
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft
File: FF-_nuMXN-kcPNSE7AFq48jzgDw.mft (raw, json)
Hash identifier: iAKrrJfn58apFU6x2oL3ruwQ2SqguTVOg8Gsvag0aag=
Subject key identifier: 2C:85:54:2C:70:CF:D6:B4:CB:FB:1C:57:C5:5A:F6:62:8D:8D:5B:0D
Authority key identifier: 14:5F:BF:9E:E3:17:37:E9:1C:3C:D4:84:EC:01:6A:E3:C8:F3:80:3C
Certificate issuer: /CN=A91B978D/serialNumber=145FBF9EE31737E91C3CD484EC016AE3C8F3803C
Certificate serial: 0365
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft
Manifest number: 035E
Signing time: Wed 13 May 2026 01:01:45 +0000
Manifest this update: Wed 13 May 2026 01:01:44 +0000
Manifest next update: Wed 20 May 2026 01:01:44 +0000
Files and hashes: 1: FF-_nuMXN-kcPNSE7AFq48jzgDw.crl (hash: gsBuMMbDFDoyhuSc0YJEEJgZ/EAD6sdmiCMLQtiVN2c=)
2: D5D64BB0FB6811EC863B8150C4F9AE02.roa (hash: QRtlstVkdBXEszVrg/iIFuaNaUBnHazamE53eJaDdno=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.crl
rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 869 (0x365)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B978D, serialNumber=145FBF9EE31737E91C3CD484EC016AE3C8F3803C
Validity
Not Before: May 13 01:01:44 2026 GMT
Not After : May 20 01:01:44 2026 GMT
Subject: CN=6a03cd78-c83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:5b:7b:95:3c:74:c6:fd:7e:31:0d:a1:2b:
78:93:86:87:cd:d7:06:c7:a0:a6:e0:00:29:3d:62:
ed:21:ff:b8:d9:10:1e:4f:ad:48:4a:ff:aa:e7:35:
ba:18:1c:9f:c9:37:3a:41:ba:d3:17:f4:14:51:15:
17:ff:4a:f4:a6:17:94:b0:0e:dc:56:83:3e:1a:c6:
8d:90:19:de:14:0e:34:79:c4:c2:15:31:f7:a7:2b:
44:60:c6:97:fd:71:95:73:49:25:dd:5f:1d:70:c9:
ba:48:18:ff:42:e7:07:13:1e:db:e3:1d:96:a4:00:
41:cb:16:e1:03:88:a7:df:7c:29:dd:5b:b6:f6:12:
0d:f0:cd:a1:20:a4:f3:48:75:d3:b4:aa:03:64:92:
b0:a1:54:54:04:0c:48:99:25:1f:32:13:22:4d:be:
b8:d5:49:f9:54:7e:00:cf:c3:6f:39:47:5d:22:da:
36:e0:07:7f:04:9b:cf:49:b9:1d:23:21:74:17:7e:
75:95:29:26:5c:99:73:39:78:72:66:46:f5:21:81:
c7:7a:65:02:eb:c5:a3:e8:74:36:a4:e3:71:aa:2f:
23:22:06:43:d9:b5:74:0d:15:d3:0c:58:19:19:a1:
73:38:c3:49:b6:cd:18:1e:93:3c:b6:e7:94:ae:ae:
1e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:85:54:2C:70:CF:D6:B4:CB:FB:1C:57:C5:5A:F6:62:8D:8D:5B:0D
X509v3 Authority Key Identifier:
keyid:14:5F:BF:9E:E3:17:37:E9:1C:3C:D4:84:EC:01:6A:E3:C8:F3:80:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:77:68:78:eb:a9:a4:cb:c1:ad:73:14:37:c4:51:a1:61:bc:
68:83:e7:03:30:1b:6b:26:3a:fc:bf:40:45:22:6d:d3:54:a8:
ed:b6:c0:15:98:a0:f4:8c:d9:8d:15:81:ab:00:70:b2:3c:fd:
41:05:9d:94:39:57:c1:3e:48:45:c8:1e:18:74:32:62:c8:2a:
e3:74:a0:c8:78:3d:9e:66:47:93:9a:26:96:64:9d:4c:3e:5c:
f7:e1:9f:11:ce:74:af:db:e0:8f:c9:05:8d:72:ca:30:f7:7d:
36:d7:54:d1:ed:ba:9f:c2:cd:65:5b:59:c1:66:36:d9:c3:d8:
09:95:3a:cb:15:dd:0a:03:a2:0b:10:be:4a:05:f5:e7:10:c0:
19:f0:52:78:3d:48:6f:33:3f:93:dd:80:4a:1c:2d:96:4c:70:
de:2f:be:82:84:ec:6a:48:7f:46:fa:87:74:aa:e2:6d:af:74:
9b:15:7b:ea:da:22:77:52:d6:fe:c3:c1:01:03:5c:e5:cd:bd:
fd:fe:fc:6c:b9:07:02:0c:d5:84:f4:e0:71:58:16:43:3c:bc:
f9:bb:c0:be:5c:35:6c:1c:44:1f:32:2e:37:6e:83:7f:8e:c6:
f1:a5:54:03:7e:12:37:fc:fd:69:01:70:c6:20:53:02:bf:99:
25:20:6b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:45:07 2026 by rpki-client