
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft
File: Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft (raw, json)
Hash identifier: NkDHk1OirelXvapXSZYWCuXYrftCrGwxWkjz6ammdcw=
Subject key identifier: D1:6A:12:E0:8E:3D:C9:60:A0:9A:AD:1A:ED:F8:E2:32:5F:E7:FD:C2
Authority key identifier: 15:FA:5F:E8:35:82:6A:BA:0C:8C:67:65:08:09:BD:C9:34:41:27:B0
Certificate issuer: /CN=A918D1BD/serialNumber=15FA5FE835826ABA0C8C67650809BDC9344127B0
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft
Manifest number: 56
Signing time: Wed 25 Mar 2026 07:19:49 +0000
Manifest this update: Wed 25 Mar 2026 07:19:49 +0000
Manifest next update: Wed 01 Apr 2026 07:19:49 +0000
Files and hashes: 1: Ffpf6DWCaroMjGdlCAm9yTRBJ7A.crl (hash: mUgsSRL7+pdgPD802NWa2A8RYs1SepNlMl5h3PCG7lA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.crl
rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D1BD, serialNumber=15FA5FE835826ABA0C8C67650809BDC9344127B0
Validity
Not Before: Mar 25 07:19:49 2026 GMT
Not After : Apr 1 07:19:49 2026 GMT
Subject: CN=69c38c95-1d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fe:3c:b2:b6:c4:55:79:5e:f4:8b:56:95:cb:
90:69:6c:e2:5d:2b:82:5d:bf:f7:6b:48:14:c4:97:
0a:fe:e9:30:24:22:54:16:6b:be:2d:62:96:fb:1a:
29:a7:1c:76:e0:d2:f7:23:6b:e2:a9:b6:45:52:fc:
97:97:65:84:35:23:cb:fa:95:fe:e4:7b:ea:b5:65:
15:88:45:22:e3:4b:71:fe:65:80:e9:48:1f:f5:4b:
a9:12:22:05:33:06:64:c0:e0:44:51:0a:49:01:44:
cc:22:d9:54:07:55:f6:1a:b8:7b:c7:93:98:78:49:
6c:ca:ef:42:07:2d:07:d6:ac:a1:68:8e:37:3a:4a:
12:0c:89:7d:b6:20:41:9f:9a:6b:c9:4c:36:01:c1:
37:dd:4d:c5:2e:1f:fd:57:74:e8:c3:71:26:94:12:
d3:fc:9d:3d:b4:6d:04:54:1e:b3:ff:86:13:9f:ee:
fc:b7:5a:5f:35:cb:85:70:00:e2:3a:b5:af:c4:d6:
24:91:49:a2:8f:06:f4:84:ea:ce:7d:4d:da:cf:b6:
a4:11:b9:eb:10:9a:01:ff:14:68:6f:c7:53:7f:2c:
d4:a0:e3:06:48:c1:d8:c4:4c:24:b3:31:8b:51:5f:
5c:aa:4c:17:dc:d7:2e:6c:7b:ad:41:0f:1c:f1:65:
40:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6A:12:E0:8E:3D:C9:60:A0:9A:AD:1A:ED:F8:E2:32:5F:E7:FD:C2
X509v3 Authority Key Identifier:
keyid:15:FA:5F:E8:35:82:6A:BA:0C:8C:67:65:08:09:BD:C9:34:41:27:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:29:7c:38:3f:13:45:be:50:47:c8:79:a6:15:66:2e:9b:ee:
8d:8f:a0:9d:20:f3:86:5b:51:98:9b:35:2b:3d:12:e2:ee:6f:
38:61:f0:98:61:dc:79:94:0e:77:87:34:06:6e:d8:f4:0a:1a:
ec:4f:05:8b:ed:a3:cf:f3:4f:2d:73:e0:92:d8:6c:1b:d2:71:
0f:b7:b2:4a:d6:81:a9:f2:1b:18:b2:c5:a3:7d:8d:ab:a0:4f:
ff:15:5e:f7:a8:7c:3e:78:77:cf:3b:18:e0:2b:2f:15:6b:d9:
d0:33:99:cc:9b:3b:e3:6b:ad:9e:ca:dc:41:fe:56:35:69:b5:
e9:96:a9:0c:d3:dd:17:ab:a6:9f:b6:2e:c0:37:60:ff:9f:fb:
39:56:f5:10:6b:b0:83:67:51:c6:99:ab:22:8d:44:46:29:89:
51:89:7a:fe:fa:06:1b:dc:da:c6:33:0c:a7:00:e0:39:2d:3e:
73:80:37:67:35:0b:02:8b:ff:cf:27:a8:ef:b9:f1:2b:8a:f1:
b0:cb:30:cd:7e:58:35:db:d7:c1:0b:be:c0:8c:aa:25:77:7b:
95:f0:9d:e7:f8:2d:90:12:14:ca:4b:fb:01:11:e6:16:f3:14:
f7:79:05:91:c0:1a:91:ed:c5:bb:b8:d8:60:a6:b3:3d:38:98:
b5:4a:85:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:21:39 2026 by rpki-client