
$ rpki-client -vvf rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
File: fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft (raw, json)
Hash identifier: BvH5MZGLRPBsd4ZULQka/twpTU85Fi7YXCwHfhlrHbI=
Subject key identifier: 78:25:BC:1D:8E:BC:84:38:85:54:83:A9:6D:2C:02:25:2B:8D:23:13
Authority key identifier: 7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D
Certificate issuer: /CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D
Certificate serial: 097F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
Manifest number: 096E
Signing time: Mon 06 Jul 2026 20:33:20 +0000
Manifest this update: Mon 06 Jul 2026 20:33:19 +0000
Manifest next update: Mon 13 Jul 2026 20:33:19 +0000
Files and hashes: 1: fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl (hash: q0TL3uGZW7ETftBWcnv5zFZ6hB+V8AINT/eTL5AUBfA=)
2: 10A6E062B70A11EDB851464EC4F9AE02.roa (hash: +2GMR/V9mZr0Ife9tGdydPkVcoSqLY2zhQZIUiI3Hq0=)
3: 38B92F54E17D11EDBCAFC081C4F9AE02.roa (hash: bPFO6I2wWIPENqB/X87e5uIatc/LQckX7tfxgiWc7ts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl
rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 20:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2431 (0x97f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918753F, serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D
Validity
Not Before: Jul 6 20:33:19 2026 GMT
Not After : Jul 13 20:33:19 2026 GMT
Subject: CN=6a4c1110-a10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:eb:c2:fd:a3:d5:ee:52:3b:1e:3c:78:ec:0b:
fb:a1:ab:10:f8:5c:42:ec:bc:06:03:dd:20:15:68:
5b:b8:f5:68:89:0d:bc:50:7c:55:45:2d:6e:c9:2e:
94:8d:70:f3:d1:50:9f:f7:81:b2:9d:c6:18:db:d7:
2c:bf:7d:81:4d:f3:5f:03:70:7f:21:b9:cc:05:f7:
73:2d:80:7a:f7:2f:7c:2e:75:3a:e3:b2:7a:b1:ec:
0f:05:ea:7b:bb:8b:46:ce:95:01:8c:7a:20:d2:da:
d0:b2:c8:d1:a2:11:b6:60:bf:21:e6:56:6b:1c:0b:
6d:93:ca:7a:62:06:53:44:41:b6:7a:e9:8a:90:56:
98:39:ff:30:4a:6c:60:a9:3c:5a:7e:34:76:71:23:
b4:af:a0:7c:fb:21:4a:59:f6:55:bf:0b:08:fb:e9:
e7:95:be:f3:ae:c2:bc:0f:f8:7a:60:eb:d2:42:02:
db:e5:87:82:29:73:72:46:55:25:e9:84:cb:40:43:
14:84:18:05:11:44:de:5e:cf:82:92:fd:11:3a:6d:
c7:06:55:b6:77:7c:73:fe:31:76:1f:70:29:ef:4e:
d9:d7:d9:a4:d8:c1:1c:66:22:52:d7:c7:43:de:cc:
9e:52:ec:5d:fc:78:68:94:4e:9b:09:9c:9a:32:a4:
44:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:25:BC:1D:8E:BC:84:38:85:54:83:A9:6D:2C:02:25:2B:8D:23:13
X509v3 Authority Key Identifier:
keyid:7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d4:64:92:c2:3e:d6:d3:1d:39:75:49:c6:f5:54:cf:80:ca:
dd:d0:09:dc:8d:18:20:5c:59:e0:01:45:25:27:37:c1:42:d9:
f1:fa:17:a2:5c:6e:8d:f3:63:17:03:d0:33:8d:ef:bf:14:3b:
cf:80:7f:12:26:15:d8:c9:17:ce:b5:93:b1:21:02:d3:2e:92:
8a:5c:56:e3:c9:e0:f4:f9:d7:f2:9e:76:d9:49:17:f6:ee:5e:
4a:55:36:34:8a:dd:09:db:c5:75:f9:6d:73:3b:57:7b:7b:72:
c3:73:13:dc:58:a8:c9:99:d2:60:1f:ce:f8:3b:0d:86:f8:95:
61:36:7a:d0:f5:0a:53:9f:87:3e:ab:cd:e9:14:d4:f0:aa:96:
7e:19:27:21:56:d2:bc:b7:af:bc:16:76:63:85:42:1c:71:be:
a9:c0:70:f4:34:cc:ac:09:a2:79:bf:04:34:89:2b:2b:a9:da:
bb:25:2a:85:f1:22:06:df:17:1a:79:28:6c:7c:ea:95:52:1a:
0b:31:6c:d9:64:6e:b7:dd:d7:4c:31:0e:a1:56:61:97:f1:10:
24:2e:00:e4:5f:f8:91:6f:f4:0d:83:0d:1d:22:ac:26:c9:d2:
7b:c9:a2:eb:4c:b4:34:be:0c:c8:f2:c6:87:19:73:ab:ab:c3:
8e:48:9a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:41:56 2026 by rpki-client