
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft
File: Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft (raw, json)
Hash identifier: pEgN318Ip8OY8le0B4r/Tq5AFUAhCvFEeX3qnnQThdA=
Subject key identifier: FF:09:4C:7A:26:5E:0B:5B:B5:05:26:60:D8:20:B3:5B:CE:83:AA:D0
Authority key identifier: 17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A
Certificate issuer: /CN=A917EFB8/serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A
Certificate serial: 3570
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft
Manifest number: 3567
Signing time: Tue 28 Jul 2026 14:51:51 +0000
Manifest this update: Tue 28 Jul 2026 14:51:50 +0000
Manifest next update: Tue 04 Aug 2026 14:51:50 +0000
Files and hashes: 1: Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl (hash: B1N/2f4D995SZZ6eU9dDV9sC0tBHCeNZq6vBWe71DAA=)
2: E68E0FD4077B11EB98CA5D1CC4F9AE02.roa (hash: rIwXuVAKzTQeQgdJujiwbvj/r919Ii7m2oS5MI0eTgQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl
rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:51:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13680 (0x3570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EFB8, serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A
Validity
Not Before: Jul 28 14:51:50 2026 GMT
Not After : Aug 4 14:51:50 2026 GMT
Subject: CN=6a68c207-1f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:08:1b:af:d3:97:79:0a:06:55:36:39:c2:77:
8f:34:21:9e:52:5d:cc:b4:1b:60:97:3d:cc:74:ec:
e1:b0:f9:2b:9b:d3:85:99:1b:6e:c6:04:e6:45:16:
eb:38:89:21:0c:47:c8:fb:03:97:58:d6:cf:8c:5d:
f5:56:c9:f0:77:b2:2b:89:a2:b2:3a:2e:45:cf:ce:
4e:2f:60:9a:6c:43:3a:13:d2:ba:8f:98:24:fb:64:
be:0b:a1:af:fb:27:14:70:1e:16:79:ee:92:94:19:
09:b7:d4:af:6f:c3:5e:23:fd:5f:20:89:ef:44:7b:
d5:5d:dc:7f:da:be:2f:f3:80:b4:d6:0c:f1:e2:25:
21:f7:8e:f7:51:c2:fd:d0:0d:f3:e9:5e:40:63:67:
ec:61:6d:c2:e3:b9:7f:a0:cf:04:d7:01:26:8e:c2:
ae:1c:f8:a5:c6:56:7c:44:d9:00:7e:2f:14:0e:ee:
b3:19:45:d5:40:e4:8b:36:e2:9e:2e:59:b5:ea:8e:
44:96:a8:a7:f1:a1:1f:e0:8d:52:4f:30:46:92:b1:
76:ba:b5:7a:b3:8d:63:8f:af:89:ff:91:28:8a:bc:
74:a6:94:41:f9:d4:f6:fd:be:9f:f2:a8:aa:74:50:
57:5d:68:73:a8:e5:5a:bc:a8:34:53:77:fa:cc:70:
cf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:09:4C:7A:26:5E:0B:5B:B5:05:26:60:D8:20:B3:5B:CE:83:AA:D0
X509v3 Authority Key Identifier:
keyid:17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:9b:0f:fc:60:b0:d5:9c:d2:8d:fc:6e:86:b3:92:5e:ff:ac:
a9:9e:69:70:6c:05:b3:8e:33:ad:dc:66:ce:c3:b4:4c:b5:6c:
90:18:9c:85:47:49:d9:9f:a1:69:97:36:97:05:b1:b5:24:19:
57:af:98:dc:e1:f7:f3:47:62:bb:e5:23:ae:c2:90:52:7c:94:
3c:c1:d3:13:ba:54:26:7c:9f:6e:16:44:2a:46:43:b0:ca:fe:
e9:83:c5:ee:70:64:ca:34:38:8a:ae:0b:95:0e:be:e2:82:8b:
f3:2b:ca:81:c9:8a:b3:72:88:0d:24:fd:fe:aa:5b:fd:1e:05:
e7:ed:fa:43:cd:be:70:f1:90:55:b7:01:78:84:21:9e:e3:3f:
19:75:fb:03:c7:73:5f:85:a4:e8:41:4b:8e:ce:57:31:71:17:
f2:5e:4b:3f:21:e1:d6:16:63:75:ba:d3:8c:8a:19:82:72:17:
6f:a6:1b:0f:f0:f8:54:ae:05:6e:bd:e8:e2:f1:ce:ce:c8:05:
b1:76:1d:da:4a:b3:fb:6a:5f:d7:94:7e:8a:43:7a:0f:2f:3b:
da:e7:3d:ea:36:b1:9b:9e:fe:2f:5e:fa:69:64:b3:96:05:77:
9f:e9:24:ad:17:73:d3:cd:22:49:27:50:f1:cc:2a:20:a7:22:
68:54:ea:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VGQjgxMTAvBgNVBAUTKDE3MEU5Qzc2NzY0M0MzQzFGNjA1Nzk0MDg2NDhBM0Yw
REE4NDA0NUEwHhcNMjYwNzI4MTQ1MTUwWhcNMjYwODA0MTQ1MTUwWjAYMRYwFAYD
VQQDEw02YTY4YzIwNy0xZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4wgbr9OXeQoGVTY5wnePNCGeUl3MtBtglz3MdOzhsPkrm9OFmRtuxgTmRRbr
OIkhDEfI+wOXWNbPjF31Vsnwd7IriaKyOi5Fz85OL2CabEM6E9K6j5gk+2S+C6Gv
+ycUcB4Wee6SlBkJt9Svb8NeI/1fIInvRHvVXdx/2r4v84C01gzx4iUh9473UcL9
0A3z6V5AY2fsYW3C47l/oM8E1wEmjsKuHPilxlZ8RNkAfi8UDu6zGUXVQOSLNuKe
Llm16o5Elqin8aEf4I1STzBGkrF2urV6s41jj6+J/5Eoirx0ppRB+dT2/b6f8qiq
dFBXXWhzqOVavKg0U3f6zHDPTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP8JTHom
XgtbtQUmYNggs1vOg6rQMB8GA1UdIwQYMBaAFBcOnHZ2Q8PB9gV5QIZIo/DahARa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUZCOC9EOTgwQTE3MjFE
OTUxMUUyOTIxNTBFN0UwOEIwMkNEMi9GdzZjZG5aRHc4SDJCWGxBaGtpajhOcUVC
Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Z3NmNkblpEdzhIMkJYbEFoa2lqOE5xRUJGby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RUZCOC9EOTgwQTE3MjFEOTUxMUUyOTIxNTBFN0UwOEIwMkNEMi9GdzZjZG5aRHc4
SDJCWGxBaGtpajhOcUVCRm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlpsP/GCw1ZzSjfxuhrOSXv+sqZ5pcGwFs44zrdxmzsO0TLVskBichUdJ2Z+h
aZc2lwWxtSQZV6+Y3OH380diu+UjrsKQUnyUPMHTE7pUJnyfbhZEKkZDsMr+6YPF
7nBkyjQ4iq4LlQ6+4oKL8yvKgcmKs3KIDST9/qpb/R4F5+36Q82+cPGQVbcBeIQh
nuM/GXX7A8dzX4Wk6EFLjs5XMXEX8l5LPyHh1hZjdbrTjIoZgnIXb6YbD/D4VK4F
br3o4vHOzsgFsXYd2kqz+2pf15R+ikN6Dy872uc96jaxm57+L176aWSzlgV3n+kk
rRdz080iSSdQ8cwqIKciaFTqbw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:47 2026 by rpki-client