
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.mft
File: FOZzxKcds0p1aBNYfkghLaLnczA.mft (raw, json)
Hash identifier: dJ6xzfGzcGIfLY6uSdApmA87C7I7Y8EJ9vRLu/W6Eow=
Subject key identifier: E2:D2:BC:41:97:ED:3A:1F:86:7E:AF:BA:97:80:CF:1D:2A:78:A5:4C
Authority key identifier: 14:E6:73:C4:A7:1D:B3:4A:75:68:13:58:7E:48:21:2D:A2:E7:73:30
Certificate issuer: /CN=A91A2F33/serialNumber=14E673C4A71DB34A756813587E48212DA2E77330
Certificate serial: 0ACA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOZzxKcds0p1aBNYfkghLaLnczA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.mft
Manifest number: 0AAB
Signing time: Fri 12 Jun 2026 19:34:21 +0000
Manifest this update: Fri 12 Jun 2026 19:34:21 +0000
Manifest next update: Fri 19 Jun 2026 19:34:21 +0000
Files and hashes: 1: FOZzxKcds0p1aBNYfkghLaLnczA.crl (hash: EyqfZ4SdVQFjbFRm6xIxtamztOwwe5PIs7dMk/jo1wU=)
2: EFACF8725A9611F1BEF054C8C8833773.roa (hash: H2seh8ndbPmzBsoU50PQUQi8emQoFFvHq08sQLmrLP8=)
3: ED99CAA81DC411EF9E620C48C4F9AE02.roa (hash: B3rKvJIZKAiFNSNTP07OGjXr92JcCAag/b1E9OB/h34=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.crl
rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOZzxKcds0p1aBNYfkghLaLnczA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:34:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2762 (0xaca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2F33, serialNumber=14E673C4A71DB34A756813587E48212DA2E77330
Validity
Not Before: Jun 12 19:34:21 2026 GMT
Not After : Jun 19 19:34:21 2026 GMT
Subject: CN=6a2c5f3d-fdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:81:b0:1f:a1:d3:e8:59:b4:54:9b:14:97:
b6:59:6a:56:f5:70:71:8e:99:13:10:35:8a:7b:f1:
f3:ff:f3:80:69:35:88:07:f3:17:79:a7:b1:57:f3:
2b:25:1e:1f:32:bd:93:be:89:58:9f:62:1f:f3:cc:
e2:3f:3c:41:e5:cf:72:21:8e:5c:03:22:cc:22:f3:
b1:93:31:3c:5e:ef:f9:f4:e2:b2:c3:fb:71:35:03:
bc:ef:10:2d:ef:89:f1:9a:89:95:18:38:0c:12:01:
60:0f:d3:6e:56:4b:e7:a0:1a:ba:43:b8:f9:97:82:
93:9b:2b:2c:30:b6:89:5d:73:1b:ad:4e:2e:2d:df:
d0:5d:c4:1c:8d:7b:13:91:25:3e:fa:67:a6:b8:6c:
4b:e4:96:23:42:c5:77:e6:77:7e:86:f5:a7:34:87:
98:08:07:b3:ec:3c:82:94:7b:a6:f5:c6:84:ef:0c:
1b:38:5b:2b:c5:75:09:3d:69:c8:41:22:a2:51:20:
9b:3a:3b:59:0e:d7:ac:56:1b:2a:bb:6b:a4:ea:8b:
c8:63:b1:f9:33:cb:b8:85:cd:bd:ba:fb:85:c4:c1:
81:15:af:26:6f:b2:97:3b:78:a2:c8:01:72:e9:30:
07:ee:81:8d:22:dc:fc:c2:52:5f:4d:56:4c:5c:b9:
ea:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D2:BC:41:97:ED:3A:1F:86:7E:AF:BA:97:80:CF:1D:2A:78:A5:4C
X509v3 Authority Key Identifier:
keyid:14:E6:73:C4:A7:1D:B3:4A:75:68:13:58:7E:48:21:2D:A2:E7:73:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOZzxKcds0p1aBNYfkghLaLnczA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:7a:65:5a:41:a8:37:31:0d:5a:49:09:c0:96:86:6b:59:b6:
f3:eb:d0:f3:3a:aa:39:da:aa:92:2f:ef:52:be:f2:bf:bc:b7:
f1:a3:c4:2c:b9:4a:0c:00:cd:4b:c7:8a:20:53:66:ac:4a:4d:
0c:1a:3c:bb:94:05:c1:d6:06:76:65:16:0e:5e:e0:c3:37:ac:
db:de:e4:c6:e1:0d:e3:6e:97:21:20:0e:9d:88:c4:be:d4:b0:
de:40:65:89:04:ce:3f:67:06:bd:fb:af:9d:39:2a:1d:76:3e:
8e:cc:0c:4f:e8:a2:d6:19:a9:7d:7b:88:5e:bb:36:b3:91:79:
ec:3e:85:d8:b9:ef:25:12:c5:72:89:cd:15:16:a7:5c:ac:59:
d7:66:e7:67:81:da:db:bd:3e:48:72:95:19:d2:9c:dc:07:10:
64:dd:10:2b:1f:21:9f:c6:2f:51:10:0b:de:97:20:8f:be:bc:
c5:a2:b5:1a:5d:f6:23:35:27:71:56:3d:c3:08:37:85:35:cd:
f0:95:3d:ae:51:95:75:4f:bb:bd:20:42:33:a2:85:6c:9f:2f:
34:3b:cd:04:69:44:99:64:5c:04:71:27:9c:ed:c4:51:55:39:
57:7e:09:9a:f7:5a:92:b8:c3:b8:f9:44:4d:22:3b:84:12:b4:
61:c3:e2:8d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTJGMzMxMTAvBgNVBAUTKDE0RTY3M0M0QTcxREIzNEE3NTY4MTM1ODdFNDgyMTJE
QTJFNzczMzAwHhcNMjYwNjEyMTkzNDIxWhcNMjYwNjE5MTkzNDIxWjAYMRYwFAYD
VQQDEw02YTJjNWYzZC1mZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqS6BsB+h0+hZtFSbFJe2WWpW9XBxjpkTEDWKe/Hz//OAaTWIB/MXeaexV/Mr
JR4fMr2TvolYn2If88ziPzxB5c9yIY5cAyLMIvOxkzE8Xu/59OKyw/txNQO87xAt
74nxmomVGDgMEgFgD9NuVkvnoBq6Q7j5l4KTmyssMLaJXXMbrU4uLd/QXcQcjXsT
kSU++memuGxL5JYjQsV35nd+hvWnNIeYCAez7DyClHum9caE7wwbOFsrxXUJPWnI
QSKiUSCbOjtZDtesVhsqu2uk6ovIY7H5M8u4hc29uvuFxMGBFa8mb7KXO3iiyAFy
6TAH7oGNItz8wlJfTVZMXLnq5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOLSvEGX
7Tofhn6vupeAzx0qeKVMMB8GA1UdIwQYMBaAFBTmc8SnHbNKdWgTWH5IIS2i53Mw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkYzMy9FNkVDMkQ5Mjgw
OTExMUVBQUJDREZGNkNDNEY5QUUwMi9GT1p6eEtjZHMwcDFhQk5ZZmtnaExhTG5j
ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZPWnp4S2NkczBwMWFCTllma2doTGFMbmN6QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MkYzMy9FNkVDMkQ5MjgwOTExMUVBQUJDREZGNkNDNEY5QUUwMi9GT1p6eEtjZHMw
cDFhQk5ZZmtnaExhTG5jekEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE3plWkGoNzENWkkJwJaGa1m28+vQ8zqqOdqqki/vUr7yv7y38aPELLlKDADN
S8eKIFNmrEpNDBo8u5QFwdYGdmUWDl7gwzes297kxuEN426XISAOnYjEvtSw3kBl
iQTOP2cGvfuvnTkqHXY+jswMT+ii1hmpfXuIXrs2s5F57D6F2LnvJRLFconNFRan
XKxZ12bnZ4Ha270+SHKVGdKc3AcQZN0QKx8hn8YvURAL3pcgj768xaK1Gl32IzUn
cVY9wwg3hTXN8JU9rlGVdU+7vSBCM6KFbJ8vNDvNBGlEmWRcBHEnnO3EUVU5V34J
mvdakrjDuPlETSI7hBK0YcPijQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:48:54 2026 by rpki-client