
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
File: -ffptMwx85XFzbj6yfUvyldSTeE.mft (raw, json)
Hash identifier: snGTNjXyy9LsnppBRxN1jMaWmIY/JMPRMu67cgg0Jg4=
Subject key identifier: B3:04:F8:43:1A:FA:F7:CF:EA:BF:2D:7B:79:16:22:E4:BF:90:B7:92
Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
Certificate issuer: /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Certificate serial: 03E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
Manifest number: 03C1
Signing time: Sun 15 Nov 2026 00:24:15 +0000
Manifest this update: Sun 15 Nov 2026 00:24:14 +0000
Manifest next update: Sun 22 Nov 2026 00:24:14 +0000
Files and hashes: 1: -ffptMwx85XFzbj6yfUvyldSTeE.crl (hash: 3JE3KTNb/v99NoE73+U+0yUoYF6LRo6Z9oOC9ATtOzc=)
2: A38DD8D40E1111F1B60944950A3D8C67.roa (hash: 8xomlP6u/pFuCS+4ZI0VqTn0cJ1Ypm6zhDkBB6EqaYQ=)
3: 14A16ED4F0C011EFB89A0131C4F9AE02.roa (hash: JiCW8fyrxd1H5hhanenqtI3Q+to3q8hEENBSB39tRpc=)
4: 2CE2D8C2924D11F1BEC529D43811F970.roa (hash: 2Zqqq8CmUd4n+HR7fT+QRClfMOfng4re27zUhAVIAbo=)
5: 0EDE44B2797511EF9F3FEC4CC4F9AE02.roa (hash: X52OCC/lE3b4nsh0tIE1/ie7TTPJC9iTuuS5fQwz44I=)
6: 9770D05EBC4211F0B94CE580C4F9AE02.roa (hash: EKVGFJ/g32vu6i1eB7NEFOf+Zsly8ubAP4iYudVd5gM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 00:24:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 998 (0x3e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Validity
Not Before: Nov 15 00:24:14 2026 GMT
Not After : Nov 22 00:24:14 2026 GMT
Subject: CN=6af8fbaf-bfe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:b3:a8:01:bb:30:60:75:66:eb:50:db:30:
17:a0:8f:18:87:62:0b:8c:d3:b3:5a:81:95:7a:fa:
fd:23:4c:42:65:60:25:11:68:2f:9b:dd:59:2b:aa:
ba:46:47:6d:3f:0a:97:a6:cd:18:eb:7a:03:04:db:
ff:e2:72:15:36:22:79:f4:3e:a5:8d:b0:3d:26:e5:
ac:80:8b:13:24:76:c1:7c:53:02:9d:4d:54:66:0c:
51:4c:83:5a:58:e5:28:72:e1:e1:74:88:91:54:99:
05:4f:78:d1:83:1d:31:16:09:29:44:85:72:43:62:
a3:d4:0c:05:58:bc:3e:fa:02:ad:ac:12:87:62:a5:
94:ce:5a:23:21:1e:9e:1c:f7:bc:1e:dd:99:b6:dc:
a9:cd:99:69:89:2f:88:00:51:85:ff:a0:a2:50:d7:
68:d3:00:1a:f3:2b:b5:e7:ed:95:51:7c:0d:5a:31:
2c:de:f1:d7:f7:29:e9:88:60:f7:fe:06:07:e6:ad:
99:77:ec:2a:7d:bd:3b:67:b0:3c:7a:89:9e:82:a1:
0f:da:11:2b:7f:3f:1b:9c:29:2e:f6:01:bf:86:c0:
38:d5:d0:6a:de:f5:a1:da:21:5e:ec:26:14:ed:68:
e7:ad:07:db:b8:4a:dd:2f:9b:e1:ee:9d:70:3a:d8:
c9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:04:F8:43:1A:FA:F7:CF:EA:BF:2D:7B:79:16:22:E4:BF:90:B7:92
X509v3 Authority Key Identifier:
keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:ed:96:c4:95:11:75:64:43:f6:2a:93:0d:87:1e:3f:ca:5f:
a1:e3:52:b5:6d:e4:9b:bc:15:42:14:fa:9c:77:7f:94:bb:fe:
2d:15:1c:3d:f4:16:41:db:e9:c2:2b:94:92:c8:bb:9e:5a:96:
cd:eb:63:76:85:68:ed:69:f6:81:9d:e8:a3:ec:bb:21:b7:bd:
25:f7:f0:e9:09:6e:cb:65:a5:4a:96:df:9b:0c:01:ce:6e:61:
97:35:e8:9c:dd:cd:08:04:bf:23:cb:cc:eb:f1:47:d5:48:c9:
f0:06:65:7c:a8:52:29:ee:54:79:63:b3:d0:98:6e:11:2d:4e:
4f:13:e2:e2:ec:85:99:a7:e3:c4:df:ec:7e:75:86:bc:41:f2:
32:12:f4:f7:91:de:81:5f:32:66:80:06:40:4b:63:ec:ca:e9:
88:f8:54:4e:57:02:56:33:0f:f3:b4:57:8f:84:82:35:83:00:
64:e3:b2:a3:99:4b:eb:65:0d:97:45:7b:83:ec:b2:cf:a8:96:
24:64:90:53:4c:e9:74:fb:ae:4f:72:7b:56:8f:09:0c:92:17:
18:0e:68:ae:2a:e3:14:75:fb:7c:e6:ae:5e:10:42:ca:85:a3:
74:a2:73:76:ed:c0:7c:f1:73:03:41:81:7d:ce:08:73:7d:6b:
23:e1:7a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:14:51 2026 by rpki-client