
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
File: FyPctBoEJopYeqzoz9na5fn1Hfc.mft (raw, json)
Hash identifier: 50Z2a8c2/F3PBY3Eejy9PAyAKkhHSU7Av9EtsK4Vpe4=
Subject key identifier: 0E:E7:9C:57:23:03:6F:78:00:7E:E7:07:37:7F:34:9A:1F:D3:2F:C8
Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Certificate serial: 08C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
Manifest number: 088F
Signing time: Sat 31 Oct 2026 21:19:30 +0000
Manifest this update: Sat 31 Oct 2026 21:19:29 +0000
Manifest next update: Sat 07 Nov 2026 21:19:29 +0000
Files and hashes: 1: FyPctBoEJopYeqzoz9na5fn1Hfc.crl (hash: raJLiiTRHPz8E3dpqvsvdEvX42w1nG5SE3Z1wUgGlV0=)
2: 2840D3A225FF11EBAF634966C4F9AE02.roa (hash: L0U0RcVKixHM80nNmnQh09Mgzv1FHdU2PsTdoVdSV8U=)
3: 284E9E9E1D5611EB891ADC6CC4F9AE02.roa (hash: fTOR9/QC+OhH2+hrGoKHcs/jMnPvIkd1epQi4PDNnQE=)
4: 7AA7B416E01011EEA1CA127CC4F9AE02.roa (hash: SfIPzDPx+vk2QttaA/BFMlEfJZc2n17RQ43Dr50jvLs=)
5: 68DAAA1A749711EFB4EDA45FC4F9AE02.roa (hash: WAr5HKGDc2RarHCoXbJPfLibBljcpHIXpcteTrNCl3M=)
6: 26D56F6425FF11EBAF634966C4F9AE02.roa (hash: Gd7CExBZM5BBf+T9t2y84eMZfBgGlZ7L5uDoPb1T73A=)
7: 3CD29BF4D46911EE8B36431CC4F9AE02.roa (hash: KYjRsSmZFGs+FoyNnOuXfuvWzg10BoAKlArtMc3CJYg=)
8: 8037BC50EB2E11EDB835EF4AC4F9AE02.roa (hash: gCroShM9MPy9hkOuo/TmE62NW3KmfiqLbSetYf/sQtk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Nov 2026 21:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2247 (0x8c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Validity
Not Before: Oct 31 21:19:29 2026 GMT
Not After : Nov 7 21:19:29 2026 GMT
Subject: CN=6ae65b62-e759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:ca:3b:81:d7:b6:48:c7:ad:1a:76:f2:57:
e8:0f:9b:0d:49:4f:08:07:d0:92:ec:a9:8c:bb:bf:
08:a3:cc:c1:74:eb:93:f8:fd:4e:12:08:e8:a9:70:
ff:90:25:70:94:da:58:95:58:44:a2:42:38:df:55:
5f:92:53:2c:ef:60:9d:f2:be:ed:b8:9d:02:42:30:
e1:5a:76:59:90:cf:2d:f0:bc:1c:a7:db:90:93:be:
d8:81:0b:9a:9d:ce:bf:b0:56:c0:08:e9:63:b9:61:
01:85:f6:32:94:44:16:7f:e0:47:3f:86:69:4d:7e:
5c:b7:04:45:ab:32:72:90:12:ef:b1:7b:c1:70:9f:
67:35:b8:e0:2c:6c:58:bb:7f:15:aa:fc:3c:4f:1b:
d0:af:dd:fd:e5:1a:15:05:64:d4:15:9d:e1:b5:1c:
dc:1e:7e:a9:50:03:50:1e:2a:89:a9:f5:dc:29:7f:
29:a0:3e:c7:bb:53:07:d2:ab:3d:83:85:41:07:85:
8a:d5:36:e3:13:71:e9:c3:e0:2c:e6:e5:ed:61:e4:
b5:d4:f2:88:f5:13:0e:01:ce:4b:14:e0:88:9a:f3:
66:d3:f0:90:f8:9c:8c:91:87:1c:42:01:d6:ac:93:
f6:ac:7a:2e:dc:34:a1:e5:9a:9f:7e:3d:5c:f6:a2:
a3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E7:9C:57:23:03:6F:78:00:7E:E7:07:37:7F:34:9A:1F:D3:2F:C8
X509v3 Authority Key Identifier:
keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:10:6a:3b:8e:a1:79:8f:f7:f6:a5:58:a9:6d:a8:ac:80:18:
b9:cd:6b:fc:3e:34:98:c1:08:3e:84:97:90:8f:5b:b1:dc:9c:
b7:93:42:69:7b:9b:d1:e0:24:23:cf:df:a0:7c:4c:11:99:77:
e6:10:bb:de:54:db:58:d7:29:87:2d:c3:04:78:a6:46:02:4c:
d9:92:5e:f9:4d:f8:db:c4:84:55:c2:65:6a:82:72:f3:bd:9d:
9a:88:d6:d4:9f:22:c5:97:7b:49:91:78:f2:85:43:74:c4:d7:
65:98:fe:15:d0:17:8e:c9:9f:d7:ce:bb:71:87:fa:d8:d7:2d:
00:84:d7:77:eb:67:fc:9b:50:8e:f1:a1:5d:78:ff:d6:a3:51:
cf:a3:81:5f:35:6a:2e:1a:09:b4:23:71:cd:23:23:cc:dd:5c:
0b:fa:fc:68:e3:28:58:3a:45:06:af:54:11:37:90:9e:6f:16:
9c:27:b0:06:af:25:ab:35:47:6f:e9:db:2c:23:02:ad:8e:19:
2b:3f:42:d7:33:69:91:69:ef:d2:56:20:f3:5a:95:0e:ec:2c:
89:70:f5:29:fa:da:dc:12:85:77:98:81:1f:ec:49:6e:5f:35:
18:cd:30:d0:4b:8c:9b:06:fb:c8:5b:c9:1f:34:14:b8:e1:ba:
e0:ce:0b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:53:17 2026 by rpki-client