
$ rpki-client -vvf rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
File: fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft (raw, json)
Hash identifier: hs3OPO06Y+ErlP58afwOqMBGVIdXzmJNScC4/forebs=
Subject key identifier: F6:EF:B1:DE:17:D0:8F:E4:4E:B7:5B:06:90:C4:03:8B:00:8F:CF:31
Authority key identifier: 7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D
Certificate issuer: /CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D
Certificate serial: 0956
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
Manifest number: 0945
Signing time: Thu 16 Apr 2026 20:04:37 +0000
Manifest this update: Thu 16 Apr 2026 20:04:36 +0000
Manifest next update: Thu 23 Apr 2026 20:04:36 +0000
Files and hashes: 1: fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl (hash: Ze0BNmaOmAWO25kC3Qwi2fg/y/TmjUD2J0PMM+bOcIY=)
2: 10A6E062B70A11EDB851464EC4F9AE02.roa (hash: +2GMR/V9mZr0Ife9tGdydPkVcoSqLY2zhQZIUiI3Hq0=)
3: 38B92F54E17D11EDBCAFC081C4F9AE02.roa (hash: bPFO6I2wWIPENqB/X87e5uIatc/LQckX7tfxgiWc7ts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl
rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2390 (0x956)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918753F, serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D
Validity
Not Before: Apr 16 20:04:36 2026 GMT
Not After : Apr 23 20:04:36 2026 GMT
Subject: CN=69e140d5-475b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:52:c9:8c:20:a3:ee:47:b2:77:56:5f:c0:5e:
4d:60:a3:c1:c8:14:cb:16:d3:31:7c:50:8b:c2:23:
42:c2:9b:18:dc:2a:f2:a7:33:ea:73:f2:37:49:b0:
7b:52:4d:72:2e:79:ae:da:ac:8c:3e:50:78:93:6d:
13:95:d5:67:39:39:e6:59:02:59:4d:d9:4a:28:62:
3b:95:03:eb:f6:af:b2:6f:9e:20:25:b5:5c:05:51:
46:6c:fc:9a:8f:3d:ad:9d:fb:78:04:b1:4a:9d:aa:
c5:15:d0:57:ba:20:cb:f1:f3:88:b1:1a:5c:76:4e:
19:d3:57:ce:7e:7c:df:72:30:82:ab:7f:67:fc:eb:
1a:95:8c:c0:1b:91:12:39:9b:50:cd:47:41:f1:fc:
00:1d:29:ee:4c:61:d9:39:23:97:ee:93:3d:90:b5:
96:b0:56:6f:fb:23:68:dc:d6:cf:88:4f:6d:54:fe:
f3:72:90:e9:39:1e:fb:06:18:2d:e4:c7:3c:87:ad:
92:94:41:3a:2d:49:97:e6:df:d0:4f:c8:86:10:17:
10:10:96:01:ce:fe:9c:73:3f:07:54:03:1c:73:dd:
7a:21:ec:79:b7:6f:ba:c6:0c:ef:92:67:77:de:67:
72:36:a0:fe:3b:7e:c1:10:4c:55:3e:ee:78:d1:9c:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EF:B1:DE:17:D0:8F:E4:4E:B7:5B:06:90:C4:03:8B:00:8F:CF:31
X509v3 Authority Key Identifier:
keyid:7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:cd:12:80:a3:9b:5e:75:45:5a:3f:fc:2b:25:9a:98:67:b7:
0e:75:fe:f8:e2:71:e0:c7:12:ef:22:4b:e2:6b:5f:75:2e:c8:
18:54:98:57:08:58:6c:70:75:05:47:0f:6e:f1:60:70:96:58:
31:aa:a9:e4:57:6a:1e:76:e6:ff:75:a6:52:b9:55:7f:3d:6b:
a3:92:76:9f:e7:60:a2:aa:85:cb:c7:f7:2e:ae:26:35:6a:59:
72:06:7a:4c:97:ea:38:cd:04:59:f9:38:22:34:7e:78:0a:52:
38:e3:2e:16:a7:b0:30:e5:94:60:dd:92:a8:42:e0:6e:08:7b:
58:f0:ab:20:fc:ef:15:b7:5c:d9:8f:16:a5:78:24:7c:bb:d9:
43:eb:19:9c:3a:1f:e6:8e:64:9f:20:13:9d:3a:5e:cd:99:83:
62:51:19:17:0b:3a:3a:98:4b:17:b7:31:f8:50:07:b5:17:3e:
eb:ec:77:fb:3c:60:8c:29:22:55:ba:f7:1a:96:5c:26:84:7d:
75:ee:37:aa:c2:6c:47:43:ef:d1:1f:2a:93:b7:e5:3f:32:fb:
39:c2:2d:2a:ae:2b:fb:35:93:77:b4:62:af:db:e3:9e:ba:ad:
0a:b2:1e:5c:31:b5:0b:22:12:09:05:9e:f5:c6:9f:c4:3d:26:
35:30:ed:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc1M0YxMTAvBgNVBAUTKDdFNzJEODAxQjM4QTcyQUI0QjAzNzZFMTJDOTU0MTI0
QUFFNDNDNkQwHhcNMjYwNDE2MjAwNDM2WhcNMjYwNDIzMjAwNDM2WjAYMRYwFAYD
VQQDEw02OWUxNDBkNS00NzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn1LJjCCj7keyd1ZfwF5NYKPByBTLFtMxfFCLwiNCwpsY3CrypzPqc/I3SbB7
Uk1yLnmu2qyMPlB4k20TldVnOTnmWQJZTdlKKGI7lQPr9q+yb54gJbVcBVFGbPya
jz2tnft4BLFKnarFFdBXuiDL8fOIsRpcdk4Z01fOfnzfcjCCq39n/OsalYzAG5ES
OZtQzUdB8fwAHSnuTGHZOSOX7pM9kLWWsFZv+yNo3NbPiE9tVP7zcpDpOR77Bhgt
5Mc8h62SlEE6LUmX5t/QT8iGEBcQEJYBzv6ccz8HVAMcc916Iex5t2+6xgzvkmd3
3mdyNqD+O37BEExVPu540ZwHBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPbvsd4X
0I/kTrdbBpDEA4sAj88xMB8GA1UdIwQYMBaAFH5y2AGzinKrSwN24SyVQSSq5Dxt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzUzRi9CREE1N0ZGRUJD
MTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2NxdExBM2JoTEpWQkpLcmtQ
RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZuTFlBYk9LY3F0TEEzYmhMSlZCSktya1BHMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzUzRi9CREE1N0ZGRUJDMTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2Nx
dExBM2JoTEpWQkpLcmtQRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN80SgKObXnVFWj/8KyWamGe3DnX++OJx4McS7yJL4mtfdS7IGFSYVwhYbHB1
BUcPbvFgcJZYMaqp5FdqHnbm/3WmUrlVfz1ro5J2n+dgoqqFy8f3Lq4mNWpZcgZ6
TJfqOM0EWfk4IjR+eApSOOMuFqewMOWUYN2SqELgbgh7WPCrIPzvFbdc2Y8WpXgk
fLvZQ+sZnDof5o5knyATnTpezZmDYlEZFws6OphLF7cx+FAHtRc+6+x3+zxgjCki
Vbr3GpZcJoR9de43qsJsR0Pv0R8qk7flPzL7OcItKq4r+zWTd7Rir9vjnrqtCrIe
XDG1CyISCQWe9cafxD0mNTDt2A==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:33 2026 by rpki-client