
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
File: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft (raw, json)
Hash identifier: CeuTPuqXSp8A5xMZfKZOpKmUbQdsgT0TuR6RlFwUuPE=
Subject key identifier: E4:54:34:F8:83:82:00:CE:00:2F:43:33:95:B2:2E:3E:CA:EE:1B:1F
Authority key identifier: 15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59
Certificate issuer: /CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159
Certificate serial: 0263
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
Manifest number: 025D
Signing time: Sun 01 Mar 2026 02:49:52 +0000
Manifest this update: Sun 01 Mar 2026 02:49:51 +0000
Manifest next update: Sun 08 Mar 2026 02:49:51 +0000
Files and hashes: 1: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl (hash: d7cousiu2UeSDslG3p0g4LPobITMkeweib4BU0LxrxU=)
2: F59959807A0511EDA112EF32C4F9AE02.roa (hash: hlcOiwDISzas5tiOnv5T5pSK2UpZ6cfJveUb3LnTEYo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl
rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 611 (0x263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B0C4, serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159
Validity
Not Before: Mar 1 02:49:51 2026 GMT
Not After : Mar 8 02:49:51 2026 GMT
Subject: CN=69a3a950-d886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6b:69:76:41:db:b4:46:28:fd:17:71:b4:7c:
0f:be:a2:a2:6c:00:83:8b:43:50:cb:cc:a9:1a:a7:
0f:5c:d4:b4:35:32:ae:82:a5:c3:fc:e3:ce:12:c9:
7a:c4:50:0d:84:55:87:ad:3d:44:4a:1c:73:45:14:
b9:c6:0a:f3:5c:0f:0a:6b:16:05:bd:68:3a:95:4f:
dc:8f:b9:14:59:d5:c6:7c:2c:2e:ae:0d:e1:fe:00:
d1:1d:0f:9a:db:06:9d:0e:09:c3:29:43:ab:df:9b:
8b:e1:bb:29:3d:e5:a6:bb:68:60:62:08:7f:4f:b7:
af:58:bb:51:e3:cc:71:8c:01:66:d5:fb:0e:5a:7e:
f9:5b:46:48:97:27:52:f7:c8:e9:3f:5e:93:4b:62:
b7:41:1b:ce:0e:42:9a:e6:c1:23:81:1d:74:04:45:
4f:c3:6c:0f:f1:bf:62:9b:c5:68:6e:96:07:9c:a8:
5b:fe:b2:77:90:e9:d9:36:eb:1a:3b:03:43:9f:88:
55:92:96:94:ea:f3:a3:2b:98:ef:e0:9d:87:5a:0f:
94:00:39:4e:fe:6c:22:bd:8b:97:ce:30:16:5b:13:
68:11:10:c5:c5:68:74:9b:fb:21:e8:35:26:2a:01:
21:51:00:cb:9d:13:69:83:98:fa:d7:be:20:d0:76:
7d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:54:34:F8:83:82:00:CE:00:2F:43:33:95:B2:2E:3E:CA:EE:1B:1F
X509v3 Authority Key Identifier:
keyid:15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:73:bc:84:72:7b:41:f5:06:06:a0:d2:40:78:a0:3c:49:d1:
e2:0b:ef:69:45:7a:d2:4a:47:50:fa:86:69:ad:cf:f7:0e:bb:
f8:07:ba:4c:bc:63:d7:d0:ac:28:bd:cc:0b:b5:f0:8e:f2:58:
59:d5:e4:eb:26:66:0f:52:fb:3a:5e:7d:27:51:6a:78:11:e9:
c1:5c:51:4d:91:84:e7:a0:85:c5:08:33:36:15:81:05:ac:c0:
26:80:65:f9:af:b3:01:83:68:e4:73:bb:c1:57:4e:6b:70:d5:
e7:f2:bf:84:8e:59:e4:60:df:a0:a7:a8:69:a6:7c:ac:1a:fa:
6e:d6:1a:e9:ce:46:11:03:85:74:e9:a1:b0:e1:b2:93:35:78:
ff:52:0b:55:0e:7b:c1:dd:bd:a8:c3:0d:d5:8b:cd:7d:11:38:
36:44:39:6f:46:f9:c6:f7:67:cd:62:31:66:2f:19:8c:11:86:
86:3e:bc:8f:43:3a:d9:3b:af:cb:fc:95:69:05:eb:33:a3:8c:
01:32:36:10:77:b5:20:43:88:10:54:97:6b:82:6c:c3:eb:54:
e2:37:b9:3d:06:f6:24:b1:1c:1a:69:99:ad:22:34:d9:e5:e3:
f3:36:44:0d:28:ab:31:94:d8:e4:06:dd:30:a6:38:ee:96:ab:
f9:9c:41:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:42 2026 by rpki-client