
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
File: fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft (raw, json)
Hash identifier: 1J6QmMr329CSg4+ULX3GXaaNoknaHVGBwFYPJ00X7DQ=
Subject key identifier: D3:F0:F6:93:0F:AE:05:17:18:4F:C9:89:93:A4:C4:B8:73:23:23:EA
Authority key identifier: 7F:06:7A:22:A4:A9:E0:96:FD:86:A6:BA:35:5A:59:24:90:67:D8:0C
Certificate issuer: /CN=A918CC02/serialNumber=7F067A22A4A9E096FD86A6BA355A59249067D80C
Certificate serial: EB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
Manifest number: E7
Signing time: Sun 01 Mar 2026 07:37:24 +0000
Manifest this update: Sun 01 Mar 2026 07:37:24 +0000
Manifest next update: Sun 08 Mar 2026 07:37:24 +0000
Files and hashes: 1: fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl (hash: 8gidSFptUC7OGM7V68VyqCmrpnNXpSVuPbiZkBlJLO0=)
2: AF9A0636B86B11EFA561215AC4F9AE02.roa (hash: A1ObxkHjydwk6fyBehYuw1o+tlNdKL+8OMsW+xN5Ytc=)
3: 34B9DBFAC5C011EF88F56A0AC4F9AE02.roa (hash: CdzYGbgczXhSim11hs6E/ciyGfIAn64tfnFJutLO9pY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl
rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:37:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CC02, serialNumber=7F067A22A4A9E096FD86A6BA355A59249067D80C
Validity
Not Before: Mar 1 07:37:24 2026 GMT
Not After : Mar 8 07:37:24 2026 GMT
Subject: CN=69a3ecb4-2fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:ae:bf:e5:31:55:e7:97:21:d0:a4:c1:59:
65:36:b5:d2:bd:33:80:f8:68:cb:6e:43:c8:7f:b0:
f1:d6:17:4d:40:b9:99:25:06:0d:34:b5:d0:67:b9:
8b:cd:a9:d4:ab:96:ab:71:8b:28:b4:ad:7f:db:13:
33:33:6d:07:81:cd:75:1f:af:51:98:76:76:84:32:
4d:37:a5:01:0e:ef:05:a0:e1:3c:97:8d:b2:bb:63:
fc:c5:e3:72:ea:1b:8d:9c:c4:d0:2a:f5:21:cc:0e:
09:ee:3e:b5:b1:99:97:c6:4b:69:ce:da:e5:e5:22:
61:69:b9:32:18:a8:49:36:d5:dc:e8:79:28:db:1e:
87:92:94:8c:d3:a6:90:dc:39:3f:ad:fa:5a:a5:c9:
fd:67:de:39:27:6c:b3:f5:67:64:54:96:39:f5:1a:
f8:b6:09:50:8a:16:eb:0c:98:76:3c:f3:6d:68:d7:
c6:4e:49:1b:5c:57:3e:4f:b0:23:94:11:be:57:0c:
95:af:bc:34:da:a9:ec:21:76:41:0e:cc:c1:cb:de:
2d:8d:b3:35:04:3c:d3:2b:c1:b4:0a:af:a3:9f:2a:
91:47:de:34:e6:d6:cf:1c:73:ed:37:d4:4e:6f:b8:
9e:92:a7:02:c5:60:7b:ca:01:b6:bc:75:79:b7:d4:
bf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F0:F6:93:0F:AE:05:17:18:4F:C9:89:93:A4:C4:B8:73:23:23:EA
X509v3 Authority Key Identifier:
keyid:7F:06:7A:22:A4:A9:E0:96:FD:86:A6:BA:35:5A:59:24:90:67:D8:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:82:c2:52:70:f5:e5:bc:b3:e4:1a:6a:70:ad:95:5a:0c:7e:
3a:f3:c0:1c:01:b8:e9:18:e2:89:cc:8e:d0:52:08:b2:cb:9e:
a7:d0:f5:f5:ef:a8:8b:09:e4:a5:ca:61:33:41:9a:f7:fc:e5:
04:76:52:33:74:a7:c9:cf:15:24:69:08:ef:e0:06:df:9b:4a:
b0:4f:7a:66:ab:c3:6e:fa:7a:c0:ec:26:c9:cb:90:d6:60:9b:
ed:b8:1b:9f:14:02:9f:7c:c5:b7:c2:4e:f5:0f:f8:57:dc:2a:
a5:1b:a6:df:e6:f2:db:fb:8b:72:e2:b2:74:6c:3d:35:96:ff:
e2:44:1e:ee:66:3f:d5:be:4d:7f:55:df:df:d5:41:88:83:f8:
a1:d5:ee:c7:1b:92:33:0f:5b:5f:08:74:1f:87:e2:99:a4:eb:
ac:04:7c:75:35:40:fa:87:1a:0f:62:00:f7:ed:2e:41:83:c4:
a5:64:b7:33:68:64:f9:aa:83:dc:9f:99:5d:47:c4:ee:1d:98:
91:81:57:c6:29:19:b8:c4:cf:91:dc:cd:f9:c2:11:81:c3:f6:
ee:e3:03:4f:a2:2c:cc:1a:7a:23:41:73:ac:b0:98:23:c4:86:
22:54:bb:ed:21:f9:a0:75:b4:cf:4b:c9:b0:72:a5:92:a7:c8:
60:cd:5b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:47:08 2026 by rpki-client