
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
File: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft (raw, json)
Hash identifier: AVECxoq/GXqvPXbYaqVvgnvOZ3EB+NBQ2xlLz82eSeA=
Subject key identifier: C9:BB:A3:12:B1:43:6A:74:AB:31:3C:26:78:6D:F7:D9:2B:B2:35:58
Authority key identifier: 15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59
Certificate issuer: /CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159
Certificate serial: 0274
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
Manifest number: 026C
Signing time: Fri 27 Mar 2026 01:37:48 +0000
Manifest this update: Fri 27 Mar 2026 01:37:47 +0000
Manifest next update: Fri 03 Apr 2026 01:37:47 +0000
Files and hashes: 1: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl (hash: rI25chkwXkQgaNU1MR436HiE5LyjQlhMsjXNV9mwRhY=)
2: F59959807A0511EDA112EF32C4F9AE02.roa (hash: rWEaU3X62dbPpbBeKKBVqa2rvAme+JAlDrUFb+kTgY8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl
rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 628 (0x274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B0C4, serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159
Validity
Not Before: Mar 27 01:37:47 2026 GMT
Not After : Apr 3 01:37:47 2026 GMT
Subject: CN=69c5df6c-e84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b6:35:38:aa:22:52:63:49:2e:5b:77:d7:eb:
de:8b:d5:a8:a7:7d:34:c0:30:7b:19:04:aa:95:6d:
da:c6:0c:3e:10:e2:b9:78:5f:cc:52:c1:d8:d6:2e:
87:f7:14:97:18:61:35:0e:3d:06:f6:57:21:c8:d2:
6a:62:7b:4c:25:cf:20:ab:96:99:c8:3e:68:7e:d1:
78:95:ee:15:2f:db:d9:1a:a3:92:d9:37:3f:26:25:
5e:0d:82:79:c7:cd:96:67:c0:43:93:a8:e7:8f:55:
60:00:c0:7d:c8:bc:a3:8b:e2:81:70:85:80:cf:68:
86:a3:8d:20:28:da:d8:e4:ff:c7:ad:01:b5:7d:d3:
08:27:dc:6c:30:b6:47:97:53:b3:43:3a:cf:49:7c:
b4:b5:01:44:be:58:4c:f4:5f:25:fc:f7:2a:e8:89:
5b:92:0d:3d:ca:8b:5a:de:da:e9:1f:86:ef:e8:e6:
28:20:61:23:5f:a7:60:07:5e:86:43:eb:2c:9d:bc:
78:55:4e:72:14:ba:a7:a3:a0:79:8b:9f:2d:fc:6e:
5f:73:b4:33:ed:4a:ed:6e:ee:7c:af:d4:ea:81:91:
95:c3:cb:ce:93:47:53:c0:02:63:e3:85:31:7f:35:
3e:7b:1c:a3:ce:0f:03:ca:c0:74:0a:c4:2a:3a:57:
3d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BB:A3:12:B1:43:6A:74:AB:31:3C:26:78:6D:F7:D9:2B:B2:35:58
X509v3 Authority Key Identifier:
keyid:15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d1:d0:ee:67:c5:a1:2a:c4:b4:1e:21:d9:0f:68:41:fa:d8:
4d:15:4d:c0:cd:36:a8:4c:68:ba:0e:09:80:2e:b2:8a:37:84:
5f:3f:34:c8:8e:23:67:7f:31:9f:36:e1:55:29:9a:78:8f:25:
e5:41:28:1c:71:26:26:0a:cb:34:97:14:f0:2f:34:fa:cd:41:
ca:7e:80:c0:59:ef:d3:34:48:d7:40:23:4a:f7:17:47:c7:62:
fb:35:cf:1d:cf:b3:91:36:f3:d6:f6:d0:39:77:fa:61:b9:95:
7a:95:5a:f8:d6:fc:29:fd:f1:f3:26:1c:c9:d6:26:90:42:47:
cb:94:bf:cd:c2:00:1f:c9:02:fc:cf:e5:02:5e:da:19:5c:81:
f5:7e:f4:de:86:40:2c:c1:66:67:1c:43:92:60:76:2e:01:6a:
69:a3:f5:e6:44:0c:9e:9c:f5:46:c3:0d:a3:d5:40:f7:de:cb:
30:29:8e:54:46:f4:3c:30:58:9b:bc:b0:c7:26:1b:01:0b:46:
71:e1:1c:e3:23:69:20:d9:ab:56:10:48:59:91:7a:86:b4:ec:
4f:1f:29:54:25:4c:7e:40:e1:b0:6f:e8:0c:d3:12:66:b8:76:
f4:3b:cf:25:df:2a:08:d0:a4:3c:c7:56:2e:0d:da:fd:f8:20:
ee:9b:9d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:40 2026 by rpki-client