
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
File: i_fikwz8buuRbnOQ-JPgEAupOzI.mft (raw, json)
Hash identifier: aoUGDxXor8/dpTpJGEn+Vo7HvJhZbk+IxFe0Nc+lCuA=
Subject key identifier: 85:78:68:9C:0C:A7:CB:57:B6:5B:30:42:F4:1E:CE:80:DE:60:8C:80
Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
Certificate serial: 0B03
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
Manifest number: 0AA1
Signing time: Tue 12 May 2026 19:39:36 +0000
Manifest this update: Tue 12 May 2026 19:39:36 +0000
Manifest next update: Tue 19 May 2026 19:39:36 +0000
Files and hashes: 1: i_fikwz8buuRbnOQ-JPgEAupOzI.crl (hash: JW6/TnfzvAOpPRbTIB8e2fGvkQ+mVttwtv+f4+k+NQs=)
2: B11136C4BA5411F0A7CF623BC4F9AE02.roa (hash: 4m56v9WrLnVPmGdujR4qOaBQSAGX0P92yEZf7PwBOyo=)
3: 493CABD04FEE11F0B866DF81C4F9AE02.roa (hash: CY0a3MF9Wjgtmqg8UPruXQ0gE6mWPrkTmn5P+V+20+A=)
4: C353D09A1D2711F1B40CC16C143D8C67.roa (hash: GLJtEpQzBfkgk+ZH6nE1USNscfvZG/ow27KNoqGuMd0=)
5: 4A68B404EF5A11EEB09CEA53C4F9AE02.roa (hash: BbXQvxTlfHdgvbDIHREA9MrezDGy2u1sVN3VMyfnT0A=)
6: 794C43721A5F11F080409056C4F9AE02.roa (hash: JEX9HiFKj1Gpxv9fRbvkSFLhbWXwWYo4/4O6MDucr+A=)
7: 3130A9B4681011EEB552C65BC4F9AE02.roa (hash: OsgY/uwTYM6NeEyONnxq3HN9YIKdpTvZdliw/rwuT+4=)
8: E27FAE42319211F1BB2A50F9AA833773.roa (hash: n4ymgft/vIrzros25RNWfTLBjrIB8vBBzJoiHlTiiAw=)
9: C654C6869F1C11EEB377E239C4F9AE02.roa (hash: D2Pz6MdJy5D25SqXQeyDzcUr+PAYz/53GJhpSfF/pT4=)
10: 44CA8E9C7A2811EFA43D2558C4F9AE02.roa (hash: W4HKH5UqI+VVI51zb7ltvtuOeFbUQvkwGVAq0zW7JgE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl
rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:39:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2819 (0xb03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
Validity
Not Before: May 12 19:39:36 2026 GMT
Not After : May 19 19:39:36 2026 GMT
Subject: CN=6a0381f8-2771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:49:18:5b:0e:35:7b:a2:bb:4c:d9:81:61:5e:
2e:b6:5f:c2:e4:51:7f:5c:52:53:fb:d7:71:f7:b4:
b5:b3:b9:6c:45:99:48:bc:21:a0:1a:50:fa:fb:fe:
9f:0b:66:6f:cb:44:6e:2c:cd:04:e7:83:b8:91:e6:
e2:5a:d5:35:e4:94:b9:e1:25:11:bd:e8:9e:24:a4:
90:47:f8:b2:76:56:94:9f:a8:77:10:c6:bb:32:c6:
36:5d:2e:88:01:4c:27:9e:6b:3c:8c:a0:0b:8a:c6:
a5:e0:c2:6a:36:e9:67:5d:38:20:0c:f5:a6:2d:f4:
fc:11:d3:64:1a:e3:c6:63:34:ef:2a:0c:06:51:ea:
d0:f1:b0:3f:fe:a2:27:0a:c7:15:df:8f:f7:5d:72:
11:2b:28:b3:50:7b:ad:1a:86:1d:e1:e0:e9:ec:dd:
49:80:d7:5c:7c:84:8a:0f:ff:64:b5:ef:13:55:6d:
b7:cc:9a:95:c6:94:75:d8:c1:8e:b7:36:20:84:cd:
10:94:ed:42:83:c8:83:bf:4d:4f:3c:ac:e8:b7:b7:
7b:5e:d1:ea:ef:7d:cd:b8:34:00:3f:eb:4d:18:a1:
7f:4a:a5:b5:35:14:fd:dc:95:7b:5c:9a:8c:25:70:
ed:69:b8:81:16:7f:71:79:d7:63:ae:3c:ea:32:a2:
03:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:78:68:9C:0C:A7:CB:57:B6:5B:30:42:F4:1E:CE:80:DE:60:8C:80
X509v3 Authority Key Identifier:
keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:4d:ea:41:7b:9d:ed:33:12:af:80:66:e1:42:d9:5a:a8:bd:
80:c0:2e:60:0b:d4:72:0f:7e:93:17:48:4f:2a:d8:3a:b0:22:
26:3f:b7:d5:d8:23:8c:2d:45:e6:b3:73:0c:8b:fd:17:1a:3c:
97:4b:f4:f9:e1:02:de:1a:7e:83:97:d7:f3:2a:ee:40:eb:aa:
32:4a:79:33:56:93:de:d3:56:fb:e2:7b:9e:5a:95:9b:ab:20:
ec:13:8f:30:01:a3:02:9d:18:a6:63:3e:83:8d:2e:44:31:d0:
d9:69:49:22:38:c7:69:aa:fe:dc:54:fd:ca:0a:7c:09:fc:1e:
88:9b:70:1d:4f:f5:d5:8c:b5:c1:ff:fe:f5:d1:26:84:0b:8a:
0f:5e:58:8b:90:f7:02:a2:8e:02:15:7d:2a:5c:b6:b8:82:e5:
c7:64:db:3d:e2:d0:be:81:85:d3:d7:14:7c:aa:57:7a:2e:8e:
d8:22:7f:32:66:5d:45:bd:bd:f0:50:fa:f8:96:da:38:41:12:
b4:aa:cb:22:1b:46:eb:ca:a5:e0:70:83:65:85:b8:9d:9d:48:
3b:e6:e4:e4:5b:62:e4:58:22:c6:e1:76:2d:1b:d7:ee:b9:a5:
e7:f3:bd:67:bd:44:11:39:68:54:3e:c1:85:a2:89:2f:0f:3f:
be:15:65:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:58:13 2026 by rpki-client