
$ rpki-client -vvf rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.mft
File: ffgmqR46CHq9KaYomhI7qR8RMF8.mft (raw, json)
Hash identifier: MBm3qQgCeu1XvM+uu9187kqSoa7e9YRVU+5cvyemfYY=
Subject key identifier: AF:E6:DF:D5:6B:0C:8C:61:65:16:D3:FD:B3:0F:DF:D0:A9:2C:92:9C
Authority key identifier: 7D:F8:26:A9:1E:3A:08:7A:BD:29:A6:28:9A:12:3B:A9:1F:11:30:5F
Certificate issuer: /CN=A919542A/serialNumber=7DF826A91E3A087ABD29A6289A123BA91F11305F
Certificate serial: 69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ffgmqR46CHq9KaYomhI7qR8RMF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.mft
Manifest number: 66
Signing time: Wed 25 Mar 2026 07:10:43 +0000
Manifest this update: Wed 25 Mar 2026 07:10:43 +0000
Manifest next update: Wed 01 Apr 2026 07:10:43 +0000
Files and hashes: 1: ffgmqR46CHq9KaYomhI7qR8RMF8.crl (hash: ROBz/b2d0LYHmsXXlYhN1H+Yuce+wNWCSM5vuWpWsM8=)
2: FC15F5FA8EE511F0BFFDD274C4F9AE02.roa (hash: dNdji1Fr3jK6/jkHnFcVdkdFZjgcGqOwAU51jGRYmhM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.crl
rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ffgmqR46CHq9KaYomhI7qR8RMF8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919542A, serialNumber=7DF826A91E3A087ABD29A6289A123BA91F11305F
Validity
Not Before: Mar 25 07:10:43 2026 GMT
Not After : Apr 1 07:10:43 2026 GMT
Subject: CN=69c38a73-4d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9d:86:07:7a:a6:e6:8b:9a:77:27:aa:9c:87:
e6:3a:55:e6:eb:17:31:b4:3e:c7:62:ad:b7:8c:8d:
63:29:ef:eb:7a:25:1a:81:fc:c6:00:6d:0b:4a:b2:
37:ba:0d:15:b2:4e:4d:94:e5:7e:84:60:00:98:4b:
51:23:20:27:3b:c7:18:53:f0:7c:94:70:86:6c:b4:
03:a7:b1:22:58:35:b7:6a:51:6b:7d:da:e9:5c:9e:
2d:e8:3a:32:d7:21:f4:01:56:e9:b5:9e:b2:74:7b:
91:1b:06:2d:37:c4:17:2c:7f:37:9e:d2:50:a3:20:
27:34:f6:76:33:1d:43:e9:6d:76:af:92:ee:51:17:
8c:3f:c1:ee:75:88:2f:db:50:6a:aa:7f:17:07:e9:
e1:7a:3c:c1:61:c3:cc:dd:b4:5f:0c:c0:fa:a9:4b:
87:35:d2:71:ae:a0:e0:9c:dc:7d:1d:a4:08:46:08:
f0:21:2f:e8:99:38:5b:b3:90:27:90:8a:bc:a4:b0:
4a:3f:62:20:00:66:08:f7:21:a1:d5:f5:4d:4d:61:
23:dc:25:9c:0d:37:19:6d:d3:e4:b5:7e:5a:93:1a:
f9:8e:3f:39:6d:28:f3:9f:0f:53:50:7c:4a:b3:a0:
47:c3:d5:98:c3:c9:ba:fd:61:f4:9c:e0:55:db:8b:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E6:DF:D5:6B:0C:8C:61:65:16:D3:FD:B3:0F:DF:D0:A9:2C:92:9C
X509v3 Authority Key Identifier:
keyid:7D:F8:26:A9:1E:3A:08:7A:BD:29:A6:28:9A:12:3B:A9:1F:11:30:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ffgmqR46CHq9KaYomhI7qR8RMF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:4e:d1:56:d6:02:6e:1b:3b:87:48:af:62:af:02:84:7e:58:
9d:49:73:4c:bb:b9:36:cb:c7:d0:36:2f:0a:52:19:8f:30:f2:
f3:cf:d5:f6:dc:af:e8:83:c4:d7:81:89:77:f1:97:c7:1b:cf:
11:68:99:4f:42:f2:6e:7f:d8:46:ba:8c:7c:1d:9d:75:2d:b1:
2c:3a:17:e3:67:a1:8a:41:27:ce:36:05:11:68:a7:7d:aa:27:
c9:2c:29:9d:ee:3a:67:00:68:a8:cc:30:5f:56:32:bb:9e:21:
aa:b2:74:7e:c4:c6:d1:a0:00:6e:bb:2e:c3:bf:6c:19:99:72:
c1:2c:8c:57:c8:64:27:15:2e:18:7c:61:0a:24:e1:95:ca:76:
a3:25:6a:a5:e4:e0:54:b1:14:c2:cc:99:73:28:64:30:e9:a1:
8e:a2:f0:de:c4:ad:af:bd:b6:a1:4d:c7:87:9e:58:ef:8b:e3:
e3:62:05:95:33:9e:df:ff:ef:92:bf:4d:78:ce:b2:40:4f:0e:
87:f7:af:20:3a:99:20:ee:b7:7e:24:0d:22:dd:6c:78:ac:92:
13:26:49:7d:8f:ff:73:ed:2d:1d:65:66:80:13:6c:88:12:c6:
dc:60:7f:44:f1:94:ce:51:af:9b:8b:ef:72:d5:b4:3b:bb:08:
25:ea:d9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:25:55 2026 by rpki-client