
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft
File: Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft (raw, json)
Hash identifier: z9qxwB/6SWhTD1/MJm2ZSTniakGTiSVS5zPlNZDagQ8=
Subject key identifier: 15:DD:8A:8B:F9:27:65:A4:B4:EE:66:DA:3D:E5:93:B3:D6:2D:1F:A8
Authority key identifier: 15:FA:5F:E8:35:82:6A:BA:0C:8C:67:65:08:09:BD:C9:34:41:27:B0
Certificate issuer: /CN=A918D1BD/serialNumber=15FA5FE835826ABA0C8C67650809BDC9344127B0
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft
Manifest number: 88
Signing time: Fri 03 Jul 2026 08:21:56 +0000
Manifest this update: Fri 03 Jul 2026 08:21:56 +0000
Manifest next update: Fri 10 Jul 2026 08:21:56 +0000
Files and hashes: 1: Ffpf6DWCaroMjGdlCAm9yTRBJ7A.crl (hash: fIXsYx4Sps48y3Z3LjZI1+lvnKY50ZEo1LoDwop9V8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.crl
rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 Jul 2026 08:21:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D1BD, serialNumber=15FA5FE835826ABA0C8C67650809BDC9344127B0
Validity
Not Before: Jul 3 08:21:56 2026 GMT
Not After : Jul 10 08:21:56 2026 GMT
Subject: CN=6a477124-f122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:55:c2:f8:3f:ac:9f:e3:13:0f:f2:05:b3:5b:
9a:33:68:95:92:5a:d4:fd:2d:69:fe:a5:12:f1:6b:
98:e2:15:8e:69:be:62:56:db:5a:2a:3c:58:0b:b1:
c3:e9:a0:4c:1a:ab:24:9b:16:91:21:7f:d7:20:0a:
b1:19:70:61:69:88:9f:1d:b5:d3:18:23:65:42:d3:
f0:9a:2c:64:e7:db:bc:59:76:98:32:47:d3:ee:d3:
5c:43:7a:2b:d6:36:bc:50:61:9a:d3:5c:a0:cc:49:
0c:01:25:04:04:46:c8:52:31:28:86:96:fc:9c:27:
dd:da:55:64:d4:e1:89:c3:f0:29:e1:7e:c0:88:fc:
fe:bc:4d:b1:80:ad:80:41:e7:97:a5:2b:9a:d1:13:
90:7b:3f:dd:1a:77:e3:ad:e6:44:01:76:44:61:27:
cd:50:cd:f4:72:a7:1e:95:7a:02:fc:ec:fd:d1:99:
e9:2a:c2:4b:fe:e4:ac:16:5c:7a:b5:e5:8c:2f:ad:
63:c2:e6:90:81:6a:53:48:d4:72:0d:ba:07:7e:d5:
3c:66:3e:e8:80:48:98:bf:30:a7:74:3f:1f:da:da:
08:c8:0e:40:8d:be:83:96:fb:c3:f9:86:8b:c5:3a:
60:d4:ca:c9:af:5c:5d:bb:ad:3c:af:13:f9:eb:e1:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DD:8A:8B:F9:27:65:A4:B4:EE:66:DA:3D:E5:93:B3:D6:2D:1F:A8
X509v3 Authority Key Identifier:
keyid:15:FA:5F:E8:35:82:6A:BA:0C:8C:67:65:08:09:BD:C9:34:41:27:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:2c:0c:1a:53:b1:52:2d:d9:7c:92:fd:4b:9c:49:21:fd:90:
57:7b:be:49:81:71:29:38:08:af:7e:4c:39:ff:1d:67:18:45:
87:43:64:73:39:cf:f5:20:e2:ea:85:d8:b1:f8:52:e8:bb:f2:
46:bd:1e:1c:d5:7c:ff:3a:65:7a:31:c2:b6:55:8a:39:96:dd:
bc:69:f8:16:72:00:8a:6e:22:4c:92:26:6a:6f:3a:89:5d:60:
7f:d6:b4:fa:24:43:d7:ea:1e:01:65:78:66:b4:fe:b0:7a:0e:
07:36:11:b4:02:77:80:43:47:6d:66:83:9e:f6:72:60:6a:ce:
bb:44:45:a2:0f:f0:f2:84:03:c5:19:9a:36:af:62:ae:0e:50:
e2:f3:df:03:84:86:2b:e9:76:fa:8d:3d:50:df:71:ab:a1:9f:
9c:bb:54:94:f3:e8:17:b9:7f:76:3d:90:e7:a9:f9:3e:c9:78:
b8:5d:b5:1f:98:26:6f:8f:76:f4:17:3b:47:a6:c7:b8:eb:03:
f0:75:d8:d2:ae:84:55:b8:1e:49:0f:94:d0:0c:88:de:ca:3e:
68:33:a5:b1:3c:7e:38:f2:e6:23:4a:c2:b0:3d:71:e6:46:54:
0d:13:06:63:62:66:32:e1:51:5c:48:9e:38:bc:6c:e0:83:10:
74:e5:bf:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQxQkQxMTAvBgNVBAUTKDE1RkE1RkU4MzU4MjZBQkEwQzhDNjc2NTA4MDlCREM5
MzQ0MTI3QjAwHhcNMjYwNzAzMDgyMTU2WhcNMjYwNzEwMDgyMTU2WjAYMRYwFAYD
VQQDEw02YTQ3NzEyNC1mMTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA31XC+D+sn+MTD/IFs1uaM2iVklrU/S1p/qUS8WuY4hWOab5iVttaKjxYC7HD
6aBMGqskmxaRIX/XIAqxGXBhaYifHbXTGCNlQtPwmixk59u8WXaYMkfT7tNcQ3or
1ja8UGGa01ygzEkMASUEBEbIUjEohpb8nCfd2lVk1OGJw/Ap4X7AiPz+vE2xgK2A
QeeXpSua0ROQez/dGnfjreZEAXZEYSfNUM30cqcelXoC/Oz90ZnpKsJL/uSsFlx6
teWML61jwuaQgWpTSNRyDboHftU8Zj7ogEiYvzCndD8f2toIyA5Ajb6DlvvD+YaL
xTpg1MrJr1xdu608rxP56+GGywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBXdiov5
J2WktO5m2j3lk7PWLR+oMB8GA1UdIwQYMBaAFBX6X+g1gmq6DIxnZQgJvck0QSew
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDFCRC9CMTc4QTYyNEE3
NjIxMUYwOEZERTM0MTNDNEY5QUUwMi9GZnBmNkRXQ2Fyb01qR2RsQ0FtOXlUUkJK
N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZmcGY2RFdDYXJvTWpHZGxDQW05eVRSQko3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDFCRC9CMTc4QTYyNEE3NjIxMUYwOEZERTM0MTNDNEY5QUUwMi9GZnBmNkRXQ2Fy
b01qR2RsQ0FtOXlUUkJKN0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAliwMGlOxUi3ZfJL9S5xJIf2QV3u+SYFxKTgIr35MOf8dZxhFh0NkcznP9SDi
6oXYsfhS6LvyRr0eHNV8/zplejHCtlWKOZbdvGn4FnIAim4iTJImam86iV1gf9a0
+iRD1+oeAWV4ZrT+sHoOBzYRtAJ3gENHbWaDnvZyYGrOu0RFog/w8oQDxRmaNq9i
rg5Q4vPfA4SGK+l2+o09UN9xq6GfnLtUlPPoF7l/dj2Q56n5Psl4uF21H5gmb492
9Bc7R6bHuOsD8HXY0q6EVbgeSQ+U0AyI3so+aDOlsTx+OPLmI0rCsD1x5kZUDRMG
Y2JmMuFRXEieOLxs4IMQdOW/KQ==
-----END CERTIFICATE-----
Generated at Sun Jul 5 08:40:20 2026 by rpki-client