
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
File: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft (raw, json)
Hash identifier: 6DakgqHRIDVpJuFB/9qU7bMtcWIJ2XtYy8evEIHQrA8=
Subject key identifier: 4F:6D:4A:5B:40:2F:67:61:24:1D:83:59:37:EC:77:7C:36:93:B7:DF
Authority key identifier: 14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8
Certificate issuer: /CN=A911C564/serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8
Certificate serial: 0631
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
Manifest number: 0629
Signing time: Mon 20 Jul 2026 23:29:58 +0000
Manifest this update: Mon 20 Jul 2026 23:29:57 +0000
Manifest next update: Mon 27 Jul 2026 23:29:57 +0000
Files and hashes: 1: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl (hash: LN7TI/9VT+E3NJw5JBQQ5VzgPoZmHIz6s9K1TVXRqQ0=)
2: A3B2B0A8EE9711EB8EF1A50AC4F9AE02.roa (hash: LsWT9PH7lpuuB3Eu7lPQZ/DRwq+wHiTPxrXabXBYi5Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl
rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 23:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1585 (0x631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C564, serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8
Validity
Not Before: Jul 20 23:29:57 2026 GMT
Not After : Jul 27 23:29:57 2026 GMT
Subject: CN=6a5eaf75-8614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:43:9e:e9:b4:9f:0d:c8:46:23:df:d5:be:
9f:a4:e5:ab:e5:13:f0:be:d2:a1:71:0c:71:b7:08:
52:7c:ed:b4:cc:a2:05:b3:f8:92:f4:0d:40:7f:59:
65:15:e6:ae:ae:d4:c9:0f:2a:3a:a2:58:c1:94:63:
f2:f7:f4:2f:7d:2e:3e:8b:83:c8:0c:f2:0a:9a:55:
19:5f:d8:46:f0:3e:d4:88:c2:9f:b5:97:c7:20:53:
f2:d5:72:85:ca:ea:50:0d:1d:37:d8:24:76:b0:fe:
fb:8c:cd:50:ce:ec:8f:15:9e:e1:e8:40:7a:b0:b8:
18:0a:cc:a7:e1:48:b6:bb:24:9c:12:6b:47:f0:d0:
c4:7b:b6:0e:bb:c9:4c:9a:07:98:11:ae:6e:17:6a:
a2:79:46:d1:ac:e7:e6:50:8a:ba:17:9a:b0:6a:c9:
c4:6b:9a:f1:af:0a:1c:5e:d6:8c:1b:ba:d8:b5:4f:
a5:67:22:54:69:a7:7d:b7:d0:89:96:82:db:de:92:
ab:58:04:da:f3:a8:08:ea:d0:86:13:f7:b9:3a:f8:
08:7d:0c:d8:18:cd:c0:2f:76:61:4c:11:95:b6:f8:
4c:71:d5:3a:3b:18:7a:66:30:ec:14:f6:48:ce:50:
5c:62:f7:0d:00:a0:c1:4a:6e:5f:83:c3:81:18:0b:
4a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6D:4A:5B:40:2F:67:61:24:1D:83:59:37:EC:77:7C:36:93:B7:DF
X509v3 Authority Key Identifier:
keyid:14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:29:9b:47:14:d7:48:15:ee:b8:6b:c9:82:12:e6:e5:68:0b:
9c:55:1e:97:9b:60:dc:83:f7:61:5d:6a:c2:68:78:e7:9e:bf:
0c:83:bb:ed:03:e1:3e:08:dd:b4:8a:87:89:45:f7:4b:d3:1b:
3f:fb:c9:c5:0d:7b:e2:18:13:29:47:9f:1f:24:21:00:0e:fb:
47:f5:2a:ea:06:5c:23:9c:9b:01:3f:14:a6:1f:67:62:a5:2c:
19:18:ed:81:3c:09:9b:69:9e:96:aa:10:21:97:a0:f5:67:cc:
ab:8a:ce:9f:d9:20:3f:4c:95:10:ae:42:da:7f:8e:81:9c:87:
d4:41:76:4d:7e:95:c9:0b:bc:09:1a:5f:25:ea:be:34:26:73:
ae:bd:29:e0:ca:b7:c8:dd:0a:67:4d:60:a2:cd:60:74:99:d4:
4d:09:6f:f9:68:3d:86:ec:5d:90:a5:37:74:5a:4d:40:1a:b6:
1e:82:84:8e:c9:f6:7e:d0:81:ac:11:f2:eb:a4:f4:3b:a6:89:
83:63:bb:34:09:3d:0b:66:35:d4:89:b1:58:be:01:26:91:1d:
06:6d:81:e4:ed:93:bd:18:0d:14:f6:6d:73:42:5f:af:e3:95:
f7:21:1f:5f:ee:97:eb:e1:d9:26:b8:6b:ce:bf:de:7d:6d:72:
cc:16:41:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:34:43 2026 by rpki-client