
$ rpki-client -vvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
File: fBoPSOpDIx-jND1ZKCHvKejSsxs.mft (raw, json)
Hash identifier: u4avSjk//FzK5T71Re6ogBnd3vWbYnAGDb9jarKQfeI=
Subject key identifier: 2A:C3:FE:F1:DA:F0:32:E6:5E:4D:DA:EA:98:BC:71:FD:7E:9D:B9:36
Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B
Certificate issuer: /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B
Certificate serial: 1D41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
Manifest number: 1CE6
Signing time: Sun 12 Jul 2026 16:08:48 +0000
Manifest this update: Sun 12 Jul 2026 16:08:48 +0000
Manifest next update: Sun 19 Jul 2026 16:08:48 +0000
Files and hashes: 1: fBoPSOpDIx-jND1ZKCHvKejSsxs.crl (hash: tygkq2JHjD+mI9XaF3NSyWyL6JarKnIwz0h0DuMVt+k=)
2: 0754E1A6115411F19A223E75263D8C67.roa (hash: XkNkIGOcXYJKZ6BnuWlh6sl/eiNLJIsKVaWehkRd9Ok=)
3: AD3B2582EF9A11EDA4E50366C4F9AE02.roa (hash: YdIG+LX9/nSnlUWidUhwdiQq+gtN7y6hQuASQmVjG5Y=)
4: 398B3186FE5111E6BCEC6E72C4F9AE02.roa (hash: XTPwHAE+RSrJ2wVavnzJET8Caph7nR447oVW7w8/WgU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl
rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Jul 2026 16:08:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7489 (0x1d41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91798AD, serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B
Validity
Not Before: Jul 12 16:08:48 2026 GMT
Not After : Jul 19 16:08:48 2026 GMT
Subject: CN=6a53bc10-4ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6a:f4:cc:11:eb:69:fc:4e:56:81:06:90:bd:
95:06:14:5e:55:63:1f:61:be:29:bf:a7:7d:9b:96:
95:94:1a:fb:5b:c5:a8:0f:65:ea:c1:ce:4d:f4:21:
ed:a6:e6:e8:f4:7c:d0:d5:40:48:e2:8d:1e:1a:d7:
9e:34:bd:fe:73:90:15:55:df:85:0d:07:ba:2a:88:
36:3e:a3:f2:1f:69:47:96:ea:80:00:00:ca:cc:dd:
d7:34:c4:ee:23:15:2f:09:c0:bf:7b:c5:f2:6d:38:
aa:e9:0e:07:24:94:9a:d6:a1:e1:b7:6e:85:f5:75:
fa:b1:58:f5:0e:c6:2c:11:b4:8a:98:86:64:a8:35:
c2:5d:65:fc:55:0a:a9:5b:77:05:01:64:8b:a3:95:
d5:37:ed:d9:45:2e:c5:33:21:e7:cf:37:a4:ce:e2:
75:d1:61:e6:35:eb:7f:50:94:e8:9f:4a:48:84:84:
2c:8c:27:5d:c8:ca:78:4b:01:9a:db:d8:ee:47:7b:
e7:34:d4:35:79:38:67:b0:72:28:a8:e1:67:ef:19:
17:4d:29:7f:a3:0b:eb:d1:3b:4f:f9:1e:ca:c9:76:
53:39:fe:08:a6:43:c5:c3:14:6b:88:8f:84:fe:fc:
3c:b8:ce:11:15:8e:46:e2:de:0d:b9:d0:cb:ec:9f:
14:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C3:FE:F1:DA:F0:32:E6:5E:4D:DA:EA:98:BC:71:FD:7E:9D:B9:36
X509v3 Authority Key Identifier:
keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:ed:03:06:29:0a:1b:2c:56:26:9f:b2:c7:2f:91:47:90:a4:
87:71:75:e7:26:32:5f:3e:02:09:e2:02:49:63:85:64:da:94:
37:da:f4:45:f7:40:99:24:35:29:51:cc:96:ee:81:9c:6b:89:
68:7f:f7:6a:22:80:e2:3b:65:da:55:91:3c:c3:54:06:a1:5b:
7d:31:6d:84:2a:07:ee:83:47:8f:2b:be:0a:14:33:a2:3a:0c:
fc:44:b3:bb:0a:3f:ac:75:87:da:b8:61:1e:5a:75:16:25:e2:
b8:c7:0f:d6:31:7f:3d:e3:a9:9d:dd:07:6e:16:62:f1:46:9b:
0e:f8:74:5c:ce:af:32:0a:ba:7a:d6:03:df:ed:33:6e:dd:36:
c1:12:53:0e:7d:86:17:3b:de:ed:8c:6e:b8:02:d4:63:ba:fb:
a9:9e:ab:52:5c:24:98:a9:68:2a:0b:40:dd:9e:86:b1:f1:be:
9a:f3:52:1a:b0:58:0c:2e:a2:8a:51:57:e2:1f:29:03:ba:4c:
53:05:5b:cb:a8:81:3d:4f:e7:36:00:10:3f:33:f5:31:d1:15:
0d:e0:35:45:90:1c:03:49:ea:1b:47:40:cb:a3:e2:cf:8f:10:
9d:f8:58:64:5f:eb:53:3f:8d:c2:66:28:d0:01:fb:bc:66:65:
68:1a:8a:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzk4QUQxMTAvBgNVBAUTKDdDMUEwRjQ4RUE0MzIzMUZBMzM0M0Q1OTI4MjFFRjI5
RThEMkIzMUIwHhcNMjYwNzEyMTYwODQ4WhcNMjYwNzE5MTYwODQ4WjAYMRYwFAYD
VQQDEw02YTUzYmMxMC00Y2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzGr0zBHrafxOVoEGkL2VBhReVWMfYb4pv6d9m5aVlBr7W8WoD2Xqwc5N9CHt
pubo9HzQ1UBI4o0eGteeNL3+c5AVVd+FDQe6Kog2PqPyH2lHluqAAADKzN3XNMTu
IxUvCcC/e8XybTiq6Q4HJJSa1qHht26F9XX6sVj1DsYsEbSKmIZkqDXCXWX8VQqp
W3cFAWSLo5XVN+3ZRS7FMyHnzzekzuJ10WHmNet/UJTon0pIhIQsjCddyMp4SwGa
29juR3vnNNQ1eThnsHIoqOFn7xkXTSl/owvr0TtP+R7KyXZTOf4IpkPFwxRriI+E
/vw8uM4RFY5G4t4NudDL7J8USQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCrD/vHa
8DLmXk3a6pi8cf1+nbk2MB8GA1UdIwQYMBaAFHwaD0jqQyMfozQ9WSgh7yno0rMb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OThBRC83MEVGQjRBQ0ZF
MkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4LWpORDFaS0NIdktlalNz
eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZCb1BTT3BESXgtak5EMVpLQ0h2S2VqU3N4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OThBRC83MEVGQjRBQ0ZFMkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4
LWpORDFaS0NIdktlalNzeHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQO0DBikKGyxWJp+yxy+RR5Ckh3F15yYyXz4CCeICSWOFZNqUN9r0RfdAmSQ1
KVHMlu6BnGuJaH/3aiKA4jtl2lWRPMNUBqFbfTFthCoH7oNHjyu+ChQzojoM/ESz
uwo/rHWH2rhhHlp1FiXiuMcP1jF/PeOpnd0HbhZi8UabDvh0XM6vMgq6etYD3+0z
bt02wRJTDn2GFzve7YxuuALUY7r7qZ6rUlwkmKloKgtA3Z6GsfG+mvNSGrBYDC6i
ilFX4h8pA7pMUwVby6iBPU/nNgAQPzP1MdEVDeA1RZAcA0nqG0dAy6Piz48QnfhY
ZF/rUz+NwmYo0AH7vGZlaBqK8w==
-----END CERTIFICATE-----
Generated at Mon Jul 13 12:47:16 2026 by rpki-client