
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
File: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft (raw, json)
Hash identifier: C/n2oH99J6pFbOGg7UfCgt41+sbgvRh++iZ68Xtj2K8=
Subject key identifier: 8A:27:6C:5D:B1:5F:0B:B3:AA:3A:FF:53:69:1E:9F:72:D4:E0:01:FE
Authority key identifier: 15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59
Certificate issuer: /CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159
Certificate serial: 02CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
Manifest number: 02C6
Signing time: Mon 21 Sep 2026 01:18:53 +0000
Manifest this update: Mon 21 Sep 2026 01:18:52 +0000
Manifest next update: Mon 28 Sep 2026 01:18:52 +0000
Files and hashes: 1: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl (hash: EMuG67Vey9P9umliYxaO5GaGXS9NmK/qy+5xjyDiV/Y=)
2: F59959807A0511EDA112EF32C4F9AE02.roa (hash: rWEaU3X62dbPpbBeKKBVqa2rvAme+JAlDrUFb+kTgY8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl
rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:18:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 718 (0x2ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B0C4, serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159
Validity
Not Before: Sep 21 01:18:52 2026 GMT
Not After : Sep 28 01:18:52 2026 GMT
Subject: CN=6ab085fc-1c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:25:42:35:45:51:ec:ab:da:1c:63:02:ee:c4:
dc:0b:c5:13:91:61:02:d5:3e:43:82:40:29:60:b6:
90:06:37:4f:5d:a7:64:e5:63:c9:ba:fa:5f:0f:23:
c9:01:e7:28:cd:ee:2d:12:0f:4e:0d:dd:35:4a:0f:
ae:83:6b:56:04:69:c5:a2:93:11:8e:8d:29:bf:5e:
3d:73:44:93:b3:ed:b0:dc:1a:37:6a:ff:cb:6a:1c:
14:30:0c:45:b8:57:62:a0:55:80:e0:ab:3e:92:db:
29:ea:09:20:75:3e:bb:66:d7:10:c4:53:ad:81:ea:
47:d4:4d:90:c1:30:17:b9:59:25:b3:7a:9c:ea:72:
50:0c:c0:2e:32:b9:ef:18:0c:04:10:3b:b0:a1:a1:
17:80:f4:b5:a2:35:2c:7f:b7:8e:93:0d:49:b0:67:
ee:f4:ae:f2:0c:6f:25:26:b4:07:5c:86:d7:ff:09:
48:7a:d5:10:f8:e7:bb:59:9b:d2:3f:1f:48:3f:12:
f3:02:22:41:49:b3:6e:15:ae:75:3b:08:7a:ff:88:
28:7e:25:5f:66:d5:39:86:1d:3c:3b:fc:b9:7f:76:
61:6e:4b:ef:2a:a0:97:05:bc:46:29:d1:4e:a5:e9:
ad:e4:6c:85:92:20:d5:d4:43:a5:2d:e2:07:22:a4:
5c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:27:6C:5D:B1:5F:0B:B3:AA:3A:FF:53:69:1E:9F:72:D4:E0:01:FE
X509v3 Authority Key Identifier:
keyid:15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:74:f2:3e:de:51:54:fb:83:88:18:3c:f3:f3:b5:e1:f8:5d:
9c:1a:64:7c:e4:28:88:59:8b:9e:36:22:ef:22:f3:26:c5:0b:
a5:88:9f:eb:3d:5a:18:09:31:38:50:88:3d:2e:0d:6e:7c:47:
96:10:64:27:5b:30:96:c7:a0:4e:6a:0b:11:b4:f2:47:88:c4:
7c:4a:6a:00:18:3e:2b:3d:77:04:27:8f:ee:cb:fa:69:16:a3:
7c:19:57:ce:37:79:5f:77:31:33:14:a9:55:5d:86:ae:30:90:
68:2f:28:d9:65:b4:10:7c:56:19:46:3c:d2:ec:80:65:6b:ff:
01:21:f0:dd:09:c0:0e:ef:57:93:1f:86:d0:c0:78:8c:7a:e7:
4e:12:1c:98:85:cc:f9:d3:6c:09:a7:df:75:c3:cb:3a:ab:20:
52:03:ac:47:32:a2:1c:36:88:25:53:54:31:b9:7a:e9:3b:3e:
39:ad:24:e0:d5:a3:7f:7b:08:47:d4:38:f5:92:8c:cf:d7:2f:
d2:f9:83:6f:53:c2:02:8e:30:9e:99:9b:0e:16:34:9d:17:60:
3f:16:c1:f3:70:97:82:8d:7d:c3:7c:60:1f:1f:bd:3b:a1:1a:
38:5f:b9:6a:db:9f:f5:b9:d2:1f:7a:bb:15:17:a7:6f:c5:d0:
cc:f1:2a:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEIwQzQxMTAvBgNVBAUTKDE1RjBBNDA2ODVFNjlBNjQxREI3MEU4MkJGNzgwQTlB
QkZFM0YxNTkwHhcNMjYwOTIxMDExODUyWhcNMjYwOTI4MDExODUyWjAYMRYwFAYD
VQQDEw02YWIwODVmYy0xYzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7yVCNUVR7KvaHGMC7sTcC8UTkWEC1T5DgkApYLaQBjdPXadk5WPJuvpfDyPJ
Aecoze4tEg9ODd01Sg+ug2tWBGnFopMRjo0pv149c0STs+2w3Bo3av/LahwUMAxF
uFdioFWA4Ks+ktsp6gkgdT67ZtcQxFOtgepH1E2QwTAXuVkls3qc6nJQDMAuMrnv
GAwEEDuwoaEXgPS1ojUsf7eOkw1JsGfu9K7yDG8lJrQHXIbX/wlIetUQ+Oe7WZvS
Px9IPxLzAiJBSbNuFa51Owh6/4gofiVfZtU5hh08O/y5f3ZhbkvvKqCXBbxGKdFO
pemt5GyFkiDV1EOlLeIHIqRccwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIonbF2x
Xwuzqjr/U2ken3LU4AH+MB8GA1UdIwQYMBaAFBXwpAaF5ppkHbcOgr94Cpq/4/FZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBDNC9GM0E4NzJEQTdB
MDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1tUWR0dzZDdjNnS21yX2o4
VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZmQ2tCb1htbW1RZHR3NkN2M2dLbXJfajhWay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjBDNC9GM0E4NzJEQTdBMDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1t
UWR0dzZDdjNnS21yX2o4VmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV3TyPt5RVPuDiBg88/O14fhdnBpkfOQoiFmLnjYi7yLzJsULpYif6z1aGAkx
OFCIPS4NbnxHlhBkJ1swlsegTmoLEbTyR4jEfEpqABg+Kz13BCeP7sv6aRajfBlX
zjd5X3cxMxSpVV2GrjCQaC8o2WW0EHxWGUY80uyAZWv/ASHw3QnADu9Xkx+G0MB4
jHrnThIcmIXM+dNsCaffdcPLOqsgUgOsRzKiHDaIJVNUMbl66Ts+Oa0k4NWjf3sI
R9Q49ZKMz9cv0vmDb1PCAo4wnpmbDhY0nRdgPxbB83CXgo19w3xgHx+9O6EaOF+5
atuf9bnSH3q7FRenb8XQzPEq+w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:01:52 2026 by rpki-client