
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
File: feYHxGFdegH73UqGrVRZQBp1mSE.mft (raw, json)
Hash identifier: 5UR/wlIrp/NRmIlttztriBKMqNSbuAlps+XeRwly7LY=
Subject key identifier: 00:CD:3F:1E:83:88:C1:39:52:F1:FE:68:71:0F:A5:27:86:62:CC:72
Authority key identifier: 7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21
Certificate issuer: /CN=A912442A/serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921
Certificate serial: 0206
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
Manifest number: 01F2
Signing time: Wed 21 Oct 2026 00:37:05 +0000
Manifest this update: Wed 21 Oct 2026 00:37:04 +0000
Manifest next update: Wed 28 Oct 2026 00:37:04 +0000
Files and hashes: 1: feYHxGFdegH73UqGrVRZQBp1mSE.crl (hash: MJ8Www6f7oumfqSjCo2+tJHD/3WaGg6vcnw+hx7vwXs=)
2: B374CCF4764F11EFA343104DC4F9AE02.roa (hash: 2z+iQiOun9JI4f1KdKp9Mav00oLerc8hIDbuecZ9Avw=)
3: DF1CE5761E4811EF83D08212C4F9AE02.roa (hash: 9ZQJr8Gl5XR1HqKf3vTUBCTUhwF96wb5DS0J+eswdL0=)
4: 681098C2CDA911EF89DEEE2CC4F9AE02.roa (hash: 10jgAa/oO9QvVhmXa5ryYi3X/Q5r2nOHe8sXNKlu0sI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl
rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 00:37:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 518 (0x206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A, serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921
Validity
Not Before: Oct 21 00:37:04 2026 GMT
Not After : Oct 28 00:37:04 2026 GMT
Subject: CN=6ad80930-a349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:3e:8e:04:e3:0c:96:a3:62:6a:bf:e5:c6:
12:7e:18:6a:1a:97:c8:91:e9:4b:6d:eb:9a:af:97:
0d:90:7d:ff:55:17:43:f1:7f:4e:8a:36:fc:3c:94:
2c:6d:27:b0:4f:1c:e6:b7:00:0d:d6:e9:0c:59:a6:
32:70:5f:de:95:a4:d7:ad:5a:85:eb:8b:46:44:f3:
69:88:86:b6:0a:11:67:bb:9a:af:bf:c7:62:41:20:
92:69:5b:b5:9e:f4:34:b5:10:1e:ed:51:d5:9d:94:
74:7f:6d:1f:2d:ca:2a:f9:06:b2:ad:6b:0b:82:72:
14:93:28:1e:a8:ee:80:fc:e9:64:5e:e1:71:1e:84:
4a:3e:d8:51:50:61:d2:ca:ba:db:78:a5:47:6e:cc:
a9:2f:57:36:03:a5:b9:73:f0:cc:0a:7e:a2:7e:97:
f5:b5:c6:9e:0d:09:e1:3c:29:eb:c2:25:ba:84:1b:
eb:04:12:f6:60:bf:99:a1:5d:05:e4:36:8f:ee:cd:
76:ef:c1:f4:1e:2f:ca:fb:28:b2:db:5a:90:62:31:
75:35:88:f4:55:ad:ed:0e:7f:ec:29:56:31:2e:28:
61:4d:c1:43:a8:92:9d:a0:9c:b7:a7:af:19:10:dc:
a5:80:99:56:01:07:94:5f:92:8c:4a:5e:80:b7:96:
fb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CD:3F:1E:83:88:C1:39:52:F1:FE:68:71:0F:A5:27:86:62:CC:72
X509v3 Authority Key Identifier:
keyid:7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:6a:f4:72:d0:2d:2f:71:ff:1e:74:b6:b5:dc:54:83:65:51:
e5:af:1a:c0:0a:d8:e3:6d:c9:28:c1:df:1e:80:56:5c:2b:02:
ae:3b:03:af:1f:f9:7b:0f:64:30:1b:4f:bd:29:75:cf:4f:78:
f0:b8:6f:f9:ae:a3:9e:07:26:a7:02:7b:79:c5:39:0e:90:97:
20:7f:af:2c:e4:ad:92:7f:50:bd:b1:29:ab:5a:0a:71:5b:08:
70:53:ed:15:de:c5:98:ea:be:6a:a2:60:39:ff:92:fb:e5:63:
00:6d:d0:fd:5b:a0:48:80:bc:2e:25:ad:11:18:d2:8d:34:a1:
f6:ba:c2:5e:b8:ce:40:44:a6:91:46:3b:9a:41:80:af:15:92:
1f:94:ba:7d:1a:cd:40:4b:45:0e:5d:cf:dd:9d:ca:0f:0f:e5:
d6:29:ab:1d:73:e7:7e:78:be:a9:94:68:33:c2:a1:bb:16:b4:
cf:95:6f:a5:c7:73:cc:4b:9a:dd:b4:80:8c:db:b3:c2:e7:e4:
cc:9d:74:9f:b0:5c:fd:da:bc:89:2c:49:7f:3f:fb:f5:5d:8e:
e7:5a:2d:87:b5:0f:ba:c6:40:34:37:b7:aa:87:e7:8d:ca:82:
20:b2:73:00:44:36:38:dd:a8:af:d0:f4:72:08:11:cf:26:1f:
ae:ba:73:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:44:23 2026 by rpki-client