
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
File: i_fikwz8buuRbnOQ-JPgEAupOzI.mft (raw, json)
Hash identifier: lxEas1Ick3+NtyGmOc0CFbyQe3dIwZn+HJf+1Xu210A=
Subject key identifier: BF:FE:00:86:BE:43:49:C6:31:3A:65:DC:22:2A:95:68:86:46:B4:C2
Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
Certificate serial: 0B27
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
Manifest number: 0AC5
Signing time: Wed 22 Jul 2026 19:55:33 +0000
Manifest this update: Wed 22 Jul 2026 19:55:32 +0000
Manifest next update: Wed 29 Jul 2026 19:55:32 +0000
Files and hashes: 1: i_fikwz8buuRbnOQ-JPgEAupOzI.crl (hash: y6AOHE6LUL2NvvygOAIscv2aBloL5GjGrhVjBnUduSk=)
2: 493CABD04FEE11F0B866DF81C4F9AE02.roa (hash: CY0a3MF9Wjgtmqg8UPruXQ0gE6mWPrkTmn5P+V+20+A=)
3: B11136C4BA5411F0A7CF623BC4F9AE02.roa (hash: 4m56v9WrLnVPmGdujR4qOaBQSAGX0P92yEZf7PwBOyo=)
4: 3130A9B4681011EEB552C65BC4F9AE02.roa (hash: OsgY/uwTYM6NeEyONnxq3HN9YIKdpTvZdliw/rwuT+4=)
5: 4A68B404EF5A11EEB09CEA53C4F9AE02.roa (hash: BbXQvxTlfHdgvbDIHREA9MrezDGy2u1sVN3VMyfnT0A=)
6: 794C43721A5F11F080409056C4F9AE02.roa (hash: JEX9HiFKj1Gpxv9fRbvkSFLhbWXwWYo4/4O6MDucr+A=)
7: C353D09A1D2711F1B40CC16C143D8C67.roa (hash: GLJtEpQzBfkgk+ZH6nE1USNscfvZG/ow27KNoqGuMd0=)
8: 44CA8E9C7A2811EFA43D2558C4F9AE02.roa (hash: W4HKH5UqI+VVI51zb7ltvtuOeFbUQvkwGVAq0zW7JgE=)
9: E27FAE42319211F1BB2A50F9AA833773.roa (hash: n4ymgft/vIrzros25RNWfTLBjrIB8vBBzJoiHlTiiAw=)
10: C654C6869F1C11EEB377E239C4F9AE02.roa (hash: D2Pz6MdJy5D25SqXQeyDzcUr+PAYz/53GJhpSfF/pT4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl
rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:55:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2855 (0xb27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
Validity
Not Before: Jul 22 19:55:32 2026 GMT
Not After : Jul 29 19:55:32 2026 GMT
Subject: CN=6a612035-80ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:2d:ad:c4:21:ba:ba:c3:1f:0a:36:9b:33:
da:b8:1d:0f:52:21:0d:0e:db:c6:70:c8:f0:03:b5:
a6:7b:3e:fa:02:80:e1:bc:1e:c0:4c:89:e9:06:2a:
63:13:de:36:84:46:0d:11:40:42:50:fc:bc:e3:d8:
a5:0b:6f:00:fe:84:07:00:ae:3a:10:89:85:5b:40:
c6:2c:34:f4:e3:7c:4d:77:23:ac:fa:a0:76:4a:6f:
24:d6:b5:8c:1c:51:fe:31:2e:92:2a:19:4d:19:94:
87:fd:4c:df:c0:0c:59:9b:6c:58:b3:b0:22:ac:63:
0d:2e:c6:1d:f2:e0:1e:96:c8:b8:12:43:da:71:98:
7e:2f:85:7f:12:83:e5:f4:c3:7d:49:fc:0e:61:66:
06:ff:46:bf:36:69:3d:b1:b8:71:a7:11:1c:3e:7a:
9b:93:3e:7c:d1:eb:cf:4b:29:5b:21:48:6b:61:11:
7a:9a:48:0c:b9:37:72:5c:8a:ed:70:24:2d:21:96:
bb:d6:88:df:7b:1a:d5:59:0f:68:26:d8:a3:33:8c:
8b:7b:27:b6:d6:ae:00:d5:51:77:af:a2:b4:a9:66:
99:db:d4:e8:7d:a8:9e:dd:07:09:27:dc:ba:dd:bb:
c1:ed:35:82:7a:6e:c8:ba:fc:c4:29:f1:9c:c6:7a:
b1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FE:00:86:BE:43:49:C6:31:3A:65:DC:22:2A:95:68:86:46:B4:C2
X509v3 Authority Key Identifier:
keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:98:2f:44:ff:9b:8a:00:dc:91:fb:f5:75:dd:ff:0d:62:30:
14:0f:b6:ca:8b:e6:ec:f8:aa:9a:1b:a2:1f:07:f6:91:d3:3e:
fd:f6:6d:63:9d:6d:78:d7:46:8b:04:98:12:a4:bb:16:90:87:
48:eb:6f:c9:33:b9:51:a7:f7:e1:73:14:84:e1:29:c3:8d:43:
96:ca:b6:52:55:9f:41:c9:77:1a:c7:6a:85:8e:83:d4:36:93:
49:cb:dd:1f:d4:0f:05:50:a7:1b:ea:da:f4:ed:d5:76:3d:b6:
50:79:fb:8e:8f:51:65:d0:7d:84:ea:f1:b0:88:6a:bf:cf:a9:
43:a9:ab:33:7e:36:6e:ae:d5:b2:2a:2e:7d:2f:97:3c:f5:7a:
43:7d:ab:8d:e5:14:47:08:f0:5a:34:cd:59:ed:0b:09:66:a8:
4d:de:38:5d:19:c0:03:d5:76:34:13:bb:e3:ca:11:e8:16:32:
8c:3d:ce:7b:1a:ef:46:92:6d:4d:8e:81:d5:b4:f9:8a:11:bc:
22:5a:fd:3c:9f:47:97:ed:c5:40:51:cd:14:15:74:ec:4c:83:
c4:c4:30:9e:35:29:8a:ed:af:b4:b1:9f:24:aa:56:06:7f:52:
04:e9:63:94:bf:3b:0a:d0:06:c5:67:97:af:eb:94:1d:ab:16:
63:90:79:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:29:12 2026 by rpki-client