
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.mft
File: fdt5B7eWYwk_a_OC2oySdjuuHyo.mft (raw, json)
Hash identifier: r0KztUN3qq7Lh42N8FehMuNAEb+4CAFlsCVvYac/YI8=
Subject key identifier: 3E:4C:10:BF:CA:20:5A:69:CF:59:2C:71:03:DE:A2:C6:1B:3C:A1:B0
Authority key identifier: 7D:DB:79:07:B7:96:63:09:3F:6B:F3:82:DA:8C:92:76:3B:AE:1F:2A
Certificate issuer: /CN=A913EECE/serialNumber=7DDB7907B79663093F6BF382DA8C92763BAE1F2A
Certificate serial: 17
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fdt5B7eWYwk_a_OC2oySdjuuHyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.mft
Manifest number: 15
Signing time: Sat 13 Jun 2026 09:05:53 +0000
Manifest this update: Sat 13 Jun 2026 09:05:53 +0000
Manifest next update: Sat 20 Jun 2026 09:05:53 +0000
Files and hashes: 1: fdt5B7eWYwk_a_OC2oySdjuuHyo.crl (hash: 0TjHfgzlUiblsPJmkoeoggYUysQ1xRAgeDJRpWirrWU=)
2: 670F51BA49E611F1A9E07428B5833773.roa (hash: i0rrVfRZcMuLASMWtvqI+waoaniI+Rv5lolA1yOyLxg=)
3: 71E3AE9C49E611F19E2EA428B5833773.roa (hash: SVrt92QUxEJZNMnBQkhwo9GWyfKOQxkinsISsxhBSJU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.crl
rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fdt5B7eWYwk_a_OC2oySdjuuHyo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 09:05:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EECE, serialNumber=7DDB7907B79663093F6BF382DA8C92763BAE1F2A
Validity
Not Before: Jun 13 09:05:53 2026 GMT
Not After : Jun 20 09:05:53 2026 GMT
Subject: CN=6a2d1d71-9316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:84:97:2d:57:6c:12:34:8e:e0:ea:be:f7:
67:6f:3d:19:7c:d1:23:fc:8e:77:db:09:b3:bc:46:
f3:2e:04:fc:95:0e:7b:ab:f4:b0:a3:8e:a0:01:b3:
f9:41:d1:ee:fb:33:84:9a:21:0d:06:b0:da:7e:ab:
50:a9:38:5b:37:72:61:1d:b1:95:8e:10:27:3a:46:
ca:c0:c5:ba:5e:27:f9:c6:64:df:d7:13:07:79:37:
86:1b:29:39:3a:6c:a1:f5:2f:ed:2e:68:fa:79:e0:
ba:bc:3d:e2:4f:b9:60:dc:f4:b6:91:82:57:68:96:
eb:e6:ec:a7:dc:4b:e1:a7:c8:d2:f2:bf:6c:f0:8c:
bb:ac:6e:e9:26:c0:79:00:6f:59:82:29:50:57:39:
f6:ac:f1:cb:3b:48:0e:41:1f:73:5e:f6:3d:34:02:
a4:9e:89:bf:55:c4:bb:25:6e:16:bd:19:18:97:8e:
22:79:91:1c:4a:ec:1a:09:7e:55:93:fb:70:e1:af:
86:b7:96:2a:f6:91:a9:ed:ad:65:2a:1e:97:80:4e:
68:a4:51:89:69:96:13:d6:4e:22:38:79:26:a2:72:
2e:87:1a:6d:da:e3:69:29:44:15:fe:7f:52:ee:95:
a7:68:13:73:10:7f:e7:8e:ea:e1:27:77:58:2f:87:
a0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4C:10:BF:CA:20:5A:69:CF:59:2C:71:03:DE:A2:C6:1B:3C:A1:B0
X509v3 Authority Key Identifier:
keyid:7D:DB:79:07:B7:96:63:09:3F:6B:F3:82:DA:8C:92:76:3B:AE:1F:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fdt5B7eWYwk_a_OC2oySdjuuHyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:91:5d:16:4f:48:e2:18:72:b0:93:ac:a5:c9:7f:26:19:4b:
ab:ee:d4:ce:65:33:b8:cb:7e:64:43:08:a8:8f:3a:a3:d8:db:
cc:0f:d5:64:24:c5:82:91:8b:8d:c8:68:21:06:2d:b0:3c:b8:
d6:b6:49:4f:0b:46:cf:64:37:94:cb:e4:62:e5:dc:8f:2e:a5:
a1:cd:ec:96:9f:67:5f:8d:e0:e8:98:59:8c:e7:b9:65:84:33:
30:b4:fb:ba:3d:18:5f:cd:71:b5:9e:b7:f1:d1:49:ed:09:3b:
bf:cb:10:95:fd:cb:1a:b6:c6:cd:11:95:e6:a6:15:b3:8b:dd:
07:6f:ee:46:61:4e:d5:4e:4d:aa:e0:23:69:ff:9d:8e:c0:79:
19:cf:17:ae:5d:26:b3:09:bf:02:a5:0f:8c:43:7b:8c:b5:91:
d0:a1:d6:78:ed:6d:14:d8:3c:66:2c:2f:a8:cf:cb:7f:c3:c3:
36:fa:b9:7f:2f:db:15:a9:e4:de:cf:d7:b0:ef:76:39:8c:ce:
55:a5:3a:cb:27:44:9b:bc:0e:34:db:f8:aa:bd:90:5e:6f:23:
a6:eb:20:08:54:fb:9b:cc:25:3c:29:94:5f:5f:af:fe:79:27:
78:48:ea:04:8d:38:89:f7:e5:96:53:b7:ca:77:bd:32:dc:f6:
10:17:d7:52
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
RUVDRTExMC8GA1UEBRMoN0REQjc5MDdCNzk2NjMwOTNGNkJGMzgyREE4QzkyNzYz
QkFFMUYyQTAeFw0yNjA2MTMwOTA1NTNaFw0yNjA2MjAwOTA1NTNaMBgxFjAUBgNV
BAMTDTZhMmQxZDcxLTkzMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCorYSXLVdsEjSO4Oq+92dvPRl80SP8jnfbCbO8RvMuBPyVDnur9LCjjqABs/lB
0e77M4SaIQ0GsNp+q1CpOFs3cmEdsZWOECc6RsrAxbpeJ/nGZN/XEwd5N4YbKTk6
bKH1L+0uaPp54Lq8PeJPuWDc9LaRgldoluvm7KfcS+GnyNLyv2zwjLusbukmwHkA
b1mCKVBXOfas8cs7SA5BH3Ne9j00AqSeib9VxLslbha9GRiXjiJ5kRxK7BoJflWT
+3Dhr4a3lir2kantrWUqHpeATmikUYlplhPWTiI4eSaici6HGm3a42kpRBX+f1Lu
ladoE3MQf+eO6uEnd1gvh6DPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPkwQv8og
WmnPWSxxA96ixhs8obAwHwYDVR0jBBgwFoAUfdt5B7eWYwk/a/OC2oySdjuuHyow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFRUNFLzU3NEJCNDk4NDlF
MjExRjE5MTQ1Qzc4RkIwODMzNzczL2ZkdDVCN2VXWXdrX2FfT0Myb3lTZGp1dUh5
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZmR0NUI3ZVdZd2tfYV9PQzJveVNkanV1SHlvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF
RUNFLzU3NEJCNDk4NDlFMjExRjE5MTQ1Qzc4RkIwODMzNzczL2ZkdDVCN2VXWXdr
X2FfT0Myb3lTZGp1dUh5by5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBakV0WT0jiGHKwk6ylyX8mGUur7tTOZTO4y35kQwiojzqj2NvMD9VkJMWCkYuN
yGghBi2wPLjWtklPC0bPZDeUy+Ri5dyPLqWhzeyWn2dfjeDomFmM57llhDMwtPu6
PRhfzXG1nrfx0UntCTu/yxCV/csatsbNEZXmphWzi90Hb+5GYU7VTk2q4CNp/52O
wHkZzxeuXSazCb8CpQ+MQ3uMtZHQodZ47W0U2DxmLC+oz8t/w8M2+rl/L9sVqeTe
z9ew73Y5jM5VpTrLJ0SbvA402/iqvZBebyOm6yAIVPubzCU8KZRfX6/+eSd4SOoE
jTiJ9+WWU7fKd70y3PYQF9dS
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:01:37 2026 by rpki-client