
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft
File: Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft (raw, json)
Hash identifier: ADJlnW5W0czOXFhYvaGSVvYc3RV79iMOu/0UXSCNoLc=
Subject key identifier: 50:34:44:D4:8F:7F:5E:EC:AF:E0:04:72:01:FF:48:48:02:41:5E:35
Authority key identifier: 15:FA:5F:E8:35:82:6A:BA:0C:8C:67:65:08:09:BD:C9:34:41:27:B0
Certificate issuer: /CN=A918D1BD/serialNumber=15FA5FE835826ABA0C8C67650809BDC9344127B0
Certificate serial: 62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft
Manifest number: 62
Signing time: Fri 17 Apr 2026 07:40:58 +0000
Manifest this update: Fri 17 Apr 2026 07:40:58 +0000
Manifest next update: Fri 24 Apr 2026 07:40:58 +0000
Files and hashes: 1: Ffpf6DWCaroMjGdlCAm9yTRBJ7A.crl (hash: 4+cNBq9PZuZlE8M09LA7wd7BQV10/iYMdRji16VV2SQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.crl
rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D1BD, serialNumber=15FA5FE835826ABA0C8C67650809BDC9344127B0
Validity
Not Before: Apr 17 07:40:58 2026 GMT
Not After : Apr 24 07:40:58 2026 GMT
Subject: CN=69e1e40a-2cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:77:68:ab:dc:a1:dc:dc:45:f2:0f:d0:82:
56:c7:76:d0:fd:c9:13:90:52:45:6f:f1:29:12:58:
ed:34:9b:fa:c6:75:fe:12:11:91:7e:8b:10:30:f4:
5d:4a:57:4b:0b:7f:27:82:02:bd:18:7f:47:6f:59:
27:45:29:aa:f5:dd:40:a6:71:53:78:48:35:a1:6a:
e3:68:1c:d3:8b:5d:97:71:61:3a:98:5a:4c:e5:63:
00:4b:65:b5:7e:95:50:2d:de:ac:f8:08:26:d6:10:
be:fb:f4:7e:40:b2:d9:7d:f6:65:3b:7d:97:6b:5f:
ba:a3:0c:c1:a2:d9:55:91:bf:43:93:6a:b9:93:4d:
f8:5c:0d:c1:46:9b:75:3a:8b:4f:36:a9:f4:cb:b1:
37:71:c3:54:60:32:36:22:68:bc:07:2e:53:11:19:
5d:11:6a:56:0a:e2:b6:b7:e7:5c:2b:d1:5d:af:11:
78:14:03:2d:e9:5f:e6:47:0b:9e:53:94:52:16:37:
cb:3d:34:0a:8b:29:95:4c:b3:83:a3:01:d2:51:97:
a1:db:60:6d:2e:44:1f:aa:f4:fc:a3:7b:13:7c:c6:
30:79:f1:ad:65:84:76:16:96:14:65:dc:3a:bd:3c:
14:ac:b0:9a:db:a1:c8:9e:cf:c7:71:d9:f3:03:16:
dc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:34:44:D4:8F:7F:5E:EC:AF:E0:04:72:01:FF:48:48:02:41:5E:35
X509v3 Authority Key Identifier:
keyid:15:FA:5F:E8:35:82:6A:BA:0C:8C:67:65:08:09:BD:C9:34:41:27:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:d4:4e:3f:9f:35:a1:12:a5:dd:26:bf:5e:99:92:bc:ea:61:
ae:4b:dc:1c:ea:f9:e9:45:a4:15:cc:c3:8e:4d:90:75:8e:ad:
a3:e9:ba:00:a0:f2:b7:e3:c4:7f:05:33:4e:84:83:a3:4b:6a:
d1:1a:d9:6d:2a:53:a6:6d:87:27:84:3f:1d:ad:df:92:ad:fd:
30:76:3e:9c:f7:20:0b:bb:4f:cd:ec:95:f1:89:af:e3:9d:3b:
a1:cc:a4:73:e8:59:84:c4:c7:42:52:bb:c0:49:94:23:22:de:
b6:6a:92:dd:35:19:f8:b1:07:fe:9f:f9:ac:cd:9c:fc:53:75:
25:72:ad:e7:cc:87:13:fc:8c:2d:e9:ec:bb:d6:ba:de:94:e5:
3e:99:45:31:9d:9c:18:39:ae:70:84:ac:29:90:c2:c1:df:af:
7f:3f:0c:5b:46:44:ac:5c:21:39:5d:69:3c:a9:ea:37:1d:21:
ac:30:0a:20:04:4f:af:ef:8a:05:06:e4:67:68:04:37:8b:1b:
9f:9b:18:b2:de:14:d8:27:48:9a:3f:59:9c:1a:a9:4b:78:48:
63:b5:81:d9:0d:90:e8:a9:97:a2:9e:b3:6a:8d:cb:51:cb:2b:
c2:43:1a:c2:37:f3:ce:5a:ca:13:96:ca:f3:d9:6e:77:23:99:
27:0c:f5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:35:39 2026 by rpki-client