
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
File: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft (raw, json)
Hash identifier: LICbF4BO9ESgWhVJXbHcVV+UIU4BY5oyBZvB+yjsE7s=
Subject key identifier: 1C:63:D7:40:86:8D:75:CC:0B:2C:3A:05:B8:89:17:57:8C:AD:EC:A5
Authority key identifier: 15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59
Certificate issuer: /CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159
Certificate serial: 02ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
Manifest number: 02E4
Signing time: Sun 15 Nov 2026 01:11:24 +0000
Manifest this update: Sun 15 Nov 2026 01:11:23 +0000
Manifest next update: Sun 22 Nov 2026 01:11:23 +0000
Files and hashes: 1: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl (hash: M/mRiAWoI4lEE3FRxELqNC6qH7Q7L23L69htw970Gl0=)
2: F59959807A0511EDA112EF32C4F9AE02.roa (hash: eqgTERuahSjzz9pW7GuiZOD769SsfIbxCUG6Gzb86w4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl
rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 01:11:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749 (0x2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B0C4, serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159
Validity
Not Before: Nov 15 01:11:23 2026 GMT
Not After : Nov 22 01:11:23 2026 GMT
Subject: CN=6af906bc-bf46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:f0:83:59:0b:1d:9f:50:f4:95:f9:9b:05:
c5:a9:92:8f:57:91:2c:b5:7c:e6:4a:4c:36:78:38:
e6:fa:1e:6a:dc:4e:93:da:99:9e:0a:46:1e:30:22:
66:9e:d1:9e:7a:74:98:0e:6b:dd:17:33:a0:4d:38:
dd:bd:01:73:8f:d2:70:93:4d:8e:70:57:5a:fc:0f:
a3:a8:c1:27:27:03:7a:54:7e:74:85:11:08:60:26:
19:b8:03:10:44:0b:38:50:ac:7b:37:de:73:ef:b8:
d1:01:c8:0b:f2:bc:d8:51:17:51:e5:5a:31:74:98:
64:d1:bf:dc:3a:64:ad:f5:3c:fd:63:8b:9d:f6:20:
eb:48:4d:cf:e7:c2:b0:ed:a4:2d:4d:24:5f:8a:de:
7b:c2:b0:19:24:28:76:ce:99:4e:1b:e5:f7:db:d2:
c9:9c:17:cf:a7:87:51:d6:4b:e2:af:a6:dd:6d:00:
7e:0f:9b:b2:87:ea:b9:1b:7d:3e:7c:e0:1d:0f:0a:
2a:4b:63:77:e2:dc:68:bd:0d:3e:c2:56:13:4e:56:
40:b7:f6:f7:6d:e5:5b:a7:85:c8:6f:d7:1a:d9:51:
22:8e:ed:2d:40:2a:3a:25:1c:4d:78:33:db:bc:60:
ac:da:1b:40:ba:39:d7:a1:0d:a1:db:d0:bb:16:90:
f0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:63:D7:40:86:8D:75:CC:0B:2C:3A:05:B8:89:17:57:8C:AD:EC:A5
X509v3 Authority Key Identifier:
keyid:15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:0d:83:a5:13:5c:b1:d8:72:be:30:a5:f1:7f:c7:58:ae:65:
2e:f0:48:db:ba:97:89:5f:ed:10:b8:9e:b0:bb:a1:60:81:2e:
98:c5:e0:72:aa:ae:91:a4:e1:46:c7:fc:7b:46:0b:8e:50:4f:
59:16:0a:59:80:a7:05:54:5b:08:12:ff:c9:aa:39:e8:e6:b4:
73:4c:9e:49:34:93:c2:0d:8f:40:30:52:1d:c4:2d:0c:a1:87:
d0:e4:06:7c:e1:b2:c8:35:82:ef:e0:60:af:c2:92:fd:bd:6b:
88:54:aa:00:53:8d:18:e9:7c:80:ea:2c:cd:20:c9:dd:b4:37:
85:0a:af:bd:0a:69:cd:a6:c6:01:bd:96:d9:82:40:da:85:d4:
67:e9:28:12:f9:39:17:a2:a4:fb:d2:0f:95:6c:01:4e:a7:50:
98:30:26:18:61:3f:44:0e:bb:1d:6c:0a:67:97:4a:0d:ed:82:
5f:99:76:b4:69:3f:cc:c5:31:3f:43:22:8a:fd:ea:f8:72:94:
5b:b9:16:80:83:5f:85:5a:e0:62:af:34:33:fe:e6:b6:b1:9b:
af:17:7e:58:c6:4f:ac:b8:7d:81:4f:91:f8:ca:c9:cc:f0:eb:
7f:0d:36:76:97:98:60:f3:ba:25:7d:46:9a:3a:51:84:ea:5a:
d4:5d:2d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:37:00 2026 by rpki-client