
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
File: i_fikwz8buuRbnOQ-JPgEAupOzI.mft (raw, json)
Hash identifier: ZHHpxVNsZZkVDq1dqrFD/7w6V7w8eCTJcjTVJQndq1w=
Subject key identifier: D4:E3:39:C4:B0:5E:03:63:2D:50:E2:F6:0F:6A:A5:F7:51:D8:BA:9C
Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
Certificate serial: 0B4F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
Manifest number: 0AED
Signing time: Thu 08 Oct 2026 19:35:03 +0000
Manifest this update: Thu 08 Oct 2026 19:35:03 +0000
Manifest next update: Thu 15 Oct 2026 19:35:03 +0000
Files and hashes: 1: i_fikwz8buuRbnOQ-JPgEAupOzI.crl (hash: bOkVuCFLGxlnBIlFGiKvJfR3ICH676Smgon6gApyQvo=)
2: C654C6869F1C11EEB377E239C4F9AE02.roa (hash: D2Pz6MdJy5D25SqXQeyDzcUr+PAYz/53GJhpSfF/pT4=)
3: 44CA8E9C7A2811EFA43D2558C4F9AE02.roa (hash: W4HKH5UqI+VVI51zb7ltvtuOeFbUQvkwGVAq0zW7JgE=)
4: 3130A9B4681011EEB552C65BC4F9AE02.roa (hash: OsgY/uwTYM6NeEyONnxq3HN9YIKdpTvZdliw/rwuT+4=)
5: E27FAE42319211F1BB2A50F9AA833773.roa (hash: n4ymgft/vIrzros25RNWfTLBjrIB8vBBzJoiHlTiiAw=)
6: B11136C4BA5411F0A7CF623BC4F9AE02.roa (hash: 4m56v9WrLnVPmGdujR4qOaBQSAGX0P92yEZf7PwBOyo=)
7: C353D09A1D2711F1B40CC16C143D8C67.roa (hash: GLJtEpQzBfkgk+ZH6nE1USNscfvZG/ow27KNoqGuMd0=)
8: 493CABD04FEE11F0B866DF81C4F9AE02.roa (hash: CY0a3MF9Wjgtmqg8UPruXQ0gE6mWPrkTmn5P+V+20+A=)
9: 4A68B404EF5A11EEB09CEA53C4F9AE02.roa (hash: BbXQvxTlfHdgvbDIHREA9MrezDGy2u1sVN3VMyfnT0A=)
10: 794C43721A5F11F080409056C4F9AE02.roa (hash: JEX9HiFKj1Gpxv9fRbvkSFLhbWXwWYo4/4O6MDucr+A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl
rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2895 (0xb4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
Validity
Not Before: Oct 8 19:35:03 2026 GMT
Not After : Oct 15 19:35:03 2026 GMT
Subject: CN=6ac7f067-fe65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:7c:14:b7:a7:29:27:3d:cd:63:66:3e:e9:
5d:05:19:48:c6:9d:e0:44:ff:40:9a:ef:c3:80:ce:
4c:14:39:3c:9f:31:22:8a:57:93:a2:ca:05:4b:b1:
81:f1:c5:13:1c:22:55:bf:d0:2f:0b:66:b9:ba:88:
ec:f8:f4:6a:25:66:f0:af:eb:84:7d:ac:cf:ad:a3:
42:a6:8b:94:3f:cd:61:16:44:7b:67:5c:10:71:b1:
19:ee:fe:a1:fa:81:67:be:d1:31:ff:0c:1f:ac:e0:
cf:74:4e:7d:9c:d5:42:59:9f:76:ed:64:5c:b9:72:
3d:16:73:09:21:03:7c:aa:dd:f6:c5:de:ce:4e:10:
20:cf:c2:90:e0:7f:3e:78:ec:ae:27:b6:ca:48:6d:
01:c3:c6:57:49:c2:a8:5f:63:ea:01:0c:b9:c5:de:
bd:12:81:bf:31:60:21:8a:de:64:88:bd:30:f3:c0:
b4:83:5c:15:d0:d2:85:5c:ff:7b:ca:5b:db:73:f6:
56:9f:6a:27:8f:74:85:02:46:47:f6:f7:02:e4:8a:
39:88:c0:5e:fc:41:db:24:c9:4b:a3:26:2c:5c:c9:
e1:ea:74:f7:a7:bc:82:8f:2f:c4:ca:79:77:d7:85:
bb:40:28:ea:c4:2b:28:a2:0b:f3:2a:65:9d:f2:d2:
ac:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E3:39:C4:B0:5E:03:63:2D:50:E2:F6:0F:6A:A5:F7:51:D8:BA:9C
X509v3 Authority Key Identifier:
keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:c6:e2:61:b5:aa:e5:64:d1:d1:25:b0:85:8c:f7:cf:d0:b9:
b2:42:45:d9:cd:fe:0b:2a:10:ea:ab:6a:de:83:ef:67:4a:b1:
16:73:33:46:8e:f9:33:83:73:9a:65:63:6d:d7:be:0f:9f:c9:
75:5d:c3:65:16:97:2b:d6:f3:67:91:a3:5b:58:41:d9:5d:60:
4b:5e:66:99:cb:d3:6a:60:bd:67:f1:0b:ec:24:7c:83:d0:fc:
26:34:fe:4c:4e:0a:29:1c:5a:83:1b:9e:77:30:76:c3:de:7d:
5b:80:c4:cf:28:a6:e0:68:cb:97:73:b1:db:cb:9c:25:29:b9:
6c:b1:a3:0a:6e:3b:65:e6:e1:a5:b2:8b:0c:9b:36:59:6d:4a:
6d:30:1a:e3:16:83:1d:b0:e9:f3:4a:ee:1b:e4:11:8a:57:6e:
d0:9a:81:24:9f:7d:97:d0:a1:b4:d3:c8:04:9e:a1:17:f3:e8:
c1:30:7d:58:39:1d:78:f6:35:61:87:0f:79:ab:97:c1:ae:59:
08:d3:b3:b6:89:8d:a3:28:84:7e:95:7d:10:70:da:c0:9f:a9:
8f:7e:a3:85:36:76:f3:b9:c1:dd:11:72:30:ec:b0:60:86:77:
db:9e:30:fc:bf:ec:2b:41:90:42:96:5d:09:b8:69:e3:1e:bf:
c7:08:bc:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEM2NjExMTAvBgNVBAUTKDhCRjdFMjkzMENGQzZFRUI5MTZFNzM5MEY4OTNFMDEw
MEJBOTNCMzIwHhcNMjYxMDA4MTkzNTAzWhcNMjYxMDE1MTkzNTAzWjAYMRYwFAYD
VQQDEw02YWM3ZjA2Ny1mZTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyI18FLenKSc9zWNmPuldBRlIxp3gRP9Amu/DgM5MFDk8nzEiileTosoFS7GB
8cUTHCJVv9AvC2a5uojs+PRqJWbwr+uEfazPraNCpouUP81hFkR7Z1wQcbEZ7v6h
+oFnvtEx/wwfrODPdE59nNVCWZ927WRcuXI9FnMJIQN8qt32xd7OThAgz8KQ4H8+
eOyuJ7bKSG0Bw8ZXScKoX2PqAQy5xd69EoG/MWAhit5kiL0w88C0g1wV0NKFXP97
ylvbc/ZWn2onj3SFAkZH9vcC5Io5iMBe/EHbJMlLoyYsXMnh6nT3p7yCjy/Eynl3
14W7QCjqxCsoogvzKmWd8tKsRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNTjOcSw
XgNjLVDi9g9qpfdR2LqcMB8GA1UdIwQYMBaAFIv34pMM/G7rkW5zkPiT4BALqTsy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wNEFBQjI5RTgz
NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1dVJibk9RLUpQZ0VBdXBP
ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lfZmlrd3o4YnV1UmJuT1EtSlBnRUF1cE96SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QzY2MS8wNEFBQjI5RTgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1
dVJibk9RLUpQZ0VBdXBPekkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZsbiYbWq5WTR0SWwhYz3z9C5skJF2c3+CyoQ6qtq3oPvZ0qxFnMzRo75M4Nz
mmVjbde+D5/JdV3DZRaXK9bzZ5GjW1hB2V1gS15mmcvTamC9Z/EL7CR8g9D8JjT+
TE4KKRxagxuedzB2w959W4DEzyim4GjLl3Ox28ucJSm5bLGjCm47ZebhpbKLDJs2
WW1KbTAa4xaDHbDp80ruG+QRildu0JqBJJ99l9ChtNPIBJ6hF/PowTB9WDkdePY1
YYcPeauXwa5ZCNOztomNoyiEfpV9EHDawJ+pj36jhTZ287nB3RFyMOywYIZ3254w
/L/sK0GQQpZdCbhp4x6/xwi81w==
-----END CERTIFICATE-----
Generated at Fri Oct 9 04:38:15 2026 by rpki-client