
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
File: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft (raw, json)
Hash identifier: Nxftu2IBg9jmAHIWWZ0wI5igkHXOkkErUkDCOundTU0=
Subject key identifier: 00:56:E4:43:84:87:96:7D:3E:A6:2C:2A:86:BE:F8:1E:0F:28:BE:D5
Authority key identifier: 15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59
Certificate issuer: /CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159
Certificate serial: 02BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
Manifest number: 02B5
Signing time: Wed 19 Aug 2026 01:58:02 +0000
Manifest this update: Wed 19 Aug 2026 01:58:01 +0000
Manifest next update: Wed 26 Aug 2026 01:58:01 +0000
Files and hashes: 1: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl (hash: py0AipDIvs2dGbe+RF8Sc7IsDZuQdCZqr12aYQ3k+ls=)
2: F59959807A0511EDA112EF32C4F9AE02.roa (hash: rWEaU3X62dbPpbBeKKBVqa2rvAme+JAlDrUFb+kTgY8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl
rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:58:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 701 (0x2bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B0C4, serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159
Validity
Not Before: Aug 19 01:58:01 2026 GMT
Not After : Aug 26 01:58:01 2026 GMT
Subject: CN=6a850da9-dfb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:c7:eb:21:86:f1:cd:1f:ad:5f:86:66:5f:
c3:bd:59:a2:63:f7:fb:c4:92:ee:02:81:48:8f:9a:
bc:8a:86:65:d5:6e:da:77:a8:b8:c9:92:14:83:88:
7d:f1:2b:7c:b8:92:d8:ee:f5:80:2b:11:e3:6f:b2:
3e:2b:53:6c:6b:a9:38:09:39:e2:a9:a7:4e:2e:9d:
b9:f8:84:4c:7e:90:6d:8e:94:11:50:f5:29:bc:67:
0d:68:ed:5b:39:fb:d0:c3:5b:4c:58:e9:e7:c4:00:
7d:04:5e:92:32:4a:77:b4:f7:fe:c6:ec:18:67:e8:
c9:62:ef:0f:9d:2a:a5:c7:f9:7a:c7:6f:c1:26:b9:
73:81:b7:41:04:6f:97:e5:d8:a6:06:ab:99:3c:e1:
52:26:42:fa:bd:ed:a6:ec:2f:41:c0:d4:cf:bb:66:
84:eb:ec:fc:a1:74:38:9c:a4:91:aa:67:26:3e:0f:
c0:0b:74:23:8d:d0:ab:ef:f7:17:03:07:15:a6:0d:
11:a1:d0:c2:c1:4e:27:e8:0e:92:44:12:c5:47:5c:
c2:bc:bc:c9:10:ca:98:75:a5:6f:07:9c:da:aa:35:
f4:ab:87:2d:7f:d8:16:30:a4:55:34:e1:a8:ae:ef:
f7:b9:fb:67:69:34:49:1d:ec:58:ac:aa:7c:90:74:
cc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:56:E4:43:84:87:96:7D:3E:A6:2C:2A:86:BE:F8:1E:0F:28:BE:D5
X509v3 Authority Key Identifier:
keyid:15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:86:71:6b:d2:1e:a2:96:40:0b:2a:a3:98:9d:8e:e5:68:47:
3a:36:a9:43:94:52:45:06:2d:d7:f4:dc:11:50:e8:99:ee:2e:
77:f4:a0:ff:45:6c:1c:a7:db:b9:6a:86:d1:05:66:3f:ab:87:
2c:68:9b:5b:82:9a:0c:19:52:e2:b4:f4:8a:23:a1:b1:37:24:
e7:98:e9:54:ac:a6:88:3b:c1:21:fb:e8:f1:4d:4e:a5:3c:a7:
14:d1:e7:d5:80:1c:cf:75:67:34:76:71:f1:b5:4d:c8:aa:9e:
8a:dc:0c:45:9a:f3:39:99:ee:5d:91:30:5b:12:1f:fa:ad:fe:
ff:58:3d:db:f3:93:ed:00:b9:ef:48:d1:5e:5c:3a:ae:60:d0:
4a:ff:9c:cc:6f:72:c6:ef:a6:1b:0b:15:43:ce:04:21:03:87:
9c:aa:6e:79:a4:6d:68:4b:07:ad:13:e3:c5:e9:37:29:b0:4d:
a2:4a:14:38:f8:bb:e6:22:f0:b2:cf:3a:fe:53:ce:a8:8a:3f:
5a:8c:c6:e9:9b:8e:ec:28:c1:19:f2:80:a5:31:19:7d:14:56:
01:3b:23:f7:f3:ba:43:24:aa:51:f0:9d:28:0b:17:68:bc:71:
2f:a1:a5:1c:73:35:77:c4:88:8c:d8:18:cf:14:c8:82:c2:71:
ec:ae:53:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:01 2026 by rpki-client