
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
File: FFiKS-nrikuZgtGyXesMYHOK77s.mft (raw, json)
Hash identifier: ThLLYH/za3gT2PRS0T0z1ACzWk77rn2ZZH9v7sBz+ic=
Subject key identifier: 46:56:D7:31:51:D6:DB:35:A7:18:52:1F:0D:C8:4B:25:84:42:CA:0B
Authority key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
Certificate issuer: /CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
Certificate serial: 032A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
Manifest number: 0320
Signing time: Wed 25 Mar 2026 00:45:39 +0000
Manifest this update: Wed 25 Mar 2026 00:45:39 +0000
Manifest next update: Wed 01 Apr 2026 00:45:39 +0000
Files and hashes: 1: FFiKS-nrikuZgtGyXesMYHOK77s.crl (hash: Sp0HaPourMN0ojCaaX6LQaaSdaGdrfR92/o6rHctLcg=)
2: 4D942BCE08A011ED8AD21272C4F9AE02.roa (hash: jgftd+/9ZeJs/SIOse//P6waVUAgX808BhHUM0pG+LE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl
rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:45:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 810 (0x32a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9CE4, serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
Validity
Not Before: Mar 25 00:45:39 2026 GMT
Not After : Apr 1 00:45:39 2026 GMT
Subject: CN=69c33033-e04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:bf:bf:92:4d:13:d3:84:c6:51:b8:f6:e2:
dc:b6:97:27:11:f4:11:d4:97:22:97:a0:86:19:a4:
80:ea:22:16:ca:72:eb:3b:32:1c:c7:24:47:67:3d:
6f:ae:49:43:47:b1:5f:01:61:7d:d9:3c:56:b7:42:
f6:18:f5:a6:22:90:c5:e6:ea:0d:b1:3b:89:2d:7b:
f7:00:a6:8f:95:06:11:f1:42:48:8f:65:74:f9:d7:
4d:1a:2e:92:98:7d:0c:93:23:48:91:d8:90:10:6c:
ce:16:dd:81:7f:bb:08:09:95:0a:b2:c8:f7:22:1b:
f2:2f:e7:92:26:d1:46:50:75:d2:87:c9:35:d1:03:
e0:7a:c2:5d:3f:5f:5b:17:cf:dc:a0:b6:cc:d8:02:
80:69:23:c0:13:d2:12:f3:28:3a:59:dd:f5:9c:d5:
8d:27:6e:17:07:75:f5:aa:28:9a:ea:4d:e7:cd:0d:
ec:fb:83:62:00:ad:f7:b9:55:4d:53:00:78:16:e4:
1b:02:ca:2e:49:e9:6d:7c:4d:62:2a:6b:2c:55:73:
f2:54:2c:3d:1b:f7:10:a6:e9:ad:fc:bd:94:ef:30:
78:97:77:5b:62:f8:f6:4d:86:a6:8b:bb:91:c3:f0:
28:33:1a:b1:19:63:fb:70:b8:f3:f2:47:86:53:1b:
a2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:56:D7:31:51:D6:DB:35:A7:18:52:1F:0D:C8:4B:25:84:42:CA:0B
X509v3 Authority Key Identifier:
keyid:14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ef:eb:3f:0c:a8:1e:45:9e:05:b8:06:44:83:db:bd:1f:64:
fc:59:69:c3:d5:ea:5d:fc:88:8b:74:67:6a:ae:ee:64:d2:c1:
1d:f8:e8:4c:a7:b4:ac:ba:bf:55:2a:63:31:4c:cc:e2:01:6f:
43:7f:28:85:b7:be:6b:9f:eb:c2:5c:c0:3f:37:10:b3:8a:eb:
28:18:1f:e5:41:30:4b:a3:ab:6d:81:a1:55:9f:1b:d9:2d:13:
1e:71:77:7b:cd:3e:96:99:26:25:94:e3:89:a7:34:09:a7:f7:
2e:37:ca:bc:fc:2d:4e:6f:f0:3a:3f:37:7e:d0:4a:47:91:2b:
00:fa:a9:09:5c:39:fd:e8:3a:a7:d8:63:43:39:f4:eb:6a:bf:
55:13:7e:5d:59:5e:1e:63:8c:4c:69:5a:b2:2d:dc:9f:4f:23:
18:82:01:1f:c4:74:88:b5:6c:44:00:33:84:21:70:5c:46:34:
59:d6:0b:15:72:67:21:b6:cd:26:66:92:9c:d0:ca:a3:24:59:
9e:a1:ba:d9:57:ca:95:c8:23:1b:8e:a9:59:d7:a3:0a:63:ed:
9f:b9:4a:79:32:d7:b1:5b:46:b6:6c:31:af:1b:19:62:9f:c2:
9a:7d:bf:03:43:2f:5f:92:ef:2f:3b:52:25:e7:a2:2e:db:a8:
ef:c2:c0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:52 2026 by rpki-client