
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
File: fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft (raw, json)
Hash identifier: D6bL2wmf5eNPYxnD9VTY4csIv0xeGiOfA+QwQ7AIABY=
Subject key identifier: FF:35:3F:85:C8:49:44:55:5D:D5:0E:D7:D6:4B:2F:BE:DC:8B:C3:89
Authority key identifier: 7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78
Certificate issuer: /CN=A913D02A/serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378
Certificate serial: 0C30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
Manifest number: 0C2D
Signing time: Tue 28 Jul 2026 18:59:06 +0000
Manifest this update: Tue 28 Jul 2026 18:59:05 +0000
Manifest next update: Tue 04 Aug 2026 18:59:05 +0000
Files and hashes: 1: fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl (hash: 9j2zI/I3+U0FXMBfoRG1F8ALIh8UfDWEPzPPTXbHML4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl
rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:59:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3120 (0xc30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D02A, serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378
Validity
Not Before: Jul 28 18:59:05 2026 GMT
Not After : Aug 4 18:59:05 2026 GMT
Subject: CN=6a68fbfa-573e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:4f:18:b1:dc:b1:f7:03:85:83:fc:bf:80:
9f:18:e7:3f:5b:73:1a:e9:3f:79:14:f4:39:27:ae:
05:de:d4:f8:e9:fb:d0:4d:76:de:33:3a:9f:48:73:
98:33:2f:70:8c:c2:c1:52:32:de:8c:0e:2d:5f:4d:
00:9d:4f:00:c8:40:59:32:50:83:e0:bf:f4:42:6e:
38:67:4d:32:f4:d6:f2:b0:46:bd:71:89:0d:bf:12:
bb:6d:6c:32:b8:1d:bd:a4:36:3f:18:3f:4b:f6:58:
5b:ef:b2:e7:e2:ee:78:3d:1e:8d:00:8a:f1:e3:da:
19:d5:f8:32:e5:f4:7a:1c:b7:d2:8f:7b:c2:17:f0:
8a:79:a2:94:aa:1f:d0:fe:3d:7b:d6:be:0e:4c:26:
16:83:2a:b5:f9:74:2a:74:34:e8:2e:80:cc:2c:27:
c3:74:c0:56:7a:cf:a5:e3:fe:cf:fb:a7:87:ae:36:
b9:0c:ad:0e:af:6b:32:5f:3e:fe:93:cf:31:fa:24:
d9:1c:1a:1b:1a:73:05:e6:f9:20:0c:50:ef:17:77:
fd:f1:94:38:e3:48:29:13:96:bc:4f:83:4c:ca:28:
4f:39:23:ca:fa:0a:ab:04:ef:0b:e5:ea:0e:66:fc:
f7:dc:49:81:b2:bf:92:23:78:4c:c9:35:58:89:03:
22:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:35:3F:85:C8:49:44:55:5D:D5:0E:D7:D6:4B:2F:BE:DC:8B:C3:89
X509v3 Authority Key Identifier:
keyid:7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:79:da:29:e0:46:38:70:d5:73:b6:25:1a:76:bc:2d:47:a8:
7e:db:ae:95:28:ef:fe:6f:11:26:9d:9f:d9:68:82:69:69:d9:
a6:d2:54:c7:f1:20:40:c7:30:5e:58:7f:69:c0:d6:a9:1d:5e:
be:4e:f0:64:ad:3c:64:21:e7:dd:a0:66:11:64:e3:5f:bf:ba:
80:7a:23:ca:d9:30:a0:6f:67:4e:4c:e8:54:40:58:34:c5:65:
07:a6:80:5c:42:cc:32:d8:f6:45:05:a6:89:b2:28:2c:23:26:
6c:e5:4a:41:3a:fc:78:ed:f8:14:77:d7:a7:b1:a6:df:75:c1:
fa:a7:44:2c:3b:e4:ef:9a:c7:25:40:b1:52:02:76:ad:ac:58:
d0:0c:24:e7:13:88:4b:24:2e:38:04:95:19:65:aa:19:c3:71:
03:a0:28:88:03:c0:2d:76:09:d8:7f:cc:a6:af:66:10:c7:10:
50:c5:d6:ab:4f:01:cb:0e:20:45:cb:03:d3:cb:80:2a:3a:f5:
4b:62:43:6d:b9:b2:98:7b:91:8f:97:68:5a:39:57:06:e9:e3:
52:a1:d6:81:82:64:71:17:e7:81:22:e7:eb:29:0b:1c:10:ab:
35:09:a1:a5:be:9c:71:96:57:fe:d6:e3:ab:1b:e5:6f:a7:4f:
0c:75:37:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QwMkExMTAvBgNVBAUTKDdDQkY4MUM1OUUzMjVFRjAwNjk3MzEwQjM5NDVGRUEx
QzEwNkIzNzgwHhcNMjYwNzI4MTg1OTA1WhcNMjYwODA0MTg1OTA1WjAYMRYwFAYD
VQQDEw02YTY4ZmJmYS01NzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAswZPGLHcsfcDhYP8v4CfGOc/W3Ma6T95FPQ5J64F3tT46fvQTXbeMzqfSHOY
My9wjMLBUjLejA4tX00AnU8AyEBZMlCD4L/0Qm44Z00y9NbysEa9cYkNvxK7bWwy
uB29pDY/GD9L9lhb77Ln4u54PR6NAIrx49oZ1fgy5fR6HLfSj3vCF/CKeaKUqh/Q
/j171r4OTCYWgyq1+XQqdDToLoDMLCfDdMBWes+l4/7P+6eHrja5DK0Or2syXz7+
k88x+iTZHBobGnMF5vkgDFDvF3f98ZQ440gpE5a8T4NMyihPOSPK+gqrBO8L5eoO
Zvz33EmBsr+SI3hMyTVYiQMiDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP81P4XI
SURVXdUO19ZLL77ci8OJMB8GA1UdIwQYMBaAFHy/gcWeMl7wBpcxCzlF/qHBBrN4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDAyQS83N0ExRDk1RTMz
QkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2QUdsekVMT1VYLW9jRUdz
M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZMLUJ4WjR5WHZBR2x6RUxPVVgtb2NFR3MzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDAyQS83N0ExRDk1RTMzQkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2
QUdsekVMT1VYLW9jRUdzM2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFnnaKeBGOHDVc7YlGna8LUeoftuulSjv/m8RJp2f2WiCaWnZptJUx/EgQMcw
Xlh/acDWqR1evk7wZK08ZCHn3aBmEWTjX7+6gHojytkwoG9nTkzoVEBYNMVlB6aA
XELMMtj2RQWmibIoLCMmbOVKQTr8eO34FHfXp7Gm33XB+qdELDvk75rHJUCxUgJ2
raxY0Awk5xOISyQuOASVGWWqGcNxA6AoiAPALXYJ2H/Mpq9mEMcQUMXWq08Byw4g
RcsD08uAKjr1S2JDbbmymHuRj5doWjlXBunjUqHWgYJkcRfngSLn6ykLHBCrNQmh
pb6ccZZX/tbjqxvlb6dPDHU3Fg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:48:19 2026 by rpki-client