
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft
File: Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft (raw, json)
Hash identifier: eQhrvsHfet1mmBRpsrioOyBRQ7jPTCuEQCU9nFoVbXw=
Subject key identifier: 25:77:81:75:5B:1A:0C:12:E7:59:F7:5B:E7:13:74:65:42:D5:25:44
Authority key identifier: 15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42
Certificate issuer: /CN=A916B0EA/serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42
Certificate serial: 0926
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft
Manifest number: 1633
Signing time: Sun 20 Sep 2026 18:16:08 +0000
Manifest this update: Sun 20 Sep 2026 18:16:07 +0000
Manifest next update: Sun 27 Sep 2026 18:16:07 +0000
Files and hashes: 1: Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl (hash: fYEVGfy40SSq7dbtMbzIx87hmeVZ5KcEeZJ79RPIZOA=)
2: 6535FEC0345C11F0B4126F3CC4F9AE02.roa (hash: uRyY95McYIcKyBbdYHA3Uc6sW+tgHG7zbgSz0a8bwDE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl
rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2342 (0x926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B0EA, serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42
Validity
Not Before: Sep 20 18:16:07 2026 GMT
Not After : Sep 27 18:16:07 2026 GMT
Subject: CN=6ab022e7-a2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:11:cc:e8:22:fd:ea:ff:e3:75:3f:ec:aa:
b8:0a:1f:e7:2b:5f:48:be:c8:4b:95:b9:bb:34:c7:
09:b7:7a:e2:5a:fd:75:42:61:a7:19:75:99:e0:39:
57:4a:51:54:51:8c:63:04:19:7e:9f:5e:f9:d1:71:
41:d5:56:1b:c4:67:74:d5:af:31:c0:67:2c:94:b4:
fd:17:04:6d:db:04:21:3d:8a:8f:24:f6:e1:66:4f:
d0:f3:de:c7:67:90:d0:0e:a2:f7:07:ba:b2:11:ce:
51:9c:bc:c5:f5:dc:d6:49:3b:34:06:ef:37:3f:30:
47:23:2c:8f:27:ad:84:22:f2:e9:b8:d6:1c:1e:da:
55:80:cb:96:ff:94:e1:82:21:e7:48:67:dd:0a:f3:
d6:4a:b2:03:07:7f:cc:e9:ec:ca:d5:52:f3:f5:b9:
58:20:9b:d1:a4:18:63:d1:74:b7:15:b1:6d:e7:a3:
8e:06:ae:6a:3e:3b:f4:aa:c6:56:cf:9d:89:33:71:
3a:cc:f6:d0:c8:da:51:87:04:02:61:ff:15:cc:85:
77:c7:f1:8f:4c:46:ef:9f:0a:07:1e:61:cc:71:97:
50:96:ce:b2:63:7c:82:2d:94:2b:e0:9a:ed:d4:63:
f6:ca:87:ea:83:ce:97:2b:46:19:73:d5:39:9e:c2:
6a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:77:81:75:5B:1A:0C:12:E7:59:F7:5B:E7:13:74:65:42:D5:25:44
X509v3 Authority Key Identifier:
keyid:15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:d3:87:dc:47:80:98:5d:f1:d1:06:79:7f:53:c0:53:eb:00:
7c:18:ab:21:11:ba:49:2f:a5:8b:4e:f9:77:7c:2e:89:72:68:
23:21:f4:19:0b:b6:d4:be:20:57:35:d8:70:3b:dc:b6:10:f3:
aa:aa:99:d0:1a:2a:5c:24:40:c8:11:73:b3:bc:cf:49:a4:86:
ab:f9:14:d8:0b:2c:27:00:08:c8:1f:73:07:f7:4e:ff:07:76:
18:ad:93:c2:8e:e0:35:e0:2a:a7:62:f5:5f:95:07:9b:9a:43:
fc:95:67:ee:ff:ce:85:6e:f9:a4:f5:55:5c:c7:46:a7:9d:11:
df:3c:ae:8d:ad:4f:3e:be:56:d0:d3:f5:0b:c2:f9:cf:9d:81:
8b:1c:08:30:d3:3b:87:f0:ba:a2:e7:4d:11:6b:c5:9b:5d:2c:
e9:30:ca:f4:db:9f:3a:9a:be:57:d2:74:7f:aa:66:27:30:90:
40:c7:fb:9d:f8:48:8b:71:cd:b2:d4:d8:98:16:fe:2d:87:86:
2b:ef:02:da:8b:5d:c4:12:0d:eb:84:cb:89:ce:ab:48:86:36:
91:d4:f0:3d:72:da:a3:47:17:70:45:3e:1d:ef:e2:cc:47:42:
82:1b:71:2a:0d:1d:4f:07:b2:07:8f:b8:bc:ea:d9:c2:35:41:
ee:7c:1c:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIwRUExMTAvBgNVBAUTKDE1REY3OUEwMDczOUJDMzlCNzE3ODkyNTk1OERGRUU5
OUJFMDBENDIwHhcNMjYwOTIwMTgxNjA3WhcNMjYwOTI3MTgxNjA3WjAYMRYwFAYD
VQQDEw02YWIwMjJlNy1hMmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmGERzOgi/er/43U/7Kq4Ch/nK19IvshLlbm7NMcJt3riWv11QmGnGXWZ4DlX
SlFUUYxjBBl+n1750XFB1VYbxGd01a8xwGcslLT9FwRt2wQhPYqPJPbhZk/Q897H
Z5DQDqL3B7qyEc5RnLzF9dzWSTs0Bu83PzBHIyyPJ62EIvLpuNYcHtpVgMuW/5Th
giHnSGfdCvPWSrIDB3/M6ezK1VLz9blYIJvRpBhj0XS3FbFt56OOBq5qPjv0qsZW
z52JM3E6zPbQyNpRhwQCYf8VzIV3x/GPTEbvnwoHHmHMcZdQls6yY3yCLZQr4Jrt
1GP2yofqg86XK0YZc9U5nsJqqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCV3gXVb
GgwS51n3W+cTdGVC1SVEMB8GA1UdIwQYMBaAFBXfeaAHObw5txeJJZWN/umb4A1C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBFQS80RDhFNDlCMDBC
NzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9GZDk1b0FjNXZEbTNGNGtsbFkzLTZadmdE
VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZkOTVvQWM1dkRtM0Y0a2xsWTMtNlp2Z0RVSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjBFQS80RDhFNDlCMDBCNzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9GZDk1b0FjNXZE
bTNGNGtsbFkzLTZadmdEVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAw9OH3EeAmF3x0QZ5f1PAU+sAfBirIRG6SS+li075d3wuiXJoIyH0GQu21L4g
VzXYcDvcthDzqqqZ0BoqXCRAyBFzs7zPSaSGq/kU2AssJwAIyB9zB/dO/wd2GK2T
wo7gNeAqp2L1X5UHm5pD/JVn7v/OhW75pPVVXMdGp50R3zyuja1PPr5W0NP1C8L5
z52BixwIMNM7h/C6oudNEWvFm10s6TDK9NufOpq+V9J0f6pmJzCQQMf7nfhIi3HN
stTYmBb+LYeGK+8C2otdxBIN64TLic6rSIY2kdTwPXLao0cXcEU+He/izEdCghtx
Kg0dTweyB4+4vOrZwjVB7nwcTA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:59:46 2026 by rpki-client