
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
File: FFiKS-nrikuZgtGyXesMYHOK77s.mft (raw, json)
Hash identifier: MNwMZwh56V//lS6OdpVY2TYrOzQ0v+F72M8irmsNkfo=
Subject key identifier: B5:7D:ED:3E:A7:BD:C2:4B:84:53:24:95:CE:39:20:82:F2:64:9B:11
Authority key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
Certificate issuer: /CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
Certificate serial: 0315
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
Manifest number: 0311
Signing time: Sun 01 Mar 2026 01:59:52 +0000
Manifest this update: Sun 01 Mar 2026 01:59:52 +0000
Manifest next update: Sun 08 Mar 2026 01:59:52 +0000
Files and hashes: 1: FFiKS-nrikuZgtGyXesMYHOK77s.crl (hash: m9Hmi22oVVWfY0sRaAcypUQU4rbsfTizFV/qEAMV7kM=)
2: 4D942BCE08A011ED8AD21272C4F9AE02.roa (hash: Th4mKp6+0pNQJZ74KauM9+0p7vkvxGV4bsaH8ldZHTQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl
rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:59:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 789 (0x315)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9CE4, serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
Validity
Not Before: Mar 1 01:59:52 2026 GMT
Not After : Mar 8 01:59:52 2026 GMT
Subject: CN=69a39d98-b5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fd:39:a3:38:d8:0c:11:70:78:d2:92:ae:3f:
38:75:7e:5a:a0:ef:cd:9b:54:2a:38:3f:b3:ba:4e:
1c:40:48:d2:26:f9:f9:e2:f2:a3:36:f4:2d:92:e8:
f0:bb:b0:2d:98:64:e2:91:21:7e:8f:5a:56:4c:7f:
bb:d7:4c:65:cd:d0:89:ff:d4:c8:61:9c:07:c8:11:
42:ca:ab:09:c2:88:8c:38:d7:74:b2:4d:d5:c1:24:
6c:18:a9:81:dd:e3:cc:d0:de:c7:54:d4:75:e5:de:
4f:d2:ca:3c:3e:a0:a8:b5:e1:35:3a:45:3c:be:71:
eb:2a:3e:e5:63:28:66:37:0f:d4:bc:4d:69:55:83:
40:0a:5c:a9:2b:aa:a8:ef:18:e5:21:97:d3:3d:57:
79:c4:dd:40:4c:98:84:c7:14:96:db:bf:70:14:08:
be:97:be:c4:74:cb:8c:a9:fa:04:05:39:43:e3:2c:
34:b6:fd:72:e9:12:0b:19:a4:ee:d0:95:7c:af:d7:
5f:f3:7b:22:f3:d8:83:a1:05:4f:7b:c4:49:fe:f0:
21:a6:32:87:77:f8:30:09:4a:55:35:6a:1e:9e:44:
45:33:34:00:b1:8e:ad:13:42:08:58:12:2d:95:88:
5e:e7:c2:9c:96:a4:b5:f8:38:16:31:c7:80:a0:5a:
5e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7D:ED:3E:A7:BD:C2:4B:84:53:24:95:CE:39:20:82:F2:64:9B:11
X509v3 Authority Key Identifier:
keyid:14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:62:32:fc:9b:94:85:91:4b:65:8d:bc:9b:2c:82:f4:f6:4f:
e1:2b:b5:7a:ed:df:b8:09:b8:0b:77:38:b9:d7:37:e3:4c:43:
84:26:6c:99:7a:fc:e2:1a:f1:e4:c7:cb:8c:b3:29:d0:63:b1:
e7:e7:dc:f8:48:15:da:ae:0c:78:83:70:7c:ba:d9:38:d9:5b:
d8:5c:48:7b:38:75:c6:83:04:9d:78:54:47:bb:5b:46:90:1e:
58:e0:1c:f1:d1:7c:d6:77:2f:7f:84:7e:9f:f4:64:a1:5b:b4:
48:eb:09:6c:14:ef:c7:a7:c3:da:9e:f3:c2:f4:e6:04:00:8a:
55:91:22:df:35:15:15:0b:d6:71:04:0b:25:8f:61:c4:4b:14:
1d:db:2e:b8:6d:0e:9c:66:09:dc:16:fa:45:d7:15:b2:21:4f:
1b:a0:c9:32:24:11:9e:62:fb:15:7b:60:1d:4f:e6:40:71:15:
66:d9:c2:a6:53:5d:c8:ea:fd:bb:fd:23:82:fd:e2:ae:a5:92:
88:38:20:94:d9:7a:eb:ad:a3:dc:4e:0f:84:94:cc:83:2a:d5:
9d:e7:13:1c:de:76:c2:03:2e:bc:17:f3:10:45:07:3c:bb:78:
b5:4c:29:78:d8:91:c0:90:2e:38:ff:86:11:44:9b:f4:7b:95:
47:0a:40:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:27:59 2026 by rpki-client