
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.mft
File: fqSkLLBXo92BKeSh4seYBQ_W1lc.mft (raw, json)
Hash identifier: 31YbYrFRJrXKgSpBG0b39vrCOCaS0oy3K/k2z6MJ63Q=
Subject key identifier: FD:76:B4:99:12:14:86:61:D3:63:BA:A8:B1:A8:A8:5C:F1:97:FF:CE
Authority key identifier: 7E:A4:A4:2C:B0:57:A3:DD:81:29:E4:A1:E2:C7:98:05:0F:D6:D6:57
Certificate issuer: /CN=A913C35A/serialNumber=7EA4A42CB057A3DD8129E4A1E2C798050FD6D657
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fqSkLLBXo92BKeSh4seYBQ_W1lc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.mft
Manifest number: 11
Signing time: Thu 21 May 2026 09:09:57 +0000
Manifest this update: Thu 21 May 2026 09:09:57 +0000
Manifest next update: Thu 28 May 2026 09:09:57 +0000
Files and hashes: 1: fqSkLLBXo92BKeSh4seYBQ_W1lc.crl (hash: i884iLrxzFii//R/8T9FjN9oORwKLt4zHN6rqznUgDM=)
2: 6F2747DE3DE511F19BE7396A9C833773.roa (hash: EIFF9n7nIw8O07orwFHUSOVHnVSTRstMZzTfvLGr7aA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.crl
rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fqSkLLBXo92BKeSh4seYBQ_W1lc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 09:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C35A, serialNumber=7EA4A42CB057A3DD8129E4A1E2C798050FD6D657
Validity
Not Before: May 21 09:09:57 2026 GMT
Not After : May 28 09:09:57 2026 GMT
Subject: CN=6a0ecbe5-6c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:17:b6:eb:c9:93:55:ef:fa:44:20:69:6d:c4:
1b:55:bf:b3:07:3d:f9:01:9a:84:b6:22:86:3b:1f:
64:a2:18:ea:64:11:8d:98:ce:77:ee:eb:85:29:a5:
89:f1:45:d0:f9:17:d4:1f:03:91:47:a7:10:28:99:
aa:27:77:39:b4:fd:f6:a0:41:c3:24:8d:41:c7:ff:
b4:53:a3:f9:bf:e2:91:76:d4:a7:f4:63:fa:0b:e9:
64:53:4b:be:25:b5:82:16:48:a3:a4:1f:8e:e1:0c:
52:9e:bd:3e:f9:14:c5:48:48:af:0a:9b:18:6f:29:
07:f1:27:74:34:f6:1b:78:13:01:d7:13:0c:14:0b:
80:71:d3:5f:8b:59:91:24:2d:51:62:a2:d7:13:91:
23:12:f1:76:a9:ed:57:32:f2:ad:d0:9a:17:24:94:
b9:28:68:80:35:cd:98:f2:56:1a:ca:45:6e:63:f6:
97:83:dd:52:24:85:cd:a8:83:92:d5:ec:05:40:fb:
c6:8a:e2:cc:1b:3c:1d:86:13:d0:81:56:8f:4f:c5:
25:52:70:09:f5:9d:b3:48:6f:3f:48:a8:82:d1:73:
e3:c8:bb:ef:12:c1:82:ee:7f:0e:38:63:9a:8e:97:
e3:e2:02:e0:d3:f2:b1:4e:41:88:6b:23:1e:7b:88:
6c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:76:B4:99:12:14:86:61:D3:63:BA:A8:B1:A8:A8:5C:F1:97:FF:CE
X509v3 Authority Key Identifier:
keyid:7E:A4:A4:2C:B0:57:A3:DD:81:29:E4:A1:E2:C7:98:05:0F:D6:D6:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fqSkLLBXo92BKeSh4seYBQ_W1lc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:44:a8:35:48:8a:f4:6d:25:82:54:24:c0:e5:5f:a9:06:b3:
c0:3a:ed:b5:fc:e3:43:19:e1:9f:78:07:ee:d4:15:3b:93:1e:
05:a5:c2:d8:79:0d:7e:d9:c0:52:cb:7e:e8:6e:26:fa:30:e9:
51:f5:51:15:c4:51:9b:d2:7e:bc:6d:c1:90:45:c3:81:ae:37:
c0:95:4a:94:31:94:4b:ac:76:6b:e5:be:33:a2:48:25:ec:ae:
02:c7:a4:9a:39:84:00:03:c0:a5:c9:1f:85:f0:90:73:bb:96:
ad:14:d1:5c:27:96:28:bc:6c:99:73:1e:35:11:18:8b:a8:64:
97:ee:dd:64:99:e0:90:ac:3e:94:4c:00:11:0e:fb:66:78:06:
12:ba:d0:72:53:95:6f:03:5f:66:36:14:a7:5c:bb:9f:5f:48:
3a:d3:ff:2d:fe:d1:a3:1a:90:7f:3b:cb:8f:b5:bd:b7:e0:64:
3c:92:a9:ef:bb:d9:32:e3:be:88:3b:e5:79:85:6c:42:8e:0b:
da:54:74:08:72:47:a8:e0:e2:d6:76:3f:ad:84:55:1e:c4:bd:
0c:a6:7f:7a:44:ec:08:b3:7d:74:92:09:fd:6d:44:e8:c5:b6:
1c:8b:a1:ae:a9:a2:84:67:09:46:78:12:8d:85:3b:f2:ef:7e:
c3:19:f1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 13:15:19 2026 by rpki-client