
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft
File: FU2hKxG1QFxQywEZ42qL8-0NIbw.mft (raw, json)
Hash identifier: JpZmG6xX3kJQmLt1jpJ7GTt/WVX59RSlQ4IAitEDA8I=
Subject key identifier: 7C:BB:92:E3:6F:A4:15:0E:23:21:78:65:AE:84:43:5C:7F:B4:B8:27
Authority key identifier: 15:4D:A1:2B:11:B5:40:5C:50:CB:01:19:E3:6A:8B:F3:ED:0D:21:BC
Certificate issuer: /CN=A912A2C1/serialNumber=154DA12B11B5405C50CB0119E36A8BF3ED0D21BC
Certificate serial: 2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FU2hKxG1QFxQywEZ42qL8-0NIbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft
Manifest number: 2C
Signing time: Wed 19 Aug 2026 09:28:14 +0000
Manifest this update: Wed 19 Aug 2026 09:28:14 +0000
Manifest next update: Wed 26 Aug 2026 09:28:14 +0000
Files and hashes: 1: FU2hKxG1QFxQywEZ42qL8-0NIbw.crl (hash: Cb93Enp9yGdo5hqyZgBs3ym3sCBccMoIo+2eSMPCpeA=)
2: 77A068EA57D611F1A509C21FCD833773.roa (hash: obXRKQp33behMNw0kLg97yChlSrOJ2Iv9yjscfOnr/I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.crl
rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FU2hKxG1QFxQywEZ42qL8-0NIbw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A2C1, serialNumber=154DA12B11B5405C50CB0119E36A8BF3ED0D21BC
Validity
Not Before: Aug 19 09:28:14 2026 GMT
Not After : Aug 26 09:28:14 2026 GMT
Subject: CN=6a85772e-ca45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:b5:d1:61:04:38:c1:61:34:6d:e0:d8:23:
13:7d:ef:04:55:17:1c:f0:3d:3c:c0:6d:6d:24:2e:
99:63:49:f3:f0:23:76:04:a6:5e:ad:2d:cc:8d:8f:
55:b6:dc:80:91:e9:ae:54:e5:d6:e0:85:d0:c6:30:
22:c5:09:87:22:d6:37:72:8f:d1:11:07:7f:95:e7:
83:c5:7d:6d:61:0b:87:f7:00:e0:1e:61:30:6c:60:
66:ad:4c:6c:f4:48:4c:5c:6e:dc:8c:c5:98:41:c9:
bc:ad:96:78:95:f4:d8:62:d2:83:b6:89:e4:0a:e3:
4b:8c:fd:3b:35:b7:2f:f5:0a:7b:14:89:a8:b6:8e:
47:aa:87:89:13:ee:1a:43:6c:92:a2:c1:8f:72:b5:
15:12:6f:a4:ac:6f:14:6c:cf:62:7e:1b:58:34:85:
80:6c:91:8a:27:73:5f:1a:32:74:e5:86:81:29:1d:
a1:f2:97:31:fe:12:d7:ba:31:dc:29:dc:f5:27:7f:
b1:4c:1e:8f:82:f8:a8:a3:fb:32:8d:2a:ef:0d:b3:
64:a5:f6:4d:b6:40:e3:30:42:f9:14:66:e7:18:28:
1d:db:bc:b3:8d:5c:e4:85:f2:06:26:56:75:af:af:
6a:81:fa:5f:7a:85:77:6a:ec:77:f4:26:74:80:3f:
3a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BB:92:E3:6F:A4:15:0E:23:21:78:65:AE:84:43:5C:7F:B4:B8:27
X509v3 Authority Key Identifier:
keyid:15:4D:A1:2B:11:B5:40:5C:50:CB:01:19:E3:6A:8B:F3:ED:0D:21:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FU2hKxG1QFxQywEZ42qL8-0NIbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:6f:12:e2:f2:c1:58:a3:fd:68:04:9f:f4:13:60:e1:74:63:
f4:59:b1:e2:5c:81:c6:f4:a2:38:5a:d3:d2:3c:11:fd:dc:05:
1f:76:4d:cb:f4:d1:cb:dc:27:30:d8:e7:91:df:ba:ec:ef:dc:
c0:35:f3:ba:f9:fe:53:17:29:ef:b3:2b:40:44:7c:95:e3:ed:
25:aa:2c:42:05:6a:b1:73:64:dd:41:ec:ef:de:89:ae:5e:2f:
19:ec:f0:9d:c2:9d:1e:fe:6e:23:82:98:75:52:3b:37:03:0c:
b1:77:28:30:56:51:ef:76:0f:b2:b0:5e:e3:38:95:b3:04:8f:
9b:2c:65:fc:94:9d:3c:0a:b2:75:09:04:c0:40:4e:d9:8f:30:
f5:81:7d:ac:e9:87:b2:ef:9e:16:17:95:e8:48:3d:29:0f:0f:
de:8f:63:16:0f:82:f7:50:76:7f:66:e0:e2:fb:f6:23:71:72:
90:af:31:93:3c:d0:b8:6a:82:a9:a1:62:c8:ce:26:8b:31:cc:
13:5e:20:cf:e9:1b:75:69:b4:46:d4:06:5c:ce:aa:1e:6f:eb:
94:08:dd:34:6f:88:02:13:25:be:7d:c8:75:98:9a:3f:2b:17:
4f:6e:c5:37:43:d8:9c:1f:d4:56:5e:a1:20:be:7d:71:b9:4a:
44:3d:9c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:18 2026 by rpki-client