
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
File: i_fikwz8buuRbnOQ-JPgEAupOzI.mft (raw, json)
Hash identifier: QRaRvbcma0ORYw/hzFYgJPZFjBXm6kepvOOy2cJm/R4=
Subject key identifier: 77:0A:D5:C4:DC:8E:6E:16:22:89:B3:A4:58:FE:35:4F:C1:B5:5C:4B
Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
Certificate serial: 0B13
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
Manifest number: 0AB1
Signing time: Fri 12 Jun 2026 19:36:05 +0000
Manifest this update: Fri 12 Jun 2026 19:36:04 +0000
Manifest next update: Fri 19 Jun 2026 19:36:04 +0000
Files and hashes: 1: i_fikwz8buuRbnOQ-JPgEAupOzI.crl (hash: 2tY4KT0/BRd2faO2FTiFVg58gkGYqOhHnRFKL0nZuZk=)
2: 3130A9B4681011EEB552C65BC4F9AE02.roa (hash: OsgY/uwTYM6NeEyONnxq3HN9YIKdpTvZdliw/rwuT+4=)
3: C654C6869F1C11EEB377E239C4F9AE02.roa (hash: D2Pz6MdJy5D25SqXQeyDzcUr+PAYz/53GJhpSfF/pT4=)
4: 794C43721A5F11F080409056C4F9AE02.roa (hash: JEX9HiFKj1Gpxv9fRbvkSFLhbWXwWYo4/4O6MDucr+A=)
5: C353D09A1D2711F1B40CC16C143D8C67.roa (hash: GLJtEpQzBfkgk+ZH6nE1USNscfvZG/ow27KNoqGuMd0=)
6: 4A68B404EF5A11EEB09CEA53C4F9AE02.roa (hash: BbXQvxTlfHdgvbDIHREA9MrezDGy2u1sVN3VMyfnT0A=)
7: 493CABD04FEE11F0B866DF81C4F9AE02.roa (hash: CY0a3MF9Wjgtmqg8UPruXQ0gE6mWPrkTmn5P+V+20+A=)
8: 44CA8E9C7A2811EFA43D2558C4F9AE02.roa (hash: W4HKH5UqI+VVI51zb7ltvtuOeFbUQvkwGVAq0zW7JgE=)
9: E27FAE42319211F1BB2A50F9AA833773.roa (hash: n4ymgft/vIrzros25RNWfTLBjrIB8vBBzJoiHlTiiAw=)
10: B11136C4BA5411F0A7CF623BC4F9AE02.roa (hash: 4m56v9WrLnVPmGdujR4qOaBQSAGX0P92yEZf7PwBOyo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl
rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2835 (0xb13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
Validity
Not Before: Jun 12 19:36:04 2026 GMT
Not After : Jun 19 19:36:04 2026 GMT
Subject: CN=6a2c5fa5-a014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:53:be:4c:28:39:89:f1:18:c7:69:41:9d:
66:48:54:b5:e7:b3:c6:76:91:56:f5:9f:11:eb:3c:
6a:b0:49:a1:1b:81:c6:a1:c5:51:1f:56:7d:a2:04:
23:43:4e:0d:09:4c:7c:b8:de:03:ae:89:16:0e:11:
68:20:26:d4:f3:bd:cf:e3:09:7f:59:27:0f:62:a5:
4f:56:99:8e:f0:86:fa:46:96:5f:d4:88:17:f6:dc:
97:61:a5:91:18:c8:4e:73:86:b7:42:b2:1c:53:69:
32:68:8c:d6:90:68:f3:50:16:53:96:ae:e4:c0:2d:
6c:7c:7f:97:6b:52:6d:b3:d6:46:0b:17:cf:a1:13:
c1:36:e8:90:39:ea:a5:91:25:59:cc:ca:87:b2:85:
60:e0:00:62:fe:9a:13:a8:dd:58:e4:ff:8a:5f:51:
18:d2:f9:43:ef:92:8b:d3:56:c2:d9:33:b3:b2:9f:
53:0b:50:9c:38:87:02:a3:91:92:2b:97:8e:38:75:
fa:eb:58:25:6a:76:e1:f7:ed:d5:b2:7c:9c:7a:55:
02:d9:83:49:e9:c3:fa:d3:f2:65:d2:24:03:0a:32:
91:3a:64:c6:12:5d:bf:c8:74:24:ba:42:57:8e:eb:
87:46:92:5d:7a:2b:08:5c:18:00:47:8f:c8:bd:07:
04:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0A:D5:C4:DC:8E:6E:16:22:89:B3:A4:58:FE:35:4F:C1:B5:5C:4B
X509v3 Authority Key Identifier:
keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:52:29:e4:b5:be:e4:aa:7b:68:6b:13:dc:1c:2a:7f:e2:b6:
51:e7:fb:1c:1f:a6:c4:81:72:7f:ff:89:dc:36:2d:75:11:45:
3c:8e:ad:fd:4d:94:ae:42:51:1d:3b:e2:e3:d9:61:40:dd:ea:
b7:bf:fd:ff:70:85:4f:e3:64:dc:fd:e3:37:c5:dc:67:1d:6d:
1a:b8:f2:66:8f:4b:20:cf:60:88:f8:ae:a7:b7:35:28:c4:97:
2a:2c:16:75:40:4e:13:3c:d6:ff:16:82:21:69:41:e0:bb:43:
97:c8:a8:3e:90:88:79:eb:7f:41:24:2a:71:f0:42:88:fa:11:
8a:5b:2d:be:3d:d9:60:87:60:3a:df:ef:07:8f:ff:bf:72:b1:
e6:3b:eb:a8:92:2b:32:64:35:d8:a3:8b:fc:16:43:4b:51:a8:
4d:a7:d8:e7:67:93:9e:f2:a5:12:bf:e0:10:ff:ee:4a:b3:2f:
f9:f0:97:03:56:eb:3a:65:9f:de:b1:1a:4e:48:ac:5a:14:18:
7e:e6:e2:63:fb:25:fb:4e:c4:ff:aa:7c:5d:fe:76:d8:1a:46:
14:32:49:10:d9:d0:a6:86:53:ab:87:5b:82:be:be:10:74:c3:
9e:cc:c1:bf:b1:b0:c3:fe:16:3e:49:81:8a:04:7f:dd:c6:79:
74:b2:a9:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEM2NjExMTAvBgNVBAUTKDhCRjdFMjkzMENGQzZFRUI5MTZFNzM5MEY4OTNFMDEw
MEJBOTNCMzIwHhcNMjYwNjEyMTkzNjA0WhcNMjYwNjE5MTkzNjA0WjAYMRYwFAYD
VQQDEw02YTJjNWZhNS1hMDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlFFTvkwoOYnxGMdpQZ1mSFS157PGdpFW9Z8R6zxqsEmhG4HGocVRH1Z9ogQj
Q04NCUx8uN4DrokWDhFoICbU873P4wl/WScPYqVPVpmO8Ib6RpZf1IgX9tyXYaWR
GMhOc4a3QrIcU2kyaIzWkGjzUBZTlq7kwC1sfH+Xa1Jts9ZGCxfPoRPBNuiQOeql
kSVZzMqHsoVg4ABi/poTqN1Y5P+KX1EY0vlD75KL01bC2TOzsp9TC1CcOIcCo5GS
K5eOOHX661glanbh9+3VsnycelUC2YNJ6cP60/Jl0iQDCjKROmTGEl2/yHQkukJX
juuHRpJdeisIXBgAR4/IvQcEwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHcK1cTc
jm4WIomzpFj+NU/BtVxLMB8GA1UdIwQYMBaAFIv34pMM/G7rkW5zkPiT4BALqTsy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wNEFBQjI5RTgz
NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1dVJibk9RLUpQZ0VBdXBP
ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lfZmlrd3o4YnV1UmJuT1EtSlBnRUF1cE96SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QzY2MS8wNEFBQjI5RTgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1
dVJibk9RLUpQZ0VBdXBPekkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdFIp5LW+5Kp7aGsT3Bwqf+K2Uef7HB+mxIFyf/+J3DYtdRFFPI6t/U2UrkJR
HTvi49lhQN3qt7/9/3CFT+Nk3P3jN8XcZx1tGrjyZo9LIM9giPiup7c1KMSXKiwW
dUBOEzzW/xaCIWlB4LtDl8ioPpCIeet/QSQqcfBCiPoRilstvj3ZYIdgOt/vB4//
v3Kx5jvrqJIrMmQ12KOL/BZDS1GoTafY52eTnvKlEr/gEP/uSrMv+fCXA1brOmWf
3rEaTkisWhQYfubiY/sl+07E/6p8Xf522BpGFDJJENnQpoZTq4dbgr6+EHTDnszB
v7Gww/4WPkmBigR/3cZ5dLKpRA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:24:28 2026 by rpki-client