
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
File: fHxDqtDIa183jl18MzKgXeRhJ1A.mft (raw, json)
Hash identifier: TaVUwfJ1UM9HaRFENIE/unq/sKlwcr+YbRHiMUOAtao=
Subject key identifier: 5E:90:1C:4C:FA:02:C4:BC:F9:60:80:D9:BB:3F:26:39:B2:DB:40:8F
Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50
Certificate issuer: /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
Certificate serial: 08C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
Manifest number: 087B
Signing time: Mon 04 May 2026 20:45:24 +0000
Manifest this update: Mon 04 May 2026 20:45:23 +0000
Manifest next update: Mon 11 May 2026 20:45:23 +0000
Files and hashes: 1: fHxDqtDIa183jl18MzKgXeRhJ1A.crl (hash: CdZlNNxGcJUYvi7b9y94uK8L5N/Df5gJM+svR5tuBac=)
2: E7EBC9003EE411ED905A3415C4F9AE02.roa (hash: N8OrGg15ZoxlIKz8paOj7jgooryKDtsZ+DLKkaeQezQ=)
3: 5035F194413211EDAAFCC96EC4F9AE02.roa (hash: kfnLo6TLNnxHzHz2hfx3dzeu6fOXlby4NhM/hMtaUog=)
4: E897EA5A3EE411ED905A3415C4F9AE02.roa (hash: MaFJmDPMqlk1C6MUJjdtLiNgPwGqra//weYceabgP/k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl
rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2246 (0x8c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CA50, serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
Validity
Not Before: May 4 20:45:23 2026 GMT
Not After : May 11 20:45:23 2026 GMT
Subject: CN=69f90564-e91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:85:3d:25:86:da:3b:f3:d6:c0:70:35:7f:6e:
ae:f7:fe:5c:4a:d0:a7:6b:59:4b:76:2e:a7:72:3b:
e5:cc:82:04:65:c8:f6:1a:52:9f:46:cb:a7:1a:b9:
5b:51:78:b9:d1:38:07:44:30:6a:92:65:b6:76:d6:
56:72:3d:68:70:9f:f6:b6:08:9c:32:f1:47:be:86:
84:47:b6:ae:a0:63:cb:1b:c3:cc:98:db:3b:61:9d:
e4:5b:cc:a9:f7:e7:1c:23:77:ee:3b:76:b9:aa:37:
6c:90:b4:c8:e8:33:55:d1:40:8b:f9:31:73:73:b1:
1c:c7:7d:ca:f3:d3:68:55:d1:c3:fa:38:c0:ba:4e:
e5:a2:85:a9:84:01:55:68:35:d6:46:97:68:a0:73:
ed:9a:02:78:df:eb:ab:bb:d9:2c:c6:b6:68:2d:c0:
8f:13:02:4a:e2:27:9b:04:79:ba:6c:b9:88:92:b0:
2a:8d:ce:4d:aa:f0:20:2b:b5:dc:ac:f6:d2:aa:f0:
df:bd:91:06:12:47:37:a0:89:ce:e3:b0:28:10:5c:
e5:2c:23:b2:7a:74:ce:23:26:41:00:ee:f5:41:f0:
f6:07:8e:2c:87:85:30:a8:c4:48:b1:56:32:64:0d:
aa:19:cc:e9:fc:8c:cb:3b:13:94:1d:d1:a6:84:7a:
69:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:90:1C:4C:FA:02:C4:BC:F9:60:80:D9:BB:3F:26:39:B2:DB:40:8F
X509v3 Authority Key Identifier:
keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:45:f7:c0:59:c2:ba:30:cd:5c:dc:7d:ff:5b:bb:08:0c:ca:
73:bd:bb:e9:61:7d:5e:26:6d:af:f2:b9:a8:31:2c:b4:a0:a5:
c2:c4:b4:98:0a:a2:30:1b:dd:bd:d9:4c:2e:12:6d:56:78:ea:
98:96:dc:ae:7f:11:1c:75:9f:f0:4a:d7:00:e0:9f:55:f2:79:
f9:ee:71:a4:a5:37:0e:da:c1:0f:2f:bf:0d:92:eb:5c:86:01:
7f:c6:17:2c:1e:ad:ea:f8:8d:aa:55:d5:27:23:56:13:34:c7:
b0:f0:01:a3:32:05:53:3c:31:41:0e:b3:f5:d2:93:22:7d:0d:
de:97:aa:69:e2:b7:29:b9:4e:b0:e4:ea:c6:21:80:70:18:8f:
af:f7:a1:56:09:bb:07:66:51:c0:86:e9:2c:cc:59:23:d1:a0:
7b:9d:05:57:90:8b:92:92:c0:51:71:cd:0e:1e:75:32:e8:e9:
35:63:96:c9:8b:a3:9f:3d:06:03:42:f7:69:f1:d4:a4:0d:4f:
97:8c:47:24:78:2f:38:46:f1:e4:29:6e:cc:f4:19:8c:bf:b9:
39:7b:ec:83:aa:61:a3:90:71:79:98:ac:74:a0:7d:03:7e:0b:
e1:3b:43:18:f1:b6:f6:9e:b1:65:23:12:ea:69:53:b9:53:68:
c4:ba:e8:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkNBNTAxMTAvBgNVBAUTKDdDN0M0M0FBRDBDODZCNUYzNzhFNUQ3QzMzMzJBMDVE
RTQ2MTI3NTAwHhcNMjYwNTA0MjA0NTIzWhcNMjYwNTExMjA0NTIzWjAYMRYwFAYD
VQQDEw02OWY5MDU2NC1lOTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjoU9JYbaO/PWwHA1f26u9/5cStCna1lLdi6ncjvlzIIEZcj2GlKfRsunGrlb
UXi50TgHRDBqkmW2dtZWcj1ocJ/2tgicMvFHvoaER7auoGPLG8PMmNs7YZ3kW8yp
9+ccI3fuO3a5qjdskLTI6DNV0UCL+TFzc7Ecx33K89NoVdHD+jjAuk7looWphAFV
aDXWRpdooHPtmgJ43+uru9ksxrZoLcCPEwJK4iebBHm6bLmIkrAqjc5NqvAgK7Xc
rPbSqvDfvZEGEkc3oInO47AoEFzlLCOyenTOIyZBAO71QfD2B44sh4UwqMRIsVYy
ZA2qGczp/IzLOxOUHdGmhHppPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF6QHEz6
AsS8+WCA2bs/Jjmy20CPMB8GA1UdIwQYMBaAFHx8Q6rQyGtfN45dfDMyoF3kYSdQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0E1MC8zODFDMTcxNkZC
QTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWExODNqbDE4TXpLZ1hlUmhK
MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZIeERxdERJYTE4M2psMThNektnWGVSaEoxQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Q0E1MC8zODFDMTcxNkZCQTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWEx
ODNqbDE4TXpLZ1hlUmhKMUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASUX3wFnCujDNXNx9/1u7CAzKc7276WF9XiZtr/K5qDEstKClwsS0mAqiMBvd
vdlMLhJtVnjqmJbcrn8RHHWf8ErXAOCfVfJ5+e5xpKU3DtrBDy+/DZLrXIYBf8YX
LB6t6viNqlXVJyNWEzTHsPABozIFUzwxQQ6z9dKTIn0N3peqaeK3KblOsOTqxiGA
cBiPr/ehVgm7B2ZRwIbpLMxZI9Gge50FV5CLkpLAUXHNDh51MujpNWOWyYujnz0G
A0L3afHUpA1Pl4xHJHgvOEbx5CluzPQZjL+5OXvsg6pho5BxeZisdKB9A34L4TtD
GPG29p6xZSMS6mlTuVNoxLroxg==
-----END CERTIFICATE-----
Generated at Wed May 6 03:27:51 2026 by rpki-client