
$ rpki-client -vvf rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
File: FX3bMj02U1BOMIJOaeDbA3U6aM4.mft (raw, json)
Hash identifier: NSVBXeFm50+LOLdDFPy+p6L0z7Jx7LzEZrOCD4b5xfY=
Subject key identifier: C9:6D:E4:3F:BA:3F:38:1B:0D:7A:01:2F:7C:6C:C7:71:73:7B:7F:00
Authority key identifier: 15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE
Certificate issuer: /CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE
Certificate serial: 0220
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
Manifest number: 021A
Signing time: Wed 19 Aug 2026 03:28:59 +0000
Manifest this update: Wed 19 Aug 2026 03:28:58 +0000
Manifest next update: Wed 26 Aug 2026 03:28:58 +0000
Files and hashes: 1: FX3bMj02U1BOMIJOaeDbA3U6aM4.crl (hash: jDtd49Ak3p9efO9/MPe3U9LLkL/nQyj5Hi7Bsu2ze/w=)
2: 93151D5668F911EE9916D146C4F9AE02.roa (hash: ClVPuLcuGILWLEy5bL0EVXdV3J/UJlUtzA64dR9iTrc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl
rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:28:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91480B2, serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE
Validity
Not Before: Aug 19 03:28:58 2026 GMT
Not After : Aug 26 03:28:58 2026 GMT
Subject: CN=6a8522fb-3594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:a2:ec:7b:7c:4c:bd:8f:26:6d:59:1a:27:
19:ac:e8:3e:7f:c7:2a:6d:59:56:7b:7b:40:10:4d:
58:94:f9:1d:f3:51:82:fc:0a:c5:9e:44:79:fe:71:
26:42:87:a0:00:9c:d8:d9:1f:6a:e6:bf:9b:ec:15:
66:7f:35:e4:31:7f:d1:a9:19:ea:3a:45:4e:85:1a:
31:c1:55:3b:1a:14:08:e4:13:0d:40:34:9f:04:45:
99:4c:e9:09:c0:21:57:a8:c8:3a:63:30:24:43:39:
0f:fc:8a:b4:6b:b9:63:cf:59:73:3d:6a:84:18:11:
b1:5b:c3:66:42:fa:5b:18:29:c4:bf:4a:ee:cd:a2:
96:6b:a5:ea:80:96:f3:e8:b7:de:05:7d:bc:6b:24:
05:7b:21:af:0c:62:1e:08:6d:e7:5f:c1:6d:69:80:
77:4d:2b:fb:ae:c7:24:75:e7:2e:40:3c:0d:4b:e1:
d1:36:6e:41:6c:41:72:14:d8:2f:f1:06:90:b8:f5:
5f:70:bc:9e:03:4d:18:11:7b:4c:24:aa:51:d7:8b:
84:e7:55:e6:fa:f4:77:db:d3:cf:a3:f9:bf:b1:7d:
3e:82:99:e5:96:00:1f:64:23:f5:65:98:64:9f:8f:
79:24:36:7c:5c:f9:02:5b:2b:8e:69:93:00:38:b5:
67:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6D:E4:3F:BA:3F:38:1B:0D:7A:01:2F:7C:6C:C7:71:73:7B:7F:00
X509v3 Authority Key Identifier:
keyid:15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:23:07:0d:a5:f4:09:5e:54:1c:32:dc:24:2d:b5:5c:4a:dc:
bc:b4:33:9f:31:ca:68:03:c9:b3:54:8f:c2:ad:77:c4:66:19:
64:a7:6f:c5:2b:94:be:49:ee:2d:98:12:4f:bd:95:74:b4:59:
47:66:85:ff:dc:8d:ff:42:d3:6b:75:53:a8:66:45:47:ed:df:
6d:06:d5:03:18:99:50:f1:88:ec:97:34:4f:1d:93:5f:4e:5c:
b2:1b:a8:1e:ab:4d:26:d3:24:e0:a5:45:67:fd:84:5c:2b:56:
cc:b2:32:3b:48:93:54:8b:64:5e:3f:4d:34:8e:f2:d5:f5:77:
8c:b1:9a:55:79:97:13:06:7c:be:c6:35:84:4a:96:77:18:1a:
2b:6d:13:c7:94:4a:31:fa:ea:7a:86:4b:d3:86:97:14:87:4f:
c6:42:83:e4:b5:65:26:83:37:e0:92:62:d3:98:ff:51:c3:ae:
4f:7a:b3:b5:7f:93:7f:aa:2a:c1:92:e3:67:a9:48:96:3d:ea:
e1:d7:6b:d0:72:b9:b0:2b:f7:a7:45:98:84:08:d9:6d:9c:03:
a3:a4:ea:31:f8:99:91:76:ed:18:1f:fb:01:9c:03:91:c3:89:
8b:ad:1b:00:ff:57:fd:c9:5e:0f:f0:17:4d:fa:d4:34:37:53:
b3:22:0c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:01:20 2026 by rpki-client