
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
File: fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft (raw, json)
Hash identifier: Cq1d9Grn2gRhK17+p7pGj/0BPCxqkrcYL4vRd2n8zfs=
Subject key identifier: 8B:18:57:1C:24:EE:A9:CD:1A:90:0A:D6:21:3E:32:D5:51:40:A8:BD
Authority key identifier: 7F:06:7A:22:A4:A9:E0:96:FD:86:A6:BA:35:5A:59:24:90:67:D8:0C
Certificate issuer: /CN=A918CC02/serialNumber=7F067A22A4A9E096FD86A6BA355A59249067D80C
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
Manifest number: F6
Signing time: Wed 25 Mar 2026 05:34:02 +0000
Manifest this update: Wed 25 Mar 2026 05:34:02 +0000
Manifest next update: Wed 01 Apr 2026 05:34:02 +0000
Files and hashes: 1: fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl (hash: 3r5lw1fXmagtP5XCP4G5MFayKdvk+MhcHBXpyY/SEMI=)
2: AF9A0636B86B11EFA561215AC4F9AE02.roa (hash: YXgcQSkLUKZDwiDglhpy7R/9d2DcUAeT2Wp6iWZ+BWw=)
3: 34B9DBFAC5C011EF88F56A0AC4F9AE02.roa (hash: EbfBHidljZ2gLeTQHKxBHFBHeGxEqlyHSzXcfx3YSkU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl
rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CC02, serialNumber=7F067A22A4A9E096FD86A6BA355A59249067D80C
Validity
Not Before: Mar 25 05:34:02 2026 GMT
Not After : Apr 1 05:34:02 2026 GMT
Subject: CN=69c373ca-90cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cb:21:f3:13:48:4a:71:30:41:30:55:30:9c:
32:01:a8:88:01:2c:4f:20:a9:02:27:2f:13:72:d6:
7b:3f:47:62:1f:e3:b1:fa:80:e9:13:a6:31:61:43:
79:d3:20:87:a7:08:ad:81:a1:80:73:f1:18:d8:dc:
68:85:46:d5:fb:28:9f:d9:36:23:7f:82:19:16:9d:
57:7b:0f:99:c2:f4:41:70:6f:11:13:66:c5:76:fd:
c4:6b:a3:2b:09:6e:c0:91:5d:39:72:7b:ec:eb:c4:
2f:12:f1:4c:99:fe:71:2d:6a:dd:48:c1:73:79:1f:
ed:56:d3:52:3c:28:09:2e:86:b3:85:99:34:f8:3d:
4f:98:dd:d4:6e:23:13:7d:59:ef:59:84:9c:36:39:
16:13:df:b4:57:57:c2:e3:9d:7b:c7:2c:f6:03:59:
16:43:52:13:ac:36:9e:98:68:ad:cc:19:ff:f8:b4:
69:70:12:de:b8:37:4f:3e:81:9e:6d:ce:a8:ec:58:
2f:8b:ba:35:3b:89:73:d1:67:05:c4:77:8a:5b:5e:
e2:2b:02:4a:4e:24:65:3f:e9:23:8d:a6:ad:e2:04:
86:1d:e9:eb:10:18:0b:3b:e6:60:1c:dd:86:9f:10:
93:41:c8:86:63:c0:f0:66:d8:43:33:a8:3f:64:8c:
42:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:18:57:1C:24:EE:A9:CD:1A:90:0A:D6:21:3E:32:D5:51:40:A8:BD
X509v3 Authority Key Identifier:
keyid:7F:06:7A:22:A4:A9:E0:96:FD:86:A6:BA:35:5A:59:24:90:67:D8:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:a0:46:91:57:7c:dd:55:d0:e5:37:2a:f2:c5:f5:20:fc:1d:
0c:20:e0:cd:5d:0c:e4:9b:ce:a4:f5:09:13:45:7d:80:b1:06:
cb:c5:9b:4c:21:11:ac:b5:ca:d3:a9:77:15:55:f7:0e:c5:6b:
55:0d:c1:b8:46:99:80:c8:9a:3f:d6:a4:7b:e8:ff:82:1f:8c:
80:e9:d9:c1:83:16:60:26:48:61:c3:a6:0f:f9:b2:81:ef:b4:
81:1a:32:c7:25:a2:14:e9:7c:77:d7:48:61:53:f8:76:32:a3:
fe:09:38:c3:93:cf:45:26:0d:13:fc:6c:c7:8c:0d:f4:ce:40:
dc:8c:a0:f1:c7:12:66:f0:ff:dd:58:7d:0a:e0:84:55:0e:11:
06:75:f2:ab:69:5d:a1:7f:af:54:b6:d7:34:06:1a:a2:f9:a9:
16:52:cd:49:1c:98:3f:90:58:89:77:b4:fc:4e:e6:91:76:d1:
33:98:15:96:89:ab:fc:e9:3b:0e:ee:b6:4f:8e:9a:26:8d:aa:
03:b4:0f:24:f2:d3:65:71:52:47:9f:04:1b:b7:70:78:8e:08:
b0:b3:0d:ce:67:33:d5:7f:57:d8:b0:30:a6:27:82:a0:54:3c:
98:e5:b0:e8:33:2f:ee:5f:7e:63:0b:af:5e:e0:14:ed:cd:3c:
88:3c:75:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:26:37 2026 by rpki-client