
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
File: fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft (raw, json)
Hash identifier: /SG0ha8QVZSp47SC7ZhKbCowXkYXNT2j7kZwfd6k1Zs=
Subject key identifier: 93:50:4E:54:F9:10:66:23:41:58:CF:4B:8D:92:1E:47:5C:FB:5C:DC
Authority key identifier: 7F:06:7A:22:A4:A9:E0:96:FD:86:A6:BA:35:5A:59:24:90:67:D8:0C
Certificate issuer: /CN=A918CC02/serialNumber=7F067A22A4A9E096FD86A6BA355A59249067D80C
Certificate serial: 010A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
Manifest number: 0102
Signing time: Fri 17 Apr 2026 05:54:56 +0000
Manifest this update: Fri 17 Apr 2026 05:54:56 +0000
Manifest next update: Fri 24 Apr 2026 05:54:56 +0000
Files and hashes: 1: fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl (hash: lZ+34PjIrGYd8sUw7sEdWyW8Boyb5cJGUNclhU/4VNQ=)
2: 34B9DBFAC5C011EF88F56A0AC4F9AE02.roa (hash: EbfBHidljZ2gLeTQHKxBHFBHeGxEqlyHSzXcfx3YSkU=)
3: AF9A0636B86B11EFA561215AC4F9AE02.roa (hash: YXgcQSkLUKZDwiDglhpy7R/9d2DcUAeT2Wp6iWZ+BWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl
rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266 (0x10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CC02, serialNumber=7F067A22A4A9E096FD86A6BA355A59249067D80C
Validity
Not Before: Apr 17 05:54:56 2026 GMT
Not After : Apr 24 05:54:56 2026 GMT
Subject: CN=69e1cb30-1b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:61:a2:b8:03:63:21:33:e1:fb:74:cd:82:
56:df:51:b3:77:b8:f2:4d:3b:0a:26:97:c7:e0:f0:
a6:79:ea:bc:bf:5f:b0:02:cd:66:be:ad:95:7d:be:
ca:6a:1c:d4:97:2f:b5:00:59:b5:87:eb:96:f2:9a:
09:b9:b0:21:b4:43:ad:f5:59:c9:54:e4:4e:62:42:
10:b1:52:38:73:ea:3a:f4:6e:d7:05:97:1b:74:d6:
bf:dc:56:8b:e3:83:cd:22:b6:fd:15:36:23:49:5e:
49:b4:54:b9:68:93:9a:08:3b:e4:7f:30:e2:2e:fc:
9a:c4:71:a4:fd:9a:e1:e5:43:25:b8:6a:e4:f8:c1:
f9:cc:49:31:5e:92:88:43:cd:f9:8c:c6:d7:b6:5a:
ad:56:ee:88:f9:2f:9e:76:a0:33:01:c5:b0:32:93:
76:4a:34:ff:29:26:24:55:55:3c:99:b5:2a:8e:5c:
52:74:18:68:df:f3:7e:58:e4:8d:da:af:b6:85:52:
03:08:5b:38:82:29:20:ad:82:fb:2a:82:0b:c0:5c:
47:2d:94:ba:02:98:ca:c5:f0:9e:5f:b8:2c:e0:8e:
2b:38:8b:3c:79:08:78:a5:b8:e5:05:0b:6a:6e:39:
97:d1:23:08:b7:20:f7:d1:6f:ae:ed:c1:fb:54:c1:
99:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:50:4E:54:F9:10:66:23:41:58:CF:4B:8D:92:1E:47:5C:FB:5C:DC
X509v3 Authority Key Identifier:
keyid:7F:06:7A:22:A4:A9:E0:96:FD:86:A6:BA:35:5A:59:24:90:67:D8:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:9b:49:c4:d4:2c:39:99:43:81:91:7e:f0:88:7f:08:40:62:
0d:b5:c9:8b:e6:09:48:8d:79:20:f0:64:b9:e7:79:20:68:7e:
53:52:75:08:ac:27:c9:10:a2:89:6e:66:5f:b7:af:63:78:11:
94:6e:68:42:30:c3:68:ac:f2:4c:1f:0b:87:47:0e:8f:86:5a:
49:20:d0:ba:b9:5c:02:e6:f1:27:91:7b:6b:2d:4e:d7:aa:cc:
4f:d2:35:e4:63:a5:21:8b:c9:16:5c:1f:e1:5e:52:fe:69:f3:
a8:b2:c5:a6:c1:86:82:40:2a:d1:7e:9d:c8:cd:6f:db:63:ad:
24:95:01:42:d0:10:8a:14:8b:8f:20:b1:5d:08:6b:de:e7:2a:
e0:9c:5e:6c:2d:80:33:17:56:51:db:ac:ad:15:f8:a0:5b:cd:
19:db:48:ff:46:78:39:6e:c0:e6:b5:84:56:d4:ff:f8:3a:e0:
59:6a:a8:fa:99:7a:17:0a:b2:8a:16:50:bd:ec:a8:9b:64:21:
4f:81:2e:d1:22:c8:08:5a:ff:b0:ec:e9:45:13:26:27:f4:76:
66:da:cb:e5:f6:2e:ea:08:56:fe:2d:0c:af:c8:5a:67:9e:e0:
9c:ef:44:fa:fb:f9:ba:1d:7b:bc:ba:cb:23:da:60:2c:1a:e5:
8b:d2:5a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:06:19 2026 by rpki-client