
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
File: FH6XVkOdnbcVYTSsePkcIzuTkqc.mft (raw, json)
Hash identifier: dOCKeNL7BN9wi2/nylefO6jiq3ZeCqZzonyUNWx1nco=
Subject key identifier: D6:21:40:79:4A:3C:21:57:4A:A7:14:4E:6C:FA:04:A1:A8:CE:29:66
Authority key identifier: 14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7
Certificate issuer: /CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7
Certificate serial: 0795
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
Manifest number: 0767
Signing time: Fri 02 Oct 2026 22:12:43 +0000
Manifest this update: Fri 02 Oct 2026 22:12:42 +0000
Manifest next update: Fri 09 Oct 2026 22:12:42 +0000
Files and hashes: 1: FH6XVkOdnbcVYTSsePkcIzuTkqc.crl (hash: td/g4yCJVyo8+7HNnKr5f5NqVGNqukgSUee5q5dz7gY=)
2: D4FD4D5237DE11EEA2885B71C4F9AE02.roa (hash: 5Azeat64UaJSRzDOM2P6Kkkb+THHbSMAWvM1sc789yk=)
3: 8A0E66D647FC11EE838F6160C4F9AE02.roa (hash: G3bEqsGPHDTNrrpeTJ909el+rTlfPgko1ln0WcNdDDs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl
rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 22:12:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1941 (0x795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CB2A, serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7
Validity
Not Before: Oct 2 22:12:42 2026 GMT
Not After : Oct 9 22:12:42 2026 GMT
Subject: CN=6ac02c5b-0be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:ac:44:c5:1b:21:95:da:24:68:fa:31:90:
61:9b:90:d4:8e:aa:20:74:d1:82:48:2a:31:e9:93:
f6:a3:ab:4d:f0:d1:25:6a:46:91:6f:28:f4:fc:8b:
6a:c7:96:51:16:10:aa:79:0b:fb:c5:c4:8f:37:be:
8c:6a:86:3c:59:d8:88:4e:d9:61:15:9d:51:90:31:
f1:86:d3:19:57:28:ea:28:c6:dc:6c:33:bc:89:7c:
84:fd:e0:b1:e4:f9:0e:b2:04:00:8f:03:92:43:39:
28:37:63:3c:b3:a0:44:9c:54:f9:40:46:c7:49:bf:
89:d1:46:15:24:ee:7b:89:d2:5b:ed:8c:bd:5f:38:
45:4c:d5:8b:d7:65:c8:83:d1:74:28:af:ec:9a:fb:
c8:01:03:e9:31:f1:85:5d:88:84:5e:d4:58:62:65:
d1:9e:4d:b6:89:5c:35:4b:3d:99:53:52:95:34:35:
b6:2c:ca:ca:e5:9e:09:86:56:18:57:32:7a:a3:fd:
c9:54:2a:e9:16:3b:34:47:70:56:85:86:ab:f1:9c:
df:12:ff:57:22:bd:ce:d6:01:3a:fb:88:62:d7:b6:
0c:68:8b:7a:bc:b6:46:64:1b:09:89:50:bb:1a:51:
8d:52:69:20:30:c2:81:d9:d4:bf:90:89:96:f1:2c:
20:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:21:40:79:4A:3C:21:57:4A:A7:14:4E:6C:FA:04:A1:A8:CE:29:66
X509v3 Authority Key Identifier:
keyid:14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:59:03:66:f7:50:e2:50:31:56:c8:8c:7c:c1:d8:ad:be:ef:
95:42:45:76:6e:6f:54:e7:a3:c4:45:1e:04:ae:2d:79:5a:83:
64:90:42:20:0f:4c:eb:df:50:ef:95:da:cb:ba:d5:b5:b8:08:
a4:55:5d:84:23:f9:34:85:85:44:d8:49:84:a2:30:c4:bc:7d:
10:23:10:6b:60:77:43:e4:db:2e:cf:d0:ea:9e:c7:d9:75:8f:
8b:1b:7c:da:e3:36:2e:6d:7a:5f:46:f7:98:7f:42:01:8e:79:
0b:fa:29:fe:00:e9:47:b0:73:5f:ed:d9:38:ab:2a:cc:38:29:
4d:a6:a4:04:76:c0:de:59:7b:4f:d8:8c:f0:1c:ed:7b:d6:ef:
6f:fe:a2:ca:a6:8b:e1:37:86:c1:bc:7a:88:f5:2e:c9:04:19:
5d:71:44:35:c7:b6:40:69:a7:24:80:70:d0:80:95:81:0f:f5:
93:cc:26:06:5e:06:6d:67:1e:bc:53:ec:c8:80:03:df:a0:0f:
41:08:68:c5:dc:ec:d7:99:f9:89:4c:78:6c:31:5c:5e:81:c1:
76:09:68:ee:59:41:b9:da:b4:7b:b1:3a:20:05:21:7e:7e:71:
6c:66:fd:48:4c:9a:a8:98:03:65:db:30:15:88:4a:84:c0:f5:
2e:08:e8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:21:01 2026 by rpki-client