
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft
File: FF-_nuMXN-kcPNSE7AFq48jzgDw.mft (raw, json)
Hash identifier: YNV3ixp+Ee/CFUqSGerkp+5ekbmFoWJC8LVFlDo0Ugc=
Subject key identifier: 02:38:57:D9:39:68:9A:E4:B4:FF:DA:5A:CC:2B:21:86:3F:38:B3:39
Authority key identifier: 14:5F:BF:9E:E3:17:37:E9:1C:3C:D4:84:EC:01:6A:E3:C8:F3:80:3C
Certificate issuer: /CN=A91B978D/serialNumber=145FBF9EE31737E91C3CD484EC016AE3C8F3803C
Certificate serial: 0375
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft
Manifest number: 036E
Signing time: Sat 13 Jun 2026 00:52:14 +0000
Manifest this update: Sat 13 Jun 2026 00:52:13 +0000
Manifest next update: Sat 20 Jun 2026 00:52:13 +0000
Files and hashes: 1: FF-_nuMXN-kcPNSE7AFq48jzgDw.crl (hash: daGhh+vWyOMZqOmaQGJUWAqK1AHiiScVqTbhhG+9KeU=)
2: D5D64BB0FB6811EC863B8150C4F9AE02.roa (hash: QRtlstVkdBXEszVrg/iIFuaNaUBnHazamE53eJaDdno=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.crl
rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:52:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 885 (0x375)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B978D, serialNumber=145FBF9EE31737E91C3CD484EC016AE3C8F3803C
Validity
Not Before: Jun 13 00:52:13 2026 GMT
Not After : Jun 20 00:52:13 2026 GMT
Subject: CN=6a2ca9be-2c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:ed:d5:1e:79:64:23:30:0e:2d:7d:53:cf:
6e:32:8b:13:df:3d:ac:2c:1e:28:ae:32:7b:8b:1d:
a2:a3:49:b0:f5:9a:f0:32:24:d2:7f:c1:05:89:f2:
ba:c2:72:b4:25:09:76:af:97:72:1a:57:de:16:a8:
a2:d2:2a:fa:91:84:d4:96:de:3f:90:a0:81:28:23:
73:a6:ff:87:70:47:70:f4:ad:82:5d:bb:e7:89:8a:
3c:29:6d:51:eb:19:9b:68:b1:c9:5d:e7:a8:8c:68:
96:b6:62:fa:55:0b:a0:1d:7a:38:4b:61:a0:6a:cb:
95:cc:5f:a5:db:b5:cb:84:27:27:88:7b:a3:8b:68:
58:92:1a:52:27:4d:95:d5:8d:7b:d2:56:27:5a:b8:
39:17:82:53:d5:21:73:99:76:d6:fe:5b:10:7e:54:
f1:23:70:59:6b:2e:c6:01:3b:8f:0d:12:e3:a7:40:
53:47:fb:4d:30:65:82:0c:56:f5:ba:3b:7d:42:50:
74:e6:46:59:e5:6f:bc:40:13:87:0f:79:33:04:3b:
23:fa:b4:35:76:03:62:c9:57:f9:70:2f:1f:71:39:
22:9d:69:8a:d2:86:a0:c5:88:c5:f8:43:f0:10:3f:
a8:af:16:f0:0c:1d:97:b7:cd:e9:32:69:20:4f:f1:
b0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:38:57:D9:39:68:9A:E4:B4:FF:DA:5A:CC:2B:21:86:3F:38:B3:39
X509v3 Authority Key Identifier:
keyid:14:5F:BF:9E:E3:17:37:E9:1C:3C:D4:84:EC:01:6A:E3:C8:F3:80:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:f1:f0:8d:30:62:fd:55:b1:18:23:74:64:08:79:f3:c7:39:
ed:8e:6f:ea:f3:44:1a:5b:ad:59:33:3a:34:65:69:02:90:33:
c0:74:f8:64:81:40:3b:71:cf:06:94:3f:f5:ed:c5:b0:cd:53:
c8:05:d6:2d:c8:17:d7:de:8f:de:a6:6f:69:74:89:f0:ed:58:
97:8e:72:a2:ac:e1:f4:4d:79:f8:e9:a2:f1:f7:86:6c:3a:5a:
e6:b1:a8:bc:20:03:66:07:f7:eb:18:cc:5e:f0:c0:8b:19:0a:
9e:c6:8d:d4:67:6f:eb:1b:d1:e3:c7:bf:af:97:0c:e5:e5:9a:
cf:32:9e:36:05:0a:71:c7:6e:e7:c7:71:30:41:94:99:ef:87:
0d:23:5f:1d:6e:cd:78:d5:cc:4c:ce:42:9a:14:11:85:74:19:
5e:c4:29:a9:90:a9:de:45:73:9b:f5:cf:c5:7a:6f:75:cc:ba:
a7:63:45:50:7c:e1:52:b1:80:fd:bf:e2:14:01:65:01:65:e3:
dd:f1:bf:bb:49:a5:5c:af:7b:f0:67:61:30:f5:ef:01:b7:42:
98:38:e6:56:87:f6:b6:50:3e:d4:a9:17:76:99:45:21:e7:93:
f3:e3:98:d5:61:40:ee:a6:2b:0f:72:be:d1:f6:9b:e5:53:77:
ab:48:c1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:44:43 2026 by rpki-client