c2:92:28:05:92:f0:db:7b:
1b:32:6c:cf:27:8e:52:99:18:0f:8b:30:83:2c:64:
8d:9d:32:42:5f:5b:5c:9c:b7:63:8d:79:e7:e7:88:
7b:fa:af:f9:15:e2:9c:92:f9:e1:b5:d0:28:3c:a8:
a1:d7:8c:61:ca:9d:f4:ef:29:8b:d9:cc:fc:0d:67:
29:eb:d6:1e:03:a2:c7:ea:9a:f3:da:e5:18:01:b6:
9e:c9:e8:4f:b3:f9:32:76:e4:ad:88:91:6f:75:c3:
31:75:7a:01:27:86:ca:b0:76:d6:c1:4e:92:94:be:
e5:fd:11:1b:2d:b2:ef:0a:59:68:a7:ea:7a:dd:ae:
51:02:37:7a:d5:bc:8e:9d:ab:2e:05:ed:a0:5b:e1:
3b:90:9a:63:88:95:40:d7:c9:c2:c9:a8:3c:1f:48:
de:05:4d:b8:88:0d:12:13:aa:3e:74:5f:1c:ae:09:
5c:f3:d5:ef:da:a7:50:90:a2:16:9a:2b:4e:56:c9:
29:f7:e9:15:fe:ba:81:32:b0:e4:c3:71:be:04:9b:
fa:40:7a:d6:dc:5d:58:74:dc:39:c8:08:df:c8:87:
e4:7a:1f:46:bc:1e:42:4d:a1:f7:92:7a:08:13:34:
fb:62:9b:aa:01:a9:69:fd:15:6b:3f:53:fa:aa:ff:
d0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DF:44:BD:67:0D:2E:8C:5B:35:7A:36:1F:8B:22:0C:F1:EB:BC:FE
X509v3 Authority Key Identifier:
keyid:16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:4a:46:26:a3:07:61:5f:e2:93:1d:a5:1c:a5:c8:25:28:db:
55:7b:7b:fc:31:a2:2c:0c:5f:02:41:82:8f:46:57:13:d4:4a:
fd:65:85:68:0c:9e:11:c7:88:30:7f:e2:0f:4b:50:19:80:0f:
33:f8:11:ef:68:cd:53:58:5b:fa:97:b8:ae:e1:95:41:5f:a5:
b9:cc:96:20:6b:3b:7e:a4:1d:70:de:f1:f7:85:af:ea:d8:b8:
a6:02:24:c8:5a:e7:a4:e4:27:7f:bc:74:0b:5f:75:57:e3:34:
57:a1:d1:df:00:9e:18:fc:e2:90:e1:6a:53:8c:70:76:5d:c0:
6e:6d:d4:0b:c4:21:fa:db:58:ab:53:55:06:4b:3f:41:be:6e:
84:74:ad:a4:4a:2a:41:29:1f:ed:bc:b7:32:40:0e:97:2b:9c:
c9:62:14:83:00:dc:3a:46:ea:c4:13:e9:ae:c4:26:de:ca:8a:
70:2d:d1:48:3d:97:c6:85:c3:1c:3c:7a:31:33:93:f9:9d:35:
b9:c0:1f:a7:9e:bc:11:7f:ac:da:ab:79:95:1b:c7:58:82:2f:
8d:ba:71:a6:93:de:25:b4:33:4b:d5:3b:4e:82:9e:fa:cf:e5:
db:14:20:6f:d8:0f:df:08:ab:92:84:54:0f:6a:30:47:4f:60:
00:83:47:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE0QkMxMTAvBgNVBAUTKDE2ODQxNUMwQzEzNDAxQzBENzcxNTcxREY4NkY4Q0Q1
Rjg1MDNCMTQwHhcNMjYwNzI3MDIzODA3WhcNMjYwODAzMDIzODA3WjAYMRYwFAYD
VQQDEw02YTY2YzQ4Zi0xMTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2k9LIQUdwpIoBZLw23sbMmzPJ45SmRgPizCDLGSNnTJCX1tcnLdjjXnn54h7
+q/5FeKckvnhtdAoPKih14xhyp307ymL2cz8DWcp69YeA6LH6prz2uUYAbaeyehP
s/kyduStiJFvdcMxdXoBJ4bKsHbWwU6SlL7l/REbLbLvCllop+p63a5RAjd61byO
nasuBe2gW+E7kJpjiJVA18nCyag8H0jeBU24iA0SE6o+dF8crglc89Xv2qdQkKIW
mitOVskp9+kV/rqBMrDkw3G+BJv6QHrW3F1YdNw5yAjfyIfkeh9GvB5CTaH3knoI
EzT7YpuqAalp/RVrP1P6qv/Q1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBPfRL1n
DS6MWzV6Nh+LIgzx67z+MB8GA1UdIwQYMBaAFBaEFcDBNAHA13FXHfhvjNX4UDsU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTRCQy83RkQwMTY2QzVB
MkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFjRFhjVmNkLUctTTFmaFFP
eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZvUVZ3TUUwQWNEWGNWY2QtRy1NMWZoUU94US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTRCQy83RkQwMTY2QzVBMkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFj
RFhjVmNkLUctTTFmaFFPeFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUUpGJqMHYV/ikx2lHKXIJSjbVXt7/DGiLAxfAkGCj0ZXE9RK/WWFaAyeEceI
MH/iD0tQGYAPM/gR72jNU1hb+pe4ruGVQV+lucyWIGs7fqQdcN7x94Wv6ti4pgIk
yFrnpOQnf7x0C191V+M0V6HR3wCeGPzikOFqU4xwdl3Abm3UC8Qh+ttYq1NVBks/
Qb5uhHStpEoqQSkf7by3MkAOlyucyWIUgwDcOkbqxBPprsQm3sqKcC3RSD2XxoXD
HDx6MTOT+Z01ucAfp568EX+s2qt5lRvHWIIvjbpxppPeJbQzS9U7ToKe+s/l2xQg
b9gP3wirkoRUD2owR09gAINH7A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:26 2026 by rpki-client