
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
File: FFiKS-nrikuZgtGyXesMYHOK77s.mft (raw, json)
Hash identifier: HTBI+02Q1Xy7v5HwLIZT8dRfVK2HuiHfAS4F52RKq88=
Subject key identifier: BE:A5:3B:F3:3B:24:FE:AB:B3:83:9F:9F:47:E4:BD:CB:65:C7:3A:BD
Authority key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
Certificate issuer: /CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
Certificate serial: 0367
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
Manifest number: 035D
Signing time: Thu 23 Jul 2026 01:49:40 +0000
Manifest this update: Thu 23 Jul 2026 01:49:39 +0000
Manifest next update: Thu 30 Jul 2026 01:49:39 +0000
Files and hashes: 1: FFiKS-nrikuZgtGyXesMYHOK77s.crl (hash: 7ZLALMOvz0CmXOYStNwW2n+QNIWpLiuL6OjKf7a7Fbc=)
2: 4D942BCE08A011ED8AD21272C4F9AE02.roa (hash: jgftd+/9ZeJs/SIOse//P6waVUAgX808BhHUM0pG+LE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl
rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:49:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 871 (0x367)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9CE4, serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
Validity
Not Before: Jul 23 01:49:39 2026 GMT
Not After : Jul 30 01:49:39 2026 GMT
Subject: CN=6a617334-f187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2c:ad:f9:c5:a3:c2:d0:fe:4c:aa:d8:c3:8b:
d7:53:90:99:d3:0b:fa:91:34:9e:70:6d:cc:0e:d1:
08:ac:c8:c0:cd:5d:77:c3:dc:5b:0d:ec:12:cc:ba:
c9:8c:8a:74:69:50:08:9b:75:58:b6:a6:af:12:8e:
67:f5:82:72:4a:56:0b:3f:4f:d7:10:ba:4d:4a:c5:
dd:07:4e:4c:8c:8a:dc:3b:88:94:58:2f:88:05:81:
90:23:2a:bc:fe:db:88:c3:65:29:13:cb:c3:76:a0:
47:6d:60:8f:b7:25:7d:20:24:93:9e:af:bd:ba:f0:
52:35:75:ad:15:2d:48:ed:6f:f7:99:ee:4a:dc:79:
99:fa:47:a7:d3:bc:ac:d9:32:e0:88:ed:21:26:78:
4e:b0:ee:be:69:73:83:50:fc:3f:9a:bf:c7:14:9d:
fc:6f:bd:29:6d:39:fb:61:41:79:67:2e:22:a0:32:
dc:2c:03:5f:6e:f6:60:26:1a:35:d2:a3:5d:08:55:
56:68:f2:8c:98:c9:1f:d2:4e:12:5a:9f:16:09:90:
30:b6:c2:9c:5d:6d:46:6c:33:30:a7:d7:09:8e:58:
2e:a3:33:04:56:74:73:9a:4a:e4:1f:86:46:6f:46:
7e:97:6d:2a:a3:4e:65:91:10:d2:c2:33:58:d5:62:
9d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A5:3B:F3:3B:24:FE:AB:B3:83:9F:9F:47:E4:BD:CB:65:C7:3A:BD
X509v3 Authority Key Identifier:
keyid:14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:aa:7d:74:ef:54:ea:d8:14:da:69:0b:13:bc:44:0a:46:44:
5e:c6:da:ad:0f:7d:2e:5f:83:d0:ed:66:1f:38:3c:24:f1:77:
5d:e3:47:4d:1a:d4:70:58:bf:84:80:e3:7e:e5:2d:f4:ca:75:
7a:39:75:4e:da:60:34:eb:2c:44:f7:3b:9e:02:3d:17:25:cb:
d7:a1:10:f9:01:18:ab:db:b4:07:08:9c:1c:48:16:a3:ab:6d:
d3:d1:55:c0:51:3b:f5:5b:78:a7:08:2d:af:f4:78:a6:21:5c:
69:bc:a5:6a:b6:c9:66:e4:a7:f8:47:93:ab:3c:20:5e:0d:86:
d5:3f:f9:45:41:91:4a:d2:de:db:08:d0:9c:13:18:d2:91:65:
c2:bb:1f:72:1e:01:a1:ee:b5:12:e5:a5:d4:c1:65:c1:8c:d5:
e2:ad:68:74:24:ca:c0:e4:9e:83:04:5c:e7:49:7e:33:09:6f:
f0:f9:86:40:20:be:64:70:ee:bb:2c:9d:15:45:41:e6:f4:11:
25:53:7a:28:12:11:44:de:40:1d:72:26:89:fb:fb:57:73:5b:
46:aa:49:fc:d9:c7:41:90:6c:5b:ab:aa:eb:41:49:94:02:43:
29:82:e7:23:d6:5c:77:ba:51:6f:8f:20:29:07:9c:53:05:00:
02:b2:0f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:27 2026 by rpki-client