
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
File: FyPctBoEJopYeqzoz9na5fn1Hfc.mft (raw, json)
Hash identifier: XuF43om0RdBXHnKf3blx/X5ArsC2GhoJYpsTTwFj+j0=
Subject key identifier: FE:F7:33:DE:06:C0:02:B1:59:1F:3E:04:9C:AC:59:A6:89:5B:6F:DB
Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Certificate serial: 088B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
Manifest number: 0853
Signing time: Mon 06 Jul 2026 21:30:12 +0000
Manifest this update: Mon 06 Jul 2026 21:30:11 +0000
Manifest next update: Mon 13 Jul 2026 21:30:11 +0000
Files and hashes: 1: FyPctBoEJopYeqzoz9na5fn1Hfc.crl (hash: mPAEWt6IprEiEocQnfD+08k+I/D9VklXssDp5dzgla0=)
2: 68DAAA1A749711EFB4EDA45FC4F9AE02.roa (hash: WAr5HKGDc2RarHCoXbJPfLibBljcpHIXpcteTrNCl3M=)
3: 8037BC50EB2E11EDB835EF4AC4F9AE02.roa (hash: gCroShM9MPy9hkOuo/TmE62NW3KmfiqLbSetYf/sQtk=)
4: 3CD29BF4D46911EE8B36431CC4F9AE02.roa (hash: KYjRsSmZFGs+FoyNnOuXfuvWzg10BoAKlArtMc3CJYg=)
5: 26D56F6425FF11EBAF634966C4F9AE02.roa (hash: Gd7CExBZM5BBf+T9t2y84eMZfBgGlZ7L5uDoPb1T73A=)
6: 7AA7B416E01011EEA1CA127CC4F9AE02.roa (hash: SfIPzDPx+vk2QttaA/BFMlEfJZc2n17RQ43Dr50jvLs=)
7: 2840D3A225FF11EBAF634966C4F9AE02.roa (hash: L0U0RcVKixHM80nNmnQh09Mgzv1FHdU2PsTdoVdSV8U=)
8: 284E9E9E1D5611EB891ADC6CC4F9AE02.roa (hash: fTOR9/QC+OhH2+hrGoKHcs/jMnPvIkd1epQi4PDNnQE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 21:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2187 (0x88b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Validity
Not Before: Jul 6 21:30:11 2026 GMT
Not After : Jul 13 21:30:11 2026 GMT
Subject: CN=6a4c1e63-9b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:4c:fb:37:32:e3:6c:48:d4:a9:30:98:08:
56:dd:f0:a4:0e:ae:da:0e:cb:1f:9e:87:01:b8:e4:
91:72:86:cd:5e:c1:e7:f8:01:83:23:33:e4:60:6a:
b5:fb:45:26:cf:d6:3f:a1:2f:f3:49:c4:f9:90:cc:
d4:ed:4b:05:09:a9:22:de:26:77:8d:09:4e:6b:9c:
f5:7d:6e:7a:5e:fc:22:c9:be:3a:b6:b1:23:1c:f3:
ea:f0:5d:f2:68:12:6f:0d:28:13:ab:ce:65:ed:ec:
03:24:5d:ba:af:9b:86:26:ee:17:4e:50:84:0e:c6:
d7:f3:b7:35:97:3e:c5:72:f4:e6:c8:e2:6f:8f:63:
22:28:fe:de:bf:bb:f4:77:e0:b3:65:2a:c1:06:b4:
ca:cc:b5:0a:38:3d:31:2f:46:78:78:0c:52:e6:a3:
91:37:2e:24:86:11:07:87:81:92:43:7e:d4:b3:63:
f2:1d:40:60:f1:82:cd:87:1d:99:37:e2:e0:fe:bf:
42:11:3a:b8:82:6d:2f:fc:e3:60:d2:4d:08:ab:5e:
04:05:f8:72:f6:ab:ce:98:e8:81:4e:2f:27:53:e7:
27:48:a3:46:9c:d1:ab:98:da:8d:41:97:94:88:07:
09:47:ab:98:b6:41:b2:c0:ed:4b:2a:2c:05:f1:02:
e9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F7:33:DE:06:C0:02:B1:59:1F:3E:04:9C:AC:59:A6:89:5B:6F:DB
X509v3 Authority Key Identifier:
keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:83:4c:87:8d:1b:fc:41:14:55:ce:df:1e:22:14:17:4a:3a:
91:cd:92:be:db:9f:3b:0c:2a:84:6e:16:d3:69:66:30:00:17:
de:a4:3e:d1:66:c7:b5:b3:ef:04:9c:a1:94:62:80:dd:1c:e3:
20:6a:1a:c8:85:9a:fb:aa:9b:56:36:a8:75:53:4a:ec:f2:c1:
36:64:23:14:3c:ca:43:1c:e1:09:da:c8:54:a0:c5:26:84:24:
90:a6:86:2b:8c:d2:df:d4:99:04:10:b3:1c:4e:85:e0:44:0d:
0c:17:bc:6b:46:2d:50:a9:84:82:3d:39:f2:e3:2f:dc:6c:5e:
6b:c4:68:50:0f:e6:84:40:54:9d:01:21:c6:c3:3b:ab:ec:b1:
7e:ba:06:b1:46:cd:84:92:1e:50:5a:d9:d6:86:0b:27:f1:1d:
1e:02:0a:a3:da:61:dc:a8:3d:f4:92:86:3b:da:b7:9e:3f:80:
aa:42:02:f7:c3:12:03:d4:1a:c4:be:19:27:41:78:94:4d:9d:
81:2a:08:64:a4:c8:8c:80:52:fe:c4:a8:a2:f4:2f:1d:65:69:
7e:d8:8b:1e:4c:97:4a:b6:06:3c:a7:da:11:7b:ea:b5:74:06:
aa:b2:4f:89:5c:fe:77:10:7c:2e:17:ec:eb:ed:a4:ee:65:79:
44:7e:8f:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1
RjlGNTFERjcwHhcNMjYwNzA2MjEzMDExWhcNMjYwNzEzMjEzMDExWjAYMRYwFAYD
VQQDEw02YTRjMWU2My05YjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsJZM+zcy42xI1KkwmAhW3fCkDq7aDssfnocBuOSRcobNXsHn+AGDIzPkYGq1
+0Umz9Y/oS/zScT5kMzU7UsFCaki3iZ3jQlOa5z1fW56Xvwiyb46trEjHPPq8F3y
aBJvDSgTq85l7ewDJF26r5uGJu4XTlCEDsbX87c1lz7FcvTmyOJvj2MiKP7ev7v0
d+CzZSrBBrTKzLUKOD0xL0Z4eAxS5qORNy4khhEHh4GSQ37Us2PyHUBg8YLNhx2Z
N+Lg/r9CETq4gm0v/ONg0k0Iq14EBfhy9qvOmOiBTi8nU+cnSKNGnNGrmNqNQZeU
iAcJR6uYtkGywO1LKiwF8QLphwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP73M94G
wAKxWR8+BJysWaaJW2/bMB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4
N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI
ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OURDQi9FNEMwRjU2QzE4N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpv
cFllcXpvejluYTVmbjFIZmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjoNMh40b/EEUVc7fHiIUF0o6kc2SvtufOwwqhG4W02lmMAAX3qQ+0WbHtbPv
BJyhlGKA3RzjIGoayIWa+6qbVjaodVNK7PLBNmQjFDzKQxzhCdrIVKDFJoQkkKaG
K4zS39SZBBCzHE6F4EQNDBe8a0YtUKmEgj058uMv3Gxea8RoUA/mhEBUnQEhxsM7
q+yxfroGsUbNhJIeUFrZ1oYLJ/EdHgIKo9ph3Kg99JKGO9q3nj+AqkIC98MSA9Qa
xL4ZJ0F4lE2dgSoIZKTIjIBS/sSoovQvHWVpftiLHkyXSrYGPKfaEXvqtXQGqrJP
iVz+dxB8Lhfs6+2k7mV5RH6Psw==
-----END CERTIFICATE-----
Generated at Wed Jul 8 22:38:33 2026 by rpki-client