
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft
File: FU2hKxG1QFxQywEZ42qL8-0NIbw.mft (raw, json)
Hash identifier: 79c5d4+pAvFQt6Rzee8EF8I1KJf354/nw7GLbbO5l1k=
Subject key identifier: 64:6F:9C:53:35:38:EF:BA:64:2B:E7:78:D9:99:C3:25:52:86:2E:57
Authority key identifier: 15:4D:A1:2B:11:B5:40:5C:50:CB:01:19:E3:6A:8B:F3:ED:0D:21:BC
Certificate issuer: /CN=A912A2C1/serialNumber=154DA12B11B5405C50CB0119E36A8BF3ED0D21BC
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FU2hKxG1QFxQywEZ42qL8-0NIbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft
Manifest number: 10
Signing time: Tue 23 Jun 2026 09:20:34 +0000
Manifest this update: Tue 23 Jun 2026 09:20:34 +0000
Manifest next update: Tue 30 Jun 2026 09:20:34 +0000
Files and hashes: 1: FU2hKxG1QFxQywEZ42qL8-0NIbw.crl (hash: njtpKLnaUyHLdLrsCrleIgky7JSpkwXbshO9Ce54bws=)
2: 77A068EA57D611F1A509C21FCD833773.roa (hash: obXRKQp33behMNw0kLg97yChlSrOJ2Iv9yjscfOnr/I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.crl
rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FU2hKxG1QFxQywEZ42qL8-0NIbw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 09:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A2C1, serialNumber=154DA12B11B5405C50CB0119E36A8BF3ED0D21BC
Validity
Not Before: Jun 23 09:20:34 2026 GMT
Not After : Jun 30 09:20:34 2026 GMT
Subject: CN=6a3a4fe2-1987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:c2:75:48:75:82:df:1e:d3:ad:e1:b3:c1:
80:b2:2b:9f:f8:d2:64:5b:86:0c:1e:54:e4:98:a8:
bf:ba:f4:e3:74:21:d5:14:80:06:0f:bc:d5:76:ee:
02:da:7e:66:15:dd:9c:d8:c1:4f:8d:3b:78:a2:1e:
e3:9c:87:26:27:2c:ee:74:d8:df:9c:4a:1d:4a:d3:
56:9b:54:d4:8b:61:9c:1a:ef:2d:c3:7c:7f:5a:15:
2b:c9:6a:1d:f9:bb:2e:3f:bc:15:9a:41:c6:27:e0:
1c:20:fe:12:24:92:0c:b6:cd:c4:0a:ef:14:40:9d:
39:bd:4a:a3:fc:be:97:c5:a5:6f:53:98:fb:11:7f:
62:e9:b0:ec:3b:80:a7:e1:54:43:8b:64:78:83:df:
67:f1:3b:b5:93:e5:83:3a:54:9c:51:a4:94:81:ed:
56:1b:be:36:a5:59:ef:25:4b:4c:42:4b:8b:f3:ea:
b2:14:b6:8d:e0:89:98:27:1b:42:7f:2d:8f:3a:91:
89:95:e0:ac:70:cf:ce:9c:14:f8:fb:dd:d4:c3:e6:
ef:63:17:11:ea:cd:7d:9b:58:99:40:20:b5:eb:54:
b1:ec:fe:d1:3b:c6:80:6f:cd:65:80:0c:fe:4d:77:
ba:bc:ce:99:79:ea:0c:5d:4b:78:4c:57:a4:1a:66:
12:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6F:9C:53:35:38:EF:BA:64:2B:E7:78:D9:99:C3:25:52:86:2E:57
X509v3 Authority Key Identifier:
keyid:15:4D:A1:2B:11:B5:40:5C:50:CB:01:19:E3:6A:8B:F3:ED:0D:21:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FU2hKxG1QFxQywEZ42qL8-0NIbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f7:b6:d1:48:ef:50:5c:bf:54:67:f0:4c:92:71:34:30:35:
4c:90:8a:cf:f5:fd:91:5c:09:d0:9e:ef:b6:75:9f:8a:68:9e:
b5:c1:aa:42:24:9b:17:90:b6:d2:f6:d3:76:bc:ab:f8:35:dd:
df:1e:b8:19:8a:9a:58:52:0a:95:f2:ed:e0:e6:7e:e4:b1:17:
c8:2f:52:29:36:3a:e5:a2:6e:bf:52:75:0e:71:72:ab:0c:5f:
13:10:37:c3:e0:65:ff:be:14:3b:37:be:65:bf:a5:c2:ce:4e:
02:1c:34:32:33:5a:b2:23:2f:a3:82:1d:35:17:74:f0:14:a6:
c0:14:44:22:de:00:77:a1:9e:9a:7a:a1:8b:56:dc:21:0d:c6:
39:23:74:09:a1:a0:01:6f:5e:da:46:d3:ed:fb:8b:70:71:c3:
dc:de:1c:41:b3:3a:d6:d2:b2:d5:c9:e4:a6:97:e5:1d:41:19:
dd:47:35:ea:56:14:d2:4b:33:36:45:0f:e5:3e:a2:85:bd:2c:
f4:0a:af:ce:dd:f7:44:2b:6e:86:d8:ac:10:2b:e3:90:8a:71:
93:06:26:96:46:e1:32:b3:58:dd:9e:da:4c:90:8b:6a:e1:75:
18:01:05:bc:b2:47:54:e3:56:98:00:e5:55:8c:43:c1:45:b7:
f4:f5:cf:e7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
QTJDMTExMC8GA1UEBRMoMTU0REExMkIxMUI1NDA1QzUwQ0IwMTE5RTM2QThCRjNF
RDBEMjFCQzAeFw0yNjA2MjMwOTIwMzRaFw0yNjA2MzAwOTIwMzRaMBgxFjAUBgNV
BAMTDTZhM2E0ZmUyLTE5ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC75sJ1SHWC3x7TreGzwYCyK5/40mRbhgweVOSYqL+69ON0IdUUgAYPvNV27gLa
fmYV3ZzYwU+NO3iiHuOchyYnLO502N+cSh1K01abVNSLYZwa7y3DfH9aFSvJah35
uy4/vBWaQcYn4Bwg/hIkkgy2zcQK7xRAnTm9SqP8vpfFpW9TmPsRf2LpsOw7gKfh
VEOLZHiD32fxO7WT5YM6VJxRpJSB7VYbvjalWe8lS0xCS4vz6rIUto3giZgnG0J/
LY86kYmV4Kxwz86cFPj73dTD5u9jFxHqzX2bWJlAILXrVLHs/tE7xoBvzWWADP5N
d7q8zpl56gxdS3hMV6QaZhI5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZG+cUzU4
77pkK+d42ZnDJVKGLlcwHwYDVR0jBBgwFoAUFU2hKxG1QFxQywEZ42qL8+0NIbww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBMkMxLzE4OUNEOTY0NTdE
NjExRjFCQ0QwNzBDQ0NDODMzNzczL0ZVMmhLeEcxUUZ4UXl3RVo0MnFMOC0wTkli
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRlUyaEt4RzFRRnhReXdFWjQycUw4LTBOSWJ3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB
MkMxLzE4OUNEOTY0NTdENjExRjFCQ0QwNzBDQ0NDODMzNzczL0ZVMmhLeEcxUUZ4
UXl3RVo0MnFMOC0wTklidy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCl97bRSO9QXL9UZ/BMknE0MDVMkIrP9f2RXAnQnu+2dZ+KaJ61wapCJJsXkLbS
9tN2vKv4Nd3fHrgZippYUgqV8u3g5n7ksRfIL1IpNjrlom6/UnUOcXKrDF8TEDfD
4GX/vhQ7N75lv6XCzk4CHDQyM1qyIy+jgh01F3TwFKbAFEQi3gB3oZ6aeqGLVtwh
DcY5I3QJoaABb17aRtPt+4twccPc3hxBszrW0rLVyeSml+UdQRndRzXqVhTSSzM2
RQ/lPqKFvSz0Cq/O3fdEK26G2KwQK+OQinGTBiaWRuEys1jdntpMkItq4XUYAQW8
skdU41aYAOVVjEPBRbf09c/n
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:10:42 2026 by rpki-client