
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
File: -ffptMwx85XFzbj6yfUvyldSTeE.mft (raw, json)
Hash identifier: LKBEcw9Rp1urPcH4oOJBbMqzhw1C7neJ31Rt/AxqBQY=
Subject key identifier: 1E:89:59:FC:B9:D3:EA:EA:F0:A2:CB:82:A6:A2:64:36:84:5E:77:40
Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
Certificate issuer: /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Certificate serial: 0384
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
Manifest number: 0360
Signing time: Mon 11 May 2026 01:04:02 +0000
Manifest this update: Mon 11 May 2026 01:04:01 +0000
Manifest next update: Mon 18 May 2026 01:04:01 +0000
Files and hashes: 1: -ffptMwx85XFzbj6yfUvyldSTeE.crl (hash: 11CZn/LxolZc5o16Bsao5XlDiGBzORk5Q447AsX4ovY=)
2: 9770D05EBC4211F0B94CE580C4F9AE02.roa (hash: EKVGFJ/g32vu6i1eB7NEFOf+Zsly8ubAP4iYudVd5gM=)
3: 14A16ED4F0C011EFB89A0131C4F9AE02.roa (hash: JiCW8fyrxd1H5hhanenqtI3Q+to3q8hEENBSB39tRpc=)
4: 0EDE44B2797511EF9F3FEC4CC4F9AE02.roa (hash: X52OCC/lE3b4nsh0tIE1/ie7TTPJC9iTuuS5fQwz44I=)
5: A38DD8D40E1111F1B60944950A3D8C67.roa (hash: 8xomlP6u/pFuCS+4ZI0VqTn0cJ1Ypm6zhDkBB6EqaYQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 01:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 900 (0x384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Validity
Not Before: May 11 01:04:01 2026 GMT
Not After : May 18 01:04:01 2026 GMT
Subject: CN=6a012b01-54e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:65:58:55:11:93:24:c6:94:1e:f5:96:ff:aa:
54:57:99:83:ac:6c:43:88:2d:94:2a:a1:f8:25:86:
7a:5e:fd:06:71:d7:7e:b7:a2:8e:5e:bb:7d:6f:14:
fc:ce:07:1d:83:be:61:4f:2e:3d:37:83:a4:b0:96:
12:47:b6:9f:bc:e0:1d:b5:d5:8c:80:b3:9e:5f:bd:
0f:44:ec:68:35:86:be:da:c1:2b:ac:50:65:9c:37:
fe:24:ac:63:8f:bd:8f:53:22:4f:f8:2e:72:65:69:
3a:8a:9d:d3:90:bc:2a:55:0c:8a:f0:3a:dc:55:68:
bf:c4:31:18:99:25:7b:da:74:fc:2e:bb:1b:06:72:
3a:8f:d3:a8:e9:3b:89:9e:b5:e4:50:49:27:50:40:
9d:5d:c3:b1:f7:2d:09:e0:7f:c8:0b:c6:cb:c7:41:
62:98:23:b5:d1:b5:5e:cb:c1:9d:76:17:c0:ef:47:
b0:75:24:c8:be:39:8b:f9:c8:a0:a3:f4:62:bb:ff:
56:87:9d:5d:c2:71:49:a1:0c:2f:65:71:62:a5:e7:
f3:a8:07:d5:cb:5b:f7:4e:85:f0:02:59:c0:eb:7a:
89:45:8d:ca:a1:7f:bf:18:a1:5f:e9:c1:df:35:ff:
8e:7f:0b:46:4c:ee:5d:d5:bb:3e:49:3b:62:0c:ff:
ba:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:89:59:FC:B9:D3:EA:EA:F0:A2:CB:82:A6:A2:64:36:84:5E:77:40
X509v3 Authority Key Identifier:
keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:ab:23:5f:9a:dc:02:f5:9e:d8:e8:71:89:00:a7:83:9b:7d:
82:65:30:85:4e:ca:90:65:ff:9e:9e:bd:32:be:8f:8a:f4:58:
b0:d9:ce:35:2d:b6:e5:ee:d1:85:48:6c:76:6b:ac:d7:f7:63:
ca:6c:9f:7f:5a:d9:3d:3f:f4:13:ef:1c:31:c1:cf:a2:4b:46:
f1:d6:b0:16:a8:4f:5f:89:ed:60:fe:82:40:0e:0d:f8:40:00:
66:5b:74:7f:30:f1:0d:44:97:09:14:82:ed:0b:41:05:0e:fd:
dc:c4:22:f9:4b:42:0c:c3:ad:3c:12:69:2f:00:1a:ba:32:6b:
e0:0f:e0:22:00:0e:d2:a7:16:c4:29:2e:fc:96:15:b3:a8:5d:
89:28:7e:b0:ba:18:11:94:42:80:93:fb:e8:76:85:4f:0a:6d:
ee:e6:73:6e:a1:75:47:5b:f2:8e:48:3d:cf:86:13:75:4d:f2:
cc:8a:83:fc:4d:72:34:52:f0:69:a9:84:f0:a9:39:10:94:ca:
f0:07:42:f4:d8:5e:84:d1:c4:0a:da:0b:3f:1f:f7:11:05:ba:
98:55:80:b9:51:9f:86:dd:68:27:9c:bf:b0:df:5d:7b:ac:3b:
b8:c1:a1:49:07:d8:25:55:b2:1e:c0:48:40:59:2f:75:d9:1c:
c8:a9:56:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkRGRkExMTAvBgNVBAUTKEY5RjdFOUI0Q0MzMUYzOTVDNUNEQjhGQUM5RjUyRkNB
NTc1MjRERTEwHhcNMjYwNTExMDEwNDAxWhcNMjYwNTE4MDEwNDAxWjAYMRYwFAYD
VQQDEw02YTAxMmIwMS01NGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3GVYVRGTJMaUHvWW/6pUV5mDrGxDiC2UKqH4JYZ6Xv0Gcdd+t6KOXrt9bxT8
zgcdg75hTy49N4OksJYSR7afvOAdtdWMgLOeX70PROxoNYa+2sErrFBlnDf+JKxj
j72PUyJP+C5yZWk6ip3TkLwqVQyK8DrcVWi/xDEYmSV72nT8LrsbBnI6j9Oo6TuJ
nrXkUEknUECdXcOx9y0J4H/IC8bLx0FimCO10bVey8GddhfA70ewdSTIvjmL+cig
o/Riu/9Wh51dwnFJoQwvZXFipefzqAfVy1v3ToXwAlnA63qJRY3KoX+/GKFf6cHf
Nf+OfwtGTO5d1bs+STtiDP+6ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB6JWfy5
0+rq8KLLgqaiZDaEXndAMB8GA1UdIwQYMBaAFPn36bTMMfOVxc24+sn1L8pXUk3h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREZGQS9DRTgxQTUxNDAz
MkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1WEZ6Ymo2eWZVdnlsZFNU
ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1mZnB0TXd4ODVYRnpiajZ5ZlV2eWxkU1RlRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
REZGQS9DRTgxQTUxNDAzMkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1
WEZ6Ymo2eWZVdnlsZFNUZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYasjX5rcAvWe2OhxiQCng5t9gmUwhU7KkGX/np69Mr6PivRYsNnONS225e7R
hUhsdmus1/djymyff1rZPT/0E+8cMcHPoktG8dawFqhPX4ntYP6CQA4N+EAAZlt0
fzDxDUSXCRSC7QtBBQ793MQi+UtCDMOtPBJpLwAaujJr4A/gIgAO0qcWxCku/JYV
s6hdiSh+sLoYEZRCgJP76HaFTwpt7uZzbqF1R1vyjkg9z4YTdU3yzIqD/E1yNFLw
aamE8Kk5EJTK8AdC9NhehNHECtoLPx/3EQW6mFWAuVGfht1oJ5y/sN9de6w7uMGh
SQfYJVWyHsBIQFkvddkcyKlWzQ==
-----END CERTIFICATE-----
Generated at Wed May 13 03:39:25 2026 by rpki-client