
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
File: FFiKS-nrikuZgtGyXesMYHOK77s.mft (raw, json)
Hash identifier: XR9xXqOREiLDgkecJdpjMkguC1LfeV620r+W1ohsU60=
Subject key identifier: 78:64:FB:67:CF:DA:48:63:33:D1:B3:13:D5:BB:32:21:61:05:5E:22
Authority key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
Certificate issuer: /CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
Certificate serial: 0358
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
Manifest number: 034E
Signing time: Tue 23 Jun 2026 01:02:35 +0000
Manifest this update: Tue 23 Jun 2026 01:02:34 +0000
Manifest next update: Tue 30 Jun 2026 01:02:34 +0000
Files and hashes: 1: FFiKS-nrikuZgtGyXesMYHOK77s.crl (hash: GwdR6qFtwSS+JfWDgNq/eBIklFYhyJ0D9PGNS/u2UkI=)
2: 4D942BCE08A011ED8AD21272C4F9AE02.roa (hash: jgftd+/9ZeJs/SIOse//P6waVUAgX808BhHUM0pG+LE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl
rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 01:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 856 (0x358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9CE4, serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
Validity
Not Before: Jun 23 01:02:34 2026 GMT
Not After : Jun 30 01:02:34 2026 GMT
Subject: CN=6a39db2b-5748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b8:4f:72:34:df:f1:28:42:ee:a9:3d:3a:4d:
ad:bd:e3:b3:4b:f5:aa:db:d2:1b:1b:f1:39:6f:25:
25:39:5e:7d:8b:38:2d:72:52:cb:f5:a5:a0:54:d6:
32:fc:20:90:f8:e2:f9:dc:85:7c:06:fa:9e:6e:a2:
d7:54:71:62:4f:f0:8e:f9:8e:84:8f:94:da:38:af:
4d:36:25:5a:02:6f:ac:31:44:a6:88:fd:e7:7f:d8:
97:55:8b:1e:74:ac:6a:04:1d:ee:71:ca:b6:cf:36:
97:aa:4e:e9:0c:cb:d3:9f:e5:96:0d:c5:3d:ef:33:
7a:f2:84:59:63:47:12:49:d9:f0:b5:b9:9d:52:79:
69:ca:d7:76:e9:11:fa:17:ba:6a:0b:13:a1:3a:54:
cf:e0:a6:8f:ed:eb:e7:90:a1:9c:30:aa:43:8c:2c:
df:f6:04:77:6c:b1:47:54:e9:2a:34:04:f1:47:6b:
38:cc:d7:0c:cc:62:52:d5:3a:a8:82:1f:37:f5:14:
31:14:d7:1a:d9:cf:bf:48:6a:e4:c2:f8:24:c8:2b:
f3:a8:4e:fe:09:50:c9:3c:90:a2:80:c9:d4:5b:8e:
cc:d3:ed:68:0d:aa:45:47:ff:9d:d1:1f:89:ec:8e:
28:99:1a:be:e2:28:28:39:a1:e8:79:f0:a4:35:bd:
20:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:64:FB:67:CF:DA:48:63:33:D1:B3:13:D5:BB:32:21:61:05:5E:22
X509v3 Authority Key Identifier:
keyid:14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:7a:05:53:8c:00:57:8b:aa:46:91:a2:80:14:6c:2d:d2:12:
4c:ca:f6:e8:9f:45:7b:b8:45:8d:b5:17:83:4d:38:73:d5:05:
5a:0e:32:60:db:8b:c0:30:dd:45:83:cc:bf:2e:77:91:29:81:
0f:1c:82:66:6f:4c:86:85:39:64:8b:f8:1c:be:fa:02:ce:59:
7f:00:92:b9:24:f0:90:32:17:0d:f7:ce:26:cf:f7:48:b8:0d:
5f:13:67:b4:cf:bf:58:26:74:d5:b9:9b:a8:14:ec:87:dd:4f:
95:20:ff:d5:9f:c1:60:6f:d0:df:b5:45:6a:16:87:e9:eb:cc:
27:55:e0:61:c4:d3:c0:b6:99:44:45:02:8d:35:1c:82:79:e8:
f6:a1:2b:02:fa:93:06:5e:b4:0c:b4:67:51:13:71:ff:ec:8f:
85:00:c3:7f:c0:26:52:0b:4b:15:67:aa:7c:6c:4c:c4:cb:84:
a6:da:0f:fc:de:44:24:56:2b:cd:d1:ce:28:b8:a6:61:89:8e:
26:1c:5d:74:a3:d5:02:cf:e3:3f:94:69:5b:b3:0e:34:06:51:
42:56:f9:57:32:3a:c9:ea:4b:f0:50:4d:a3:fb:d0:4f:0d:a7:
fa:a8:f0:31:7e:0f:71:95:c4:5e:82:96:47:1d:f2:dc:c0:6a:
58:a9:12:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTlDRTQxMTAvBgNVBAUTKDE0NTg4QTRCRTlFQjhBNEI5OTgyRDFCMjVERUIwQzYw
NzM4QUVGQkIwHhcNMjYwNjIzMDEwMjM0WhcNMjYwNjMwMDEwMjM0WjAYMRYwFAYD
VQQDEw02YTM5ZGIyYi01NzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzrhPcjTf8ShC7qk9Ok2tveOzS/Wq29IbG/E5byUlOV59izgtclLL9aWgVNYy
/CCQ+OL53IV8BvqebqLXVHFiT/CO+Y6Ej5TaOK9NNiVaAm+sMUSmiP3nf9iXVYse
dKxqBB3uccq2zzaXqk7pDMvTn+WWDcU97zN68oRZY0cSSdnwtbmdUnlpytd26RH6
F7pqCxOhOlTP4KaP7evnkKGcMKpDjCzf9gR3bLFHVOkqNATxR2s4zNcMzGJS1Tqo
gh839RQxFNca2c+/SGrkwvgkyCvzqE7+CVDJPJCigMnUW47M0+1oDapFR/+d0R+J
7I4omRq+4igoOaHoefCkNb0gtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHhk+2fP
2khjM9GzE9W7MiFhBV4iMB8GA1UdIwQYMBaAFBRYikvp64pLmYLRsl3rDGBziu+7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUNFNC82OUNDQjVCQzA4
OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlrdVpndEd5WGVzTVlIT0s3
N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZGaUtTLW5yaWt1Wmd0R3lYZXNNWUhPSzc3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OUNFNC82OUNDQjVCQzA4OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlr
dVpndEd5WGVzTVlIT0s3N3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2HoFU4wAV4uqRpGigBRsLdISTMr26J9Fe7hFjbUXg004c9UFWg4yYNuLwDDd
RYPMvy53kSmBDxyCZm9MhoU5ZIv4HL76As5ZfwCSuSTwkDIXDffOJs/3SLgNXxNn
tM+/WCZ01bmbqBTsh91PlSD/1Z/BYG/Q37VFahaH6evMJ1XgYcTTwLaZREUCjTUc
gnno9qErAvqTBl60DLRnURNx/+yPhQDDf8AmUgtLFWeqfGxMxMuEptoP/N5EJFYr
zdHOKLimYYmOJhxddKPVAs/jP5RpW7MONAZRQlb5VzI6yepL8FBNo/vQTw2n+qjw
MX4PcZXEXoKWRx3y3MBqWKkS4A==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:07 2026 by rpki-client