
$ rpki-client -vvf rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
File: fTWFKD3zPrULnDiNWc14bLudw54.mft (raw, json)
Hash identifier: C9DFmuCMV1L2h56+JnW5HACkk+kpI2l4AJxpQFFN7Y0=
Subject key identifier: 30:F9:03:F1:05:45:07:71:D5:41:3F:EF:E6:7B:60:F7:DA:43:69:FF
Authority key identifier: 7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E
Certificate issuer: /CN=A91352D1/serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E
Certificate serial: 76
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
Manifest number: 72
Signing time: Sat 13 Jun 2026 07:54:46 +0000
Manifest this update: Sat 13 Jun 2026 07:54:45 +0000
Manifest next update: Sat 20 Jun 2026 07:54:45 +0000
Files and hashes: 1: fTWFKD3zPrULnDiNWc14bLudw54.crl (hash: yH8o/2Lw33l58WlB5ukCzXrypwVy3DOlWUNwAaCu7Uw=)
2: F0F521DEC10B11F0B1AC197FC4F9AE02.roa (hash: GOuUl8j+KrJKN/gcw/cqwqcTvAUg8ALJCq8KS5t0JeI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.crl
rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:54:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91352D1, serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E
Validity
Not Before: Jun 13 07:54:45 2026 GMT
Not After : Jun 20 07:54:45 2026 GMT
Subject: CN=6a2d0cc6-89e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:35:e8:63:05:a7:1c:8d:aa:5e:38:59:62:a3:
cf:91:23:5e:03:31:73:8f:71:b6:4e:2b:70:e5:4f:
d8:ff:33:0b:d2:62:cf:7c:d6:34:ef:7e:ee:36:87:
3f:17:6f:a3:4c:72:25:2c:9d:84:16:96:15:3e:bb:
cc:67:5e:65:7d:23:54:62:7d:ce:c3:8f:22:9f:d6:
4c:68:94:52:9f:e3:f2:7c:60:61:bc:de:4f:0b:bc:
31:eb:33:be:bd:d9:4a:6b:34:1c:09:9b:40:35:aa:
1f:da:0a:c7:db:10:21:3a:b6:a1:08:6c:be:8f:ad:
fc:0c:36:09:65:53:5a:9d:7f:a6:8d:13:85:5f:8e:
34:ca:7d:fa:0b:0c:1b:b5:87:cc:43:73:d8:72:1d:
4f:23:12:cc:5e:62:3e:d0:11:84:8e:04:4e:1b:5e:
e4:d8:7f:2e:cc:7c:88:8e:c3:fd:8d:4d:9b:c0:7c:
02:58:8d:75:45:78:73:34:42:cd:3d:39:c2:53:85:
68:2e:36:5b:ed:07:42:67:5e:aa:9c:70:f1:63:77:
71:0f:69:a3:18:a9:d8:38:52:f1:82:77:a0:71:85:
a6:21:0c:7b:87:02:b2:e1:99:9c:c0:19:15:c1:fd:
b4:1f:ec:17:a3:a4:6b:92:80:c3:9d:ea:d1:6a:cc:
a8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F9:03:F1:05:45:07:71:D5:41:3F:EF:E6:7B:60:F7:DA:43:69:FF
X509v3 Authority Key Identifier:
keyid:7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c1:20:56:f6:1b:71:65:86:58:23:fa:61:08:a8:aa:d2:e1:
1f:d1:57:c9:75:2f:19:38:26:2c:98:0c:6e:6e:f3:25:2f:77:
ed:be:f7:01:92:e6:83:4a:94:fe:97:67:5b:7f:87:7e:1a:41:
8a:9a:a3:e1:10:2b:5e:e3:10:75:bf:9b:7f:1c:b2:75:2a:dd:
c0:bd:04:ba:fd:7a:0f:f6:c8:69:0a:1c:96:3b:77:46:a5:37:
4f:f3:ce:4c:f0:08:29:da:db:48:c2:a0:2f:0d:cf:45:f3:88:
8f:67:9f:e8:16:2a:81:d1:c2:7e:76:ba:0d:45:3a:e2:18:22:
a9:99:68:d7:75:9e:28:4b:03:6a:11:74:00:09:98:40:19:7d:
6a:5b:dc:bb:28:35:ba:26:35:16:1d:4d:c5:80:0e:be:3b:ea:
2d:c9:1b:5f:4e:37:8c:4e:30:a0:3b:4f:10:09:58:87:b3:8d:
11:81:15:8c:10:36:49:41:5c:cf:84:3b:e9:3a:c9:06:01:30:
41:3e:8d:50:7e:32:f5:4b:6c:f7:48:b0:63:7c:22:03:c8:65:
20:84:89:9e:e0:c0:6f:42:8a:fb:78:15:5f:24:91:ea:a0:bf:
0e:a2:7e:90:fa:77:09:b5:7f:43:6c:a1:26:4c:20:b3:1e:50:
d6:a9:27:a7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NTJEMTExMC8GA1UEBRMoN0QzNTg1MjgzREYzM0VCNTBCOUMzODhENTlDRDc4NkNC
QjlEQzM5RTAeFw0yNjA2MTMwNzU0NDVaFw0yNjA2MjAwNzU0NDVaMBgxFjAUBgNV
BAMTDTZhMmQwY2M2LTg5ZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCMNehjBaccjapeOFlio8+RI14DMXOPcbZOK3DlT9j/MwvSYs981jTvfu42hz8X
b6NMciUsnYQWlhU+u8xnXmV9I1Rifc7DjyKf1kxolFKf4/J8YGG83k8LvDHrM769
2UprNBwJm0A1qh/aCsfbECE6tqEIbL6PrfwMNgllU1qdf6aNE4VfjjTKffoLDBu1
h8xDc9hyHU8jEsxeYj7QEYSOBE4bXuTYfy7MfIiOw/2NTZvAfAJYjXVFeHM0Qs09
OcJThWguNlvtB0JnXqqccPFjd3EPaaMYqdg4UvGCd6BxhaYhDHuHArLhmZzAGRXB
/bQf7BejpGuSgMOd6tFqzKjXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMPkD8QVF
B3HVQT/v5ntg99pDaf8wHwYDVR0jBBgwFoAUfTWFKD3zPrULnDiNWc14bLudw54w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1MkQxLzY0QTVBQjg0QzBF
QTExRjA5QkE5REI3NEM0RjlBRTAyL2ZUV0ZLRDN6UHJVTG5EaU5XYzE0Ykx1ZHc1
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZlRXRktEM3pQclVMbkRpTldjMTRiTHVkdzU0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1
MkQxLzY0QTVBQjg0QzBFQTExRjA5QkE5REI3NEM0RjlBRTAyL2ZUV0ZLRDN6UHJV
TG5EaU5XYzE0Ykx1ZHc1NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBPwSBW9htxZYZYI/phCKiq0uEf0VfJdS8ZOCYsmAxubvMlL3ftvvcBkuaDSpT+
l2dbf4d+GkGKmqPhECte4xB1v5t/HLJ1Kt3AvQS6/XoP9shpChyWO3dGpTdP885M
8Agp2ttIwqAvDc9F84iPZ5/oFiqB0cJ+droNRTriGCKpmWjXdZ4oSwNqEXQACZhA
GX1qW9y7KDW6JjUWHU3FgA6+O+otyRtfTjeMTjCgO08QCViHs40RgRWMEDZJQVzP
hDvpOskGATBBPo1QfjL1S2z3SLBjfCIDyGUghIme4MBvQor7eBVfJJHqoL8Oon6Q
+ncJtX9DbKEmTCCzHlDWqSen
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:34:35 2026 by rpki-client