
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/FFdMbIw3bumzwcilrbdcuMJo_6o.mft
File: FFdMbIw3bumzwcilrbdcuMJo_6o.mft (raw, json)
Hash identifier: CX2V/Z7IDK5FPI/8syn07tuYJ1egsT+2NARZMRNMfBo=
Subject key identifier: 63:FE:CB:EB:64:7A:32:50:D1:2D:AF:02:FE:47:6E:AD:CB:10:7B:B8
Authority key identifier: 14:57:4C:6C:8C:37:6E:E9:B3:C1:C8:A5:AD:B7:5C:B8:C2:68:FF:AA
Certificate issuer: /CN=A915CBC5/serialNumber=14574C6C8C376EE9B3C1C8A5ADB75CB8C268FFAA
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFdMbIw3bumzwcilrbdcuMJo_6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/FFdMbIw3bumzwcilrbdcuMJo_6o.mft
Manifest number: 2C
Signing time: Thu 21 May 2026 08:54:09 +0000
Manifest this update: Thu 21 May 2026 08:54:09 +0000
Manifest next update: Thu 28 May 2026 08:54:09 +0000
Files and hashes: 1: FFdMbIw3bumzwcilrbdcuMJo_6o.crl (hash: /iHwf+ILWQhuG9zMgerW8MCuqPRoDjlilykA1KYLesI=)
2: 39BE7BDA196411F18D404492083D8C67.roa (hash: f456J4J338N972T6vLM0EgIZuckFzl/P/EWeM5TcqT4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/FFdMbIw3bumzwcilrbdcuMJo_6o.crl
rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/FFdMbIw3bumzwcilrbdcuMJo_6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFdMbIw3bumzwcilrbdcuMJo_6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 08:54:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CBC5, serialNumber=14574C6C8C376EE9B3C1C8A5ADB75CB8C268FFAA
Validity
Not Before: May 21 08:54:09 2026 GMT
Not After : May 28 08:54:09 2026 GMT
Subject: CN=6a0ec831-3f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:30:e8:6b:7b:86:2e:38:eb:bf:cf:44:7f:7f:
56:1e:fc:34:d3:09:43:3a:68:7e:36:0c:88:a5:ca:
9e:d1:c5:78:cd:1e:14:01:8f:f4:e0:b9:a3:03:5b:
7d:4b:a7:28:00:51:cc:35:82:f1:ae:8e:7b:61:cf:
93:bd:6b:43:3f:93:b3:d4:11:1b:88:2e:09:3b:34:
36:85:fd:51:05:df:99:5a:2c:c6:78:ac:1f:ca:9a:
03:05:59:4d:9e:9a:a0:9c:c6:fa:36:e4:43:1c:71:
ed:e6:ea:ab:8e:40:70:1f:74:6a:15:6f:99:8d:50:
44:8d:8f:5b:e0:1b:70:46:21:1f:f8:55:d9:85:59:
e4:21:84:24:d2:c5:e3:28:a3:9d:2b:57:71:59:77:
d4:fc:1c:1c:f0:5e:ef:f9:58:55:d7:e9:09:e9:22:
16:00:ec:6b:70:ce:1d:bf:4d:e0:ee:60:49:11:83:
af:e0:93:a3:14:a7:dc:31:28:f2:4c:d8:eb:c1:3c:
79:54:a4:63:08:e5:6e:ad:a6:f6:fd:42:31:2a:10:
80:00:2b:ad:c3:50:ef:79:f6:e1:dc:55:75:4e:86:
96:bf:c8:36:89:86:4b:02:e3:bd:1a:11:99:a4:9b:
fe:ce:75:59:86:d1:44:77:a7:aa:48:a4:f5:75:43:
b2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FE:CB:EB:64:7A:32:50:D1:2D:AF:02:FE:47:6E:AD:CB:10:7B:B8
X509v3 Authority Key Identifier:
keyid:14:57:4C:6C:8C:37:6E:E9:B3:C1:C8:A5:AD:B7:5C:B8:C2:68:FF:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/FFdMbIw3bumzwcilrbdcuMJo_6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFdMbIw3bumzwcilrbdcuMJo_6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/FFdMbIw3bumzwcilrbdcuMJo_6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:83:33:cf:19:ac:06:a3:4a:08:3f:b0:87:96:84:92:a4:55:
b7:10:98:92:6a:bd:22:17:b1:7e:fb:e0:42:87:4a:03:d1:93:
7d:ec:d8:9c:78:bc:83:27:87:ce:c1:9f:5c:3d:8c:2b:d5:82:
4d:34:15:83:47:c1:b8:61:bd:bf:7a:00:49:2f:3a:d5:2f:c4:
64:73:6b:b8:da:2b:b2:c5:d8:52:47:e5:cd:dd:12:47:11:d3:
e1:90:03:4f:a7:55:e0:4f:7b:3d:05:cd:d5:1b:74:de:b6:0d:
14:e7:76:f0:65:21:7a:47:e1:6a:09:d1:3f:35:ec:8e:82:55:
10:89:b0:01:69:b7:e4:9b:69:ba:17:2e:d4:20:87:87:b2:c7:
45:09:d0:1b:0c:c7:1e:79:5b:64:5f:75:d9:ca:87:92:8e:d9:
64:69:0a:bb:42:f3:37:68:70:13:54:83:c2:fc:ed:41:12:00:
4c:b3:6c:c3:8e:ae:8b:52:00:ae:91:10:4c:01:41:f4:bc:6a:
da:80:43:fa:e7:22:25:d9:ad:df:32:62:53:7b:0d:1e:87:b6:
46:42:2d:89:2a:e9:2e:ca:8a:31:27:96:0d:ac:21:90:45:01:
a2:67:ab:e1:e6:e0:a8:0e:45:28:9a:5e:09:99:dd:fa:49:cc:
6c:9d:71:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:59:26 2026 by rpki-client