
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
File: FyPctBoEJopYeqzoz9na5fn1Hfc.mft (raw, json)
Hash identifier: wnZKdlPdk+FKzHtB3ytHf9v+o1hy2v9C5SoRJ7NFzAo=
Subject key identifier: 41:7A:75:DF:D0:07:63:B3:47:67:D8:F7:DD:FB:9C:B5:0E:D7:E1:1F
Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Certificate serial: 086B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
Manifest number: 083A
Signing time: Fri 22 May 2026 21:05:05 +0000
Manifest this update: Fri 22 May 2026 21:05:05 +0000
Manifest next update: Fri 29 May 2026 21:05:05 +0000
Files and hashes: 1: FyPctBoEJopYeqzoz9na5fn1Hfc.crl (hash: cdq16IinE/JARY39AY55/dCiDJ6XDjMk3wD/ptaWuCM=)
2: 68DAAA1A749711EFB4EDA45FC4F9AE02.roa (hash: jQKMgjpzfVC4yr89ThGiT9ygh+/rUur+KtBDxKUm250=)
3: 8037BC50EB2E11EDB835EF4AC4F9AE02.roa (hash: f2nEio6eLUyv7yDtFiV3KwH4vS6At+iiNXP9RqT+g84=)
4: 7AA7B416E01011EEA1CA127CC4F9AE02.roa (hash: b0lsSLqk839sfXbmjzCscLovBQK1FxU7wYdESQOxP2U=)
5: 26D56F6425FF11EBAF634966C4F9AE02.roa (hash: /kyIgZiBfNWT65KeLq4ju9c7Mhij++QBadeo1QUbPok=)
6: 2840D3A225FF11EBAF634966C4F9AE02.roa (hash: EtwqGb/CzlP64HTzen0hEAfqgQV3m0e0KLHXsR7RmN0=)
7: 284E9E9E1D5611EB891ADC6CC4F9AE02.roa (hash: 0K9xo1NevqH2KRC8xQxUcHRpqfQKIdlyoCnPNU33oSE=)
8: 3CD29BF4D46911EE8B36431CC4F9AE02.roa (hash: hJLGe+zYrwYxwpdQvFaS8hi/p8W1GhibzXeCk3G6BNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 May 2026 21:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2155 (0x86b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Validity
Not Before: May 22 21:05:05 2026 GMT
Not After : May 29 21:05:05 2026 GMT
Subject: CN=6a10c501-35c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b5:2b:a9:9f:14:7c:5b:24:73:0c:5b:cc:c8:
0e:0b:91:a5:e4:b1:44:ec:23:25:ab:be:92:ad:76:
8b:d4:de:a4:5e:6a:ff:e9:56:8c:c0:94:2a:31:e1:
f0:69:05:fd:b5:73:89:1b:86:e8:4e:4b:a4:5c:6f:
58:7c:0a:f5:fc:94:8d:d8:25:3f:de:53:bd:0c:31:
29:72:91:66:78:ca:be:48:e6:ef:98:09:35:63:b3:
19:87:67:d5:f1:71:60:f3:de:0d:e4:c6:f0:d4:b0:
0d:99:90:1d:05:46:c5:9e:69:79:36:f7:77:04:a0:
f9:9d:f0:6d:01:8f:7a:82:ed:f3:59:34:0d:f3:d4:
1a:4d:91:c3:b3:d5:c2:a4:11:72:f5:7b:a2:79:59:
d9:82:17:06:24:e7:25:7f:2e:bd:df:a7:a8:8f:dc:
8e:a1:59:25:aa:01:5b:e0:85:bd:f4:f7:b2:e2:d9:
c9:15:d9:37:47:62:8f:00:82:0d:35:0f:4e:67:74:
89:48:53:a4:8f:70:e4:b5:dc:2b:47:0d:c9:a9:d0:
b0:50:10:e1:cf:02:82:3b:11:a7:c7:bd:a6:ee:dd:
27:23:76:52:c0:fc:82:69:0f:e0:d6:38:a0:d5:9b:
9f:3c:cc:7e:bd:7f:06:39:6c:75:2b:04:c0:f9:c2:
58:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7A:75:DF:D0:07:63:B3:47:67:D8:F7:DD:FB:9C:B5:0E:D7:E1:1F
X509v3 Authority Key Identifier:
keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:38:44:0c:35:9e:36:fb:fb:93:9c:4c:41:a4:3c:37:a1:cb:
8e:4b:ad:de:06:97:5f:80:88:06:90:c7:72:39:72:18:3c:71:
00:39:09:ad:ca:c5:c0:a6:49:dd:10:d0:1f:bc:07:5a:34:f3:
f3:e6:7d:90:fd:bd:01:58:ec:36:04:28:12:9f:3a:66:81:a8:
e6:83:fd:b1:0e:b5:74:2b:4e:f4:61:79:9c:d0:a6:29:c9:a9:
39:49:cc:c9:b5:99:8b:d1:97:31:65:1c:bb:81:9b:b6:79:9d:
6d:9f:ff:1f:c0:58:72:4e:05:bf:ac:d3:61:6f:8c:c2:78:75:
9b:22:5b:71:7a:1f:93:0b:7d:cd:9d:15:ff:3b:04:48:ad:22:
dd:d0:e2:1f:56:0d:9f:83:71:97:0a:f2:3d:7c:68:4b:73:c4:
a4:73:3a:86:dd:ae:81:a5:10:35:cb:8c:3c:8e:71:bf:7a:05:
3c:c8:3e:49:7d:9b:d3:1c:1d:2b:96:0c:82:43:55:fd:90:aa:
b1:35:62:ca:b8:57:6b:cf:3f:50:97:0b:01:31:8a:54:70:aa:
4b:ce:e6:49:26:62:20:19:be:f7:61:c1:38:5d:59:f8:cf:9c:
a0:51:ef:0b:95:5b:e4:5a:61:18:32:4e:60:37:69:a2:1c:4c:
83:4b:b4:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1
RjlGNTFERjcwHhcNMjYwNTIyMjEwNTA1WhcNMjYwNTI5MjEwNTA1WjAYMRYwFAYD
VQQDEw02YTEwYzUwMS0zNWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlrUrqZ8UfFskcwxbzMgOC5Gl5LFE7CMlq76SrXaL1N6kXmr/6VaMwJQqMeHw
aQX9tXOJG4boTkukXG9YfAr1/JSN2CU/3lO9DDEpcpFmeMq+SObvmAk1Y7MZh2fV
8XFg894N5Mbw1LANmZAdBUbFnml5Nvd3BKD5nfBtAY96gu3zWTQN89QaTZHDs9XC
pBFy9XuieVnZghcGJOclfy6936eoj9yOoVklqgFb4IW99Pey4tnJFdk3R2KPAIIN
NQ9OZ3SJSFOkj3DktdwrRw3JqdCwUBDhzwKCOxGnx72m7t0nI3ZSwPyCaQ/g1jig
1ZufPMx+vX8GOWx1KwTA+cJY3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEF6dd/Q
B2OzR2fY9937nLUO1+EfMB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4
N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI
ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OURDQi9FNEMwRjU2QzE4N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpv
cFllcXpvejluYTVmbjFIZmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdThEDDWeNvv7k5xMQaQ8N6HLjkut3gaXX4CIBpDHcjlyGDxxADkJrcrFwKZJ
3RDQH7wHWjTz8+Z9kP29AVjsNgQoEp86ZoGo5oP9sQ61dCtO9GF5nNCmKcmpOUnM
ybWZi9GXMWUcu4GbtnmdbZ//H8BYck4Fv6zTYW+Mwnh1myJbcXofkwt9zZ0V/zsE
SK0i3dDiH1YNn4NxlwryPXxoS3PEpHM6ht2ugaUQNcuMPI5xv3oFPMg+SX2b0xwd
K5YMgkNV/ZCqsTViyrhXa88/UJcLATGKVHCqS87mSSZiIBm+92HBOF1Z+M+coFHv
C5Vb5FphGDJOYDdpohxMg0u0Rw==
-----END CERTIFICATE-----
Generated at Sun May 24 07:24:51 2026 by rpki-client