
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
File: FFiKS-nrikuZgtGyXesMYHOK77s.mft (raw, json)
Hash identifier: V3C2UWFSYM/nf+F6tqbejPxgpcT02XqM9Gp79AX6Cyo=
Subject key identifier: 2A:B0:94:5A:B7:D0:5A:CC:8B:0B:9F:BA:1D:E5:C1:EC:AE:AD:5B:BF
Authority key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
Certificate issuer: /CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
Certificate serial: 0369
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
Manifest number: 035F
Signing time: Mon 27 Jul 2026 02:01:38 +0000
Manifest this update: Mon 27 Jul 2026 02:01:37 +0000
Manifest next update: Mon 03 Aug 2026 02:01:37 +0000
Files and hashes: 1: FFiKS-nrikuZgtGyXesMYHOK77s.crl (hash: KSHUqFvJQxSSS6O65gY3cBGhxOYqo6R2GzOXJ9oAorY=)
2: 4D942BCE08A011ED8AD21272C4F9AE02.roa (hash: jgftd+/9ZeJs/SIOse//P6waVUAgX808BhHUM0pG+LE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl
rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 873 (0x369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9CE4, serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
Validity
Not Before: Jul 27 02:01:37 2026 GMT
Not After : Aug 3 02:01:37 2026 GMT
Subject: CN=6a66bc02-73a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e3:17:fe:a4:c3:f6:9f:c1:70:dc:49:76:e2:
61:87:7b:cd:38:9a:22:7a:4b:6a:26:49:f4:40:94:
7b:87:06:5e:ea:66:4e:69:9e:9b:d9:ac:2b:2f:9e:
2e:91:f2:8c:35:2a:bb:94:81:a0:0d:81:52:6c:d6:
b2:1e:db:e4:21:7a:b2:2c:52:60:c7:eb:1b:2a:35:
1f:05:24:33:f3:3e:ad:c8:fa:66:c3:84:32:18:ad:
67:92:cc:53:50:90:aa:10:b8:ff:9f:1f:26:47:9c:
99:e7:61:23:9b:f1:fe:17:91:07:da:45:d9:10:85:
0b:81:3f:95:fb:a7:18:1d:b3:b8:02:f0:83:15:56:
ad:e8:21:ee:f1:8a:82:cc:3f:f7:c0:9c:75:f5:40:
38:56:22:3e:57:0a:20:97:7d:d0:53:c7:32:7c:b1:
af:4a:72:12:33:ce:b1:ec:6d:9b:20:ab:51:73:41:
69:2d:93:94:c5:2d:2e:ad:e6:d5:79:1f:af:09:54:
75:ac:b5:9b:eb:fb:56:4d:45:cd:ad:d4:47:7d:19:
b5:68:9c:0a:15:e8:01:d7:7d:c4:ec:d8:c1:4f:8b:
0c:de:6d:48:c5:e3:c4:79:65:92:15:92:6f:60:90:
3f:a0:aa:04:7b:e8:8b:9d:9f:b1:db:7a:28:b4:c4:
e6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B0:94:5A:B7:D0:5A:CC:8B:0B:9F:BA:1D:E5:C1:EC:AE:AD:5B:BF
X509v3 Authority Key Identifier:
keyid:14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:2d:d1:d2:c9:2b:56:51:19:98:0b:fb:20:61:3b:6f:75:dd:
e4:a1:e5:f7:b5:58:d3:32:6d:3b:52:b2:3f:11:f0:0e:8a:10:
dd:1e:51:f3:08:2a:01:fe:9a:43:3a:81:c2:3d:f7:61:15:7a:
bf:a2:4b:84:53:a2:e8:e9:06:d5:68:68:29:79:65:b2:ac:92:
66:9d:96:f7:ec:9f:96:85:2c:d5:fe:97:50:9d:39:d1:f9:e0:
8b:10:21:ab:83:b2:7e:b5:0f:02:aa:b3:bc:ca:8d:6f:b0:75:
01:e5:72:0f:2f:d5:74:a4:22:30:a2:ac:91:53:fd:df:a5:2f:
57:83:65:09:cb:4f:64:12:6b:50:ba:21:be:33:3c:46:d1:03:
5b:a0:18:86:91:61:5f:26:1c:fc:51:25:92:8d:c5:dc:ad:24:
87:0e:76:dd:85:6d:5f:96:be:ab:48:58:fe:fc:0b:2c:25:8b:
0d:7e:ce:2e:a2:dc:5a:1d:e0:63:d7:3e:52:7d:4d:46:68:74:
d8:75:08:33:92:c7:62:f4:bb:f1:dd:01:51:5a:5d:c5:72:00:
08:b7:5b:c3:c0:55:d6:fd:96:93:14:19:3b:ce:cd:af:a2:7d:
64:0f:37:71:d9:01:3d:3c:b6:af:ea:67:53:57:bc:69:27:6e:
89:a9:18:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:52:25 2026 by rpki-client