
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
File: fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft (raw, json)
Hash identifier: FjyDfFKp/zbn6rZDWSBurwZC12CdtBgr2dJjy1H7xXI=
Subject key identifier: 1B:34:BE:12:E2:2B:9C:4D:64:06:F2:69:1C:CE:A1:3A:14:94:C4:E3
Authority key identifier: 7F:06:7A:22:A4:A9:E0:96:FD:86:A6:BA:35:5A:59:24:90:67:D8:0C
Certificate issuer: /CN=A918CC02/serialNumber=7F067A22A4A9E096FD86A6BA355A59249067D80C
Certificate serial: 0159
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
Manifest number: 0151
Signing time: Mon 21 Sep 2026 05:19:00 +0000
Manifest this update: Mon 21 Sep 2026 05:18:59 +0000
Manifest next update: Mon 28 Sep 2026 05:18:59 +0000
Files and hashes: 1: fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl (hash: +/zctYU5njYRKRJLU7iuEX+ihDZ/ypZKghLd+eCkFoI=)
2: 34B9DBFAC5C011EF88F56A0AC4F9AE02.roa (hash: EbfBHidljZ2gLeTQHKxBHFBHeGxEqlyHSzXcfx3YSkU=)
3: AF9A0636B86B11EFA561215AC4F9AE02.roa (hash: YXgcQSkLUKZDwiDglhpy7R/9d2DcUAeT2Wp6iWZ+BWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl
rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:18:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CC02, serialNumber=7F067A22A4A9E096FD86A6BA355A59249067D80C
Validity
Not Before: Sep 21 05:18:59 2026 GMT
Not After : Sep 28 05:18:59 2026 GMT
Subject: CN=6ab0be43-d17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:6a:d6:bb:49:35:59:db:4f:84:8b:ec:a7:
c9:f4:fe:09:b8:a5:a7:5a:9c:da:5f:e4:88:75:27:
d5:e4:6c:c4:b2:02:c3:38:21:c3:53:1f:11:dc:69:
84:7d:7c:33:cf:21:80:2a:fd:e8:f0:c6:62:33:36:
d3:45:92:e8:4d:b7:e2:4a:ca:00:83:00:fa:3a:df:
47:ef:23:09:6a:40:23:13:32:02:fb:0f:4e:1a:8a:
ce:1c:f5:16:47:e3:71:d9:60:68:cf:7e:40:f7:d5:
9a:10:97:be:9b:28:5c:ee:ae:0e:8c:43:12:17:3c:
ba:d3:25:7e:c9:c5:33:51:eb:74:50:16:6a:aa:b0:
9f:64:64:45:1b:9c:d5:e2:4e:0a:63:3d:e3:dd:0d:
5b:d4:6d:42:af:ee:a8:c1:2a:c9:76:c2:d0:89:11:
c8:71:2c:a3:5f:07:f0:72:92:2c:f0:7d:e4:6f:15:
12:e5:c9:26:68:4b:15:61:c5:4c:e1:a4:3d:af:23:
7d:25:06:b4:eb:20:f7:d2:8d:86:5a:f2:79:23:df:
29:83:23:cd:3b:39:16:4c:89:8e:6b:8e:5f:b8:87:
70:a4:fe:3c:e4:3a:31:65:d7:e8:86:fc:df:f0:01:
9c:16:8a:d5:bf:0c:11:6c:3d:18:4a:e3:76:b3:f9:
d8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:34:BE:12:E2:2B:9C:4D:64:06:F2:69:1C:CE:A1:3A:14:94:C4:E3
X509v3 Authority Key Identifier:
keyid:7F:06:7A:22:A4:A9:E0:96:FD:86:A6:BA:35:5A:59:24:90:67:D8:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:51:80:37:fc:db:36:91:00:fb:98:62:1c:88:bd:8e:ae:13:
d6:5c:a3:08:8d:a5:24:73:24:1e:dc:5e:90:53:c5:fe:bf:60:
e1:69:7d:d5:b6:d0:f3:28:38:3d:c4:a0:1c:5c:5b:07:18:39:
b9:c7:df:5e:d0:6b:b7:c0:7e:ba:73:5f:72:f1:c0:f7:e6:5c:
ad:8f:ef:37:09:3f:3d:b9:29:e7:2d:f7:4f:90:c9:fd:3a:57:
01:39:76:b7:ee:36:e8:29:7d:4c:6a:7d:d6:e9:44:06:29:b2:
71:cc:61:a4:77:4e:5b:64:ae:d7:64:65:a4:95:df:f9:d7:e2:
f9:77:23:ce:2e:f6:f9:66:ca:c0:66:21:49:02:68:a4:e3:66:
3a:1f:21:31:ba:e0:9f:15:0b:e0:cb:b6:d7:b1:d8:bb:2b:7a:
bf:58:28:61:5e:ac:51:71:c6:95:9d:ab:b2:49:97:d5:0d:e3:
c6:e1:4f:c8:e5:45:1e:0d:41:27:3e:8b:29:c2:65:ed:a2:7b:
2d:c3:3a:f7:d5:1a:d4:39:d3:a0:78:f9:c8:d4:99:51:44:b5:
d0:8d:fc:81:54:3e:f9:d5:0e:2e:43:19:4b:2c:e5:c2:fe:2c:
a8:7d:71:7a:d3:cd:0c:5a:ef:11:1e:43:1b:a1:e0:72:84:9d:
9c:f0:15:dc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OENDMDIxMTAvBgNVBAUTKDdGMDY3QTIyQTRBOUUwOTZGRDg2QTZCQTM1NUE1OTI0
OTA2N0Q4MEMwHhcNMjYwOTIxMDUxODU5WhcNMjYwOTI4MDUxODU5WjAYMRYwFAYD
VQQDEw02YWIwYmU0My1kMTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsAVq1rtJNVnbT4SL7KfJ9P4JuKWnWpzaX+SIdSfV5GzEsgLDOCHDUx8R3GmE
fXwzzyGAKv3o8MZiMzbTRZLoTbfiSsoAgwD6Ot9H7yMJakAjEzIC+w9OGorOHPUW
R+Nx2WBoz35A99WaEJe+myhc7q4OjEMSFzy60yV+ycUzUet0UBZqqrCfZGRFG5zV
4k4KYz3j3Q1b1G1Cr+6owSrJdsLQiRHIcSyjXwfwcpIs8H3kbxUS5ckmaEsVYcVM
4aQ9ryN9JQa06yD30o2GWvJ5I98pgyPNOzkWTImOa45fuIdwpP485DoxZdfohvzf
8AGcForVvwwRbD0YSuN2s/nYMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBs0vhLi
K5xNZAbyaRzOoToUlMTjMB8GA1UdIwQYMBaAFH8GeiKkqeCW/YamujVaWSSQZ9gM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0MwMi82ODBDNjI0NkI4
NkIxMUVGOUE2QTUwNThDNEY5QUUwMi9md1o2SXFTcDRKYjlocWE2TlZwWkpKQm4y
QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2Z3WjZJcVNwNEpiOWhxYTZOVnBaSkpCbjJBdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Q0MwMi82ODBDNjI0NkI4NkIxMUVGOUE2QTUwNThDNEY5QUUwMi9md1o2SXFTcDRK
YjlocWE2TlZwWkpKQm4yQXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ1GAN/zbNpEA+5hiHIi9jq4T1lyjCI2lJHMkHtxekFPF/r9g4Wl91bbQ8yg4
PcSgHFxbBxg5ucffXtBrt8B+unNfcvHA9+ZcrY/vNwk/Pbkp5y33T5DJ/TpXATl2
t+426Cl9TGp91ulEBimyccxhpHdOW2Su12RlpJXf+dfi+Xcjzi72+WbKwGYhSQJo
pONmOh8hMbrgnxUL4Mu217HYuyt6v1goYV6sUXHGlZ2rskmX1Q3jxuFPyOVFHg1B
Jz6LKcJl7aJ7LcM699Ua1DnToHj5yNSZUUS10I38gVQ++dUOLkMZSyzlwv4sqH1x
etPNDFrvER5DG6HgcoSdnPAV3A==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:45:43 2026 by rpki-client