
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
File: -ffptMwx85XFzbj6yfUvyldSTeE.mft (raw, json)
Hash identifier: WX+g4xtgRUiEFAvT/n9DDU2H50Id9yXYOqFh4XFrKGc=
Subject key identifier: BC:09:25:A1:4E:64:4B:97:06:49:F1:DD:DB:08:E0:F4:6C:19:E0:D9
Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
Certificate issuer: /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Certificate serial: 0395
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
Manifest number: 0371
Signing time: Sat 13 Jun 2026 00:57:00 +0000
Manifest this update: Sat 13 Jun 2026 00:57:00 +0000
Manifest next update: Sat 20 Jun 2026 00:57:00 +0000
Files and hashes: 1: -ffptMwx85XFzbj6yfUvyldSTeE.crl (hash: uF2Ds6xO0sRZVR0CS+zJJjQ3ElaH8JhR7CKTKch8ufU=)
2: A38DD8D40E1111F1B60944950A3D8C67.roa (hash: 8xomlP6u/pFuCS+4ZI0VqTn0cJ1Ypm6zhDkBB6EqaYQ=)
3: 9770D05EBC4211F0B94CE580C4F9AE02.roa (hash: EKVGFJ/g32vu6i1eB7NEFOf+Zsly8ubAP4iYudVd5gM=)
4: 14A16ED4F0C011EFB89A0131C4F9AE02.roa (hash: JiCW8fyrxd1H5hhanenqtI3Q+to3q8hEENBSB39tRpc=)
5: 0EDE44B2797511EF9F3FEC4CC4F9AE02.roa (hash: X52OCC/lE3b4nsh0tIE1/ie7TTPJC9iTuuS5fQwz44I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 917 (0x395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Validity
Not Before: Jun 13 00:57:00 2026 GMT
Not After : Jun 20 00:57:00 2026 GMT
Subject: CN=6a2caadc-8342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:f6:96:8e:43:63:07:06:b3:34:d6:c1:ee:
17:b7:db:7a:28:61:86:f8:ac:b6:1a:95:b6:08:c3:
21:20:39:e9:5c:27:00:e1:3a:c6:5f:59:67:ee:75:
68:8c:76:eb:b3:ff:d4:c0:cb:43:35:d6:8c:5c:a6:
93:95:d3:c3:10:7e:43:33:59:43:4b:bd:cd:40:ac:
41:62:d7:25:c4:79:97:3a:6e:2b:12:8b:97:0e:5e:
ee:92:b2:c7:89:fa:2c:42:9b:f8:49:dd:e2:cd:35:
2e:bb:72:9d:40:4e:06:ed:dc:c9:45:20:d1:24:22:
bd:64:c3:6b:71:89:ea:d2:b5:8d:40:a2:dc:4b:26:
8d:a8:8d:cf:d8:11:41:25:69:bb:50:72:56:f1:80:
11:be:6f:39:76:b7:c7:96:e0:8b:85:fe:ad:45:af:
b5:d4:b0:bc:dc:b5:f9:ea:d4:d0:c4:af:8e:2c:88:
e4:47:82:03:aa:85:7d:be:5b:e0:22:bb:48:32:e0:
5b:ea:e9:da:c6:41:68:df:2e:5f:07:ca:85:58:79:
0b:0a:9b:b5:91:ce:0d:6e:00:4f:0b:d1:23:9e:d2:
a2:01:49:72:f8:e7:0b:14:9a:64:1a:9e:8e:b2:29:
2e:75:30:5a:6a:b2:0f:d2:2b:b5:e8:9d:9c:a7:53:
c4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:09:25:A1:4E:64:4B:97:06:49:F1:DD:DB:08:E0:F4:6C:19:E0:D9
X509v3 Authority Key Identifier:
keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0d:b4:5d:a2:69:6c:02:b0:cf:ff:b2:4f:59:e7:0f:51:18:
79:6e:56:0e:ad:8a:e7:f9:18:af:12:5c:f3:2b:3c:fc:b1:84:
f6:d7:b7:07:1d:c8:9f:3f:e9:9f:72:73:00:ba:be:d8:fa:d5:
a1:6d:20:51:07:d6:d2:5a:0e:40:62:ed:1c:67:34:86:f2:e7:
11:ee:8b:ef:6c:e9:a9:d4:de:71:8b:e0:a1:2d:55:19:3e:4b:
e7:12:8a:aa:a2:29:b3:b2:71:55:77:f0:ba:3c:5c:e5:4b:47:
8d:0c:44:10:74:f3:ce:79:00:68:0b:45:22:84:12:31:5c:63:
c5:c6:f7:76:e1:4f:5d:82:eb:26:a6:a9:f3:aa:fc:4b:47:be:
dc:1e:0c:13:e4:87:f8:73:e2:d4:b1:b1:73:49:1b:e4:66:b1:
52:0f:f9:5a:c7:42:17:3b:8a:71:17:66:b2:dc:01:de:33:be:
4c:ad:ea:91:14:54:ec:e2:63:6c:7c:48:60:7c:4d:2a:47:76:
38:b9:90:43:ac:78:7e:a9:3c:8d:0e:24:fb:61:a3:ac:77:56:
f1:11:0c:49:b9:cb:d1:9f:9b:d1:e6:15:88:f2:2b:b5:4e:95:
70:bc:5a:5f:64:00:2b:40:bd:09:a7:fc:66:03:b3:a9:ed:3b:
b4:24:bf:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:58:40 2026 by rpki-client