
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
File: FFiKS-nrikuZgtGyXesMYHOK77s.mft (raw, json)
Hash identifier: 3am165815eWd7p/PYy9Uxb/lJkvdHfdzJQVtnxbwIik=
Subject key identifier: B0:79:6D:B8:31:8F:CA:AF:34:44:74:43:B1:66:DF:96:48:26:AD:EF
Authority key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
Certificate issuer: /CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
Certificate serial: 0343
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
Manifest number: 0339
Signing time: Wed 13 May 2026 01:09:30 +0000
Manifest this update: Wed 13 May 2026 01:09:29 +0000
Manifest next update: Wed 20 May 2026 01:09:29 +0000
Files and hashes: 1: FFiKS-nrikuZgtGyXesMYHOK77s.crl (hash: 0D88AGfOX+jl77V/tB0/9kTkG4q8gXT6kMKP2AYJH9g=)
2: 4D942BCE08A011ED8AD21272C4F9AE02.roa (hash: jgftd+/9ZeJs/SIOse//P6waVUAgX808BhHUM0pG+LE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl
rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:09:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 835 (0x343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9CE4, serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
Validity
Not Before: May 13 01:09:29 2026 GMT
Not After : May 20 01:09:29 2026 GMT
Subject: CN=6a03cf4a-1b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:44:55:7c:8e:ed:0c:28:1b:be:21:c9:81:da:
60:12:44:27:02:7c:ec:95:47:7d:7d:89:79:df:97:
7b:1d:85:3b:9f:4f:7d:b6:4e:10:5d:75:df:c3:db:
a3:ca:58:fa:09:49:29:f9:ac:e8:77:7c:34:be:42:
74:96:37:97:8b:95:ef:0b:29:d0:1e:ab:99:91:1c:
e7:63:52:a8:9f:f6:1d:50:26:0c:38:db:55:e2:df:
99:02:fb:e7:f0:10:c9:5b:5a:72:ed:eb:10:bb:90:
c8:2d:e1:ad:fa:8b:cd:22:42:e6:99:d5:c8:9c:dd:
c5:a7:1b:06:bb:ed:63:e6:2f:19:72:74:9c:60:1a:
76:b9:ec:9c:6e:51:d5:31:2f:04:50:c6:29:10:a0:
f4:b3:a9:6c:96:27:4c:58:4c:ae:b7:31:c6:7c:23:
bf:31:38:6c:02:46:08:84:ae:12:38:0f:4a:1a:60:
bb:2b:7b:89:8d:b7:04:cf:e1:dc:1e:c7:e4:70:29:
c1:c8:9f:1a:3f:4c:78:87:d9:8a:fa:bb:4b:1c:e3:
0c:9e:6b:28:99:85:06:95:c7:24:0d:4b:b2:71:54:
8b:af:d0:9e:1f:62:79:ee:de:5b:a4:47:72:f5:f8:
6a:db:3f:7b:df:fe:c9:12:78:50:0d:e7:d9:73:51:
fc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:79:6D:B8:31:8F:CA:AF:34:44:74:43:B1:66:DF:96:48:26:AD:EF
X509v3 Authority Key Identifier:
keyid:14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9e:db:75:95:f2:23:bf:2f:82:4c:70:81:37:6f:40:63:a3:
9e:9c:14:0a:bf:32:80:6e:ec:b1:8f:93:6f:fb:a7:99:cb:49:
ae:38:ca:0c:d2:52:ad:f6:e9:dd:e3:4b:f5:59:09:1d:70:72:
c5:b1:b6:f9:0b:c9:3e:66:50:de:b1:2b:1a:5b:d0:ec:55:13:
3c:b8:58:60:fa:2e:96:41:ef:f2:83:9f:0e:9a:6d:98:e5:6d:
eb:2a:85:85:87:4c:eb:11:25:11:55:5b:8a:a7:03:5b:2d:39:
c6:99:dd:9d:56:f2:90:04:f3:20:f7:d6:7b:80:52:df:7e:fe:
12:3a:ee:8f:ea:16:f3:80:94:ec:0c:fd:a9:c0:39:57:31:2b:
e2:8d:33:16:ad:28:fa:e1:46:60:ad:7d:36:c6:ab:2e:ee:0d:
ce:5b:11:41:d0:af:39:2d:82:fb:82:0b:c9:26:fe:05:e2:9d:
c7:18:2b:6d:a0:b9:22:bf:d2:94:e3:e7:67:a2:83:8b:2d:0c:
7c:30:17:34:23:b6:fd:99:54:3a:61:ab:68:0b:2c:bf:7b:f1:
b0:52:ee:97:ae:f3:05:42:71:2b:ac:c5:20:3c:59:c8:a8:f3:
c8:2b:6a:cb:ce:d7:10:b7:6a:a5:7f:20:8c:18:68:33:55:db:
c3:75:f1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:01:33 2026 by rpki-client