
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
File: i_fikwz8buuRbnOQ-JPgEAupOzI.mft (raw, json)
Hash identifier: smbbvOXwtHaoDMc+MLsg9SAPDxqIDQf8UlD7kLqgbYU=
Subject key identifier: 87:D2:68:59:FF:D5:2C:67:1C:30:64:DA:A3:71:6B:3E:F0:BA:4A:1B
Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
Certificate serial: 0B05
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
Manifest number: 0AA3
Signing time: Sat 16 May 2026 19:34:18 +0000
Manifest this update: Sat 16 May 2026 19:34:17 +0000
Manifest next update: Sat 23 May 2026 19:34:17 +0000
Files and hashes: 1: i_fikwz8buuRbnOQ-JPgEAupOzI.crl (hash: 94E7c2sA4sozvsXMX3Qvfru2kGpi+aDNdu1255per8c=)
2: 44CA8E9C7A2811EFA43D2558C4F9AE02.roa (hash: W4HKH5UqI+VVI51zb7ltvtuOeFbUQvkwGVAq0zW7JgE=)
3: 3130A9B4681011EEB552C65BC4F9AE02.roa (hash: OsgY/uwTYM6NeEyONnxq3HN9YIKdpTvZdliw/rwuT+4=)
4: C353D09A1D2711F1B40CC16C143D8C67.roa (hash: GLJtEpQzBfkgk+ZH6nE1USNscfvZG/ow27KNoqGuMd0=)
5: C654C6869F1C11EEB377E239C4F9AE02.roa (hash: D2Pz6MdJy5D25SqXQeyDzcUr+PAYz/53GJhpSfF/pT4=)
6: 794C43721A5F11F080409056C4F9AE02.roa (hash: JEX9HiFKj1Gpxv9fRbvkSFLhbWXwWYo4/4O6MDucr+A=)
7: E27FAE42319211F1BB2A50F9AA833773.roa (hash: n4ymgft/vIrzros25RNWfTLBjrIB8vBBzJoiHlTiiAw=)
8: 493CABD04FEE11F0B866DF81C4F9AE02.roa (hash: CY0a3MF9Wjgtmqg8UPruXQ0gE6mWPrkTmn5P+V+20+A=)
9: 4A68B404EF5A11EEB09CEA53C4F9AE02.roa (hash: BbXQvxTlfHdgvbDIHREA9MrezDGy2u1sVN3VMyfnT0A=)
10: B11136C4BA5411F0A7CF623BC4F9AE02.roa (hash: 4m56v9WrLnVPmGdujR4qOaBQSAGX0P92yEZf7PwBOyo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl
rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2821 (0xb05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
Validity
Not Before: May 16 19:34:17 2026 GMT
Not After : May 23 19:34:17 2026 GMT
Subject: CN=6a08c6b9-4576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:87:1b:4f:8c:bc:7f:db:ad:25:d0:d2:33:
a8:9b:12:06:f0:6a:fa:9a:54:28:dd:ed:54:5b:a2:
68:5b:3c:9d:12:0c:ee:6f:9d:d3:8a:79:4a:e7:d8:
0d:9a:72:03:8e:2f:a9:8f:97:fd:e1:90:0c:89:69:
45:20:1b:5d:02:73:f6:8e:78:f5:8f:a2:f4:d0:b8:
d6:6a:62:78:49:52:ae:e4:04:b0:7c:ee:4c:e2:70:
86:3d:7e:11:03:6d:61:4a:f8:94:fb:50:02:79:97:
cf:b5:3a:98:2f:5b:82:18:ed:47:76:b0:06:46:c2:
68:ca:11:24:d9:83:3d:f6:88:24:55:64:67:11:be:
9c:58:a2:35:3c:ff:8c:47:e5:9d:71:57:83:b6:5f:
ad:f1:3e:1c:a4:e9:10:63:31:06:0a:70:f7:d9:cf:
0e:2e:8b:0f:ea:92:bb:73:20:04:bd:a9:3f:1b:bf:
d4:0b:05:48:0c:cd:0c:d6:86:8d:d0:77:c2:bb:77:
29:a4:6a:58:3d:c7:a6:d1:64:88:a3:2b:cd:fd:d8:
5a:b4:91:c4:48:d6:e5:cf:90:d3:57:da:11:27:b5:
51:fa:08:ff:03:60:6c:99:f6:5b:de:68:fc:89:65:
22:5c:39:15:4b:72:de:d0:60:f7:1b:f4:82:cb:12:
f9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D2:68:59:FF:D5:2C:67:1C:30:64:DA:A3:71:6B:3E:F0:BA:4A:1B
X509v3 Authority Key Identifier:
keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a5:a3:b0:d7:96:89:d6:a1:bd:7d:94:c8:4e:17:e7:95:84:
3c:5c:06:87:23:4e:9a:9a:36:14:8c:6b:89:fa:16:a6:dd:14:
0d:bb:77:c6:01:5b:53:19:6a:22:fe:f8:db:e2:c0:1f:39:24:
2f:69:6c:e7:83:46:6c:4a:20:62:d7:b8:b0:ce:f5:d0:04:ca:
fc:5e:7d:50:31:9a:18:a8:2f:ab:89:1e:1f:4d:13:4a:25:bc:
ea:ca:06:b6:fb:a6:82:5b:b8:54:03:74:f1:03:41:69:ee:18:
34:8e:d7:d7:51:65:fe:71:e4:2a:ad:68:6e:bf:59:e1:93:b8:
37:e6:20:21:1a:c8:d7:03:dc:e1:02:12:ee:c0:2d:b6:4a:69:
52:81:c3:00:5c:1a:24:81:82:5c:57:4d:b3:f4:27:b9:3c:f4:
f5:34:c0:26:47:8c:ab:13:95:03:9c:af:56:33:af:33:08:00:
2b:60:4c:ff:c5:a9:28:2d:7b:88:4f:20:cc:a9:42:67:ea:c7:
84:67:3c:71:81:7d:52:58:53:30:30:27:b7:00:a3:b9:f7:2c:
16:45:a7:93:5d:8f:35:10:c2:d0:73:f2:09:9a:0b:11:d8:2e:
5b:76:ae:35:fc:25:65:6d:37:64:06:ca:58:ab:19:1a:07:b6:
5e:97:1e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:43:25 2026 by rpki-client