
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
File: 1FgFH22pUil0dbSEvd0Pu-NJDnA.mft (raw, json)
Hash identifier: NF2nD8mLsMvR5AczYsRp0L7vextNyTNX/RWsiN8DAao=
Subject key identifier: 7D:D1:03:A0:6D:88:8A:4B:5E:9F:FD:21:0A:5F:87:E2:B9:BD:39:54
Authority key identifier: D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70
Certificate issuer: /CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
Certificate serial: 07E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
Manifest number: 07CC
Signing time: Sat 04 Apr 2026 21:13:51 +0000
Manifest this update: Sat 04 Apr 2026 21:13:51 +0000
Manifest next update: Sat 11 Apr 2026 21:13:51 +0000
Files and hashes: 1: 1FgFH22pUil0dbSEvd0Pu-NJDnA.crl (hash: UBAqmAs/uloGtAdM+Zgzvy2CjfMs9nJ2SqPyUIHYy0U=)
2: 9B5A7020522911ED9136DF2AC4F9AE02.roa (hash: wL5klU0gTHBSEvYuVpYefW4LX2bmQfObj9oZvz3lNYo=)
3: A156AB48195E11F0A64EF837C4F9AE02.roa (hash: 4itdgnokjreqGm34fiN0BjbU5Y5cTecgH1DKcBRHiBU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl
rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2022 (0x7e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D85E, serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
Validity
Not Before: Apr 4 21:13:51 2026 GMT
Not After : Apr 11 21:13:51 2026 GMT
Subject: CN=69d17f0f-951a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fa:92:f9:37:ce:1e:79:85:20:d0:fc:ff:9e:
da:9d:1a:25:f2:e7:c6:8b:a4:f8:0c:6c:cc:d8:a5:
35:6a:f6:f6:db:51:df:2d:5c:8a:64:ae:7f:b5:5f:
52:72:42:25:a3:72:92:15:24:fa:d7:fc:e8:5a:26:
2a:48:48:48:3c:fb:e0:70:2e:93:68:97:33:cb:0e:
68:69:13:4e:0b:a2:a3:30:0c:6f:aa:a9:3d:5a:fc:
05:0c:71:01:38:27:d5:f4:29:3e:87:30:1f:dd:4c:
95:5a:18:8f:b2:39:ca:33:c2:d9:ee:2a:a1:e0:3a:
2e:3f:9e:dd:af:46:a3:8a:b7:0b:c3:4b:d1:47:f9:
94:78:16:ef:11:15:e7:9d:87:aa:b2:fb:f7:20:0b:
fd:5b:9a:ba:2b:45:a4:5b:aa:73:ea:4c:e7:83:cf:
63:2b:04:1e:51:26:90:64:e6:c6:d9:4e:aa:ed:31:
6a:1d:f7:18:75:2c:37:69:a0:04:32:2e:49:2d:50:
1a:f0:2f:39:46:07:5d:ce:5e:82:4b:c5:3d:70:13:
68:a1:c5:a0:16:fb:b6:71:f7:0e:2c:96:18:99:53:
a1:39:6c:6c:12:e1:24:9a:aa:42:a0:4e:43:04:e5:
68:b4:d5:98:54:fc:65:9c:0b:e1:05:1f:9f:a5:f0:
2b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D1:03:A0:6D:88:8A:4B:5E:9F:FD:21:0A:5F:87:E2:B9:BD:39:54
X509v3 Authority Key Identifier:
keyid:D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:c2:c7:a9:b3:37:72:9d:91:b6:3c:e2:8e:c5:2f:d7:01:16:
25:19:2f:22:75:d9:a8:27:ae:18:f1:b8:57:00:37:8f:ad:a0:
a4:45:14:26:15:f8:d6:f3:22:12:a2:f3:2c:61:11:d0:d5:86:
ce:9a:06:c7:d1:cd:8d:38:ce:05:6c:0a:b7:b7:d5:03:d8:de:
fc:51:7b:18:4b:fc:ac:e8:8a:60:86:08:46:66:b9:a4:f1:dd:
9a:26:63:6e:5c:6b:fb:6a:82:6e:29:65:8a:75:74:be:ef:44:
3d:95:18:65:ef:81:92:ea:80:4a:f9:81:f5:f6:82:c6:99:06:
17:5e:27:02:76:c6:79:01:06:bd:45:55:99:a1:40:49:ea:94:
9f:b6:de:4d:c1:d0:86:c5:dd:27:f4:02:69:54:48:98:83:2f:
bd:9e:b5:a3:e1:c8:67:78:1b:56:ce:5e:49:82:5a:e6:93:d7:
89:25:6f:00:af:d4:cf:b3:79:25:7e:cb:e3:0e:b7:89:ed:ca:
a9:29:dd:ee:38:ec:f3:21:90:00:ed:b2:c8:98:9b:6c:06:fc:
34:05:18:64:6c:b4:27:51:d1:5e:f6:23:fb:e2:4f:ee:55:6c:
1d:af:71:2f:52:25:18:89:9f:5f:c9:12:54:25:80:0d:a0:8b:
ee:91:73:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ4NUUxMTAvBgNVBAUTKEQ0NTgwNTFGNkRBOTUyMjk3NDc1QjQ4NEJEREQwRkJC
RTM0OTBFNzAwHhcNMjYwNDA0MjExMzUxWhcNMjYwNDExMjExMzUxWjAYMRYwFAYD
VQQDEw02OWQxN2YwZi05NTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4vqS+TfOHnmFIND8/57anRol8ufGi6T4DGzM2KU1avb221HfLVyKZK5/tV9S
ckIlo3KSFST61/zoWiYqSEhIPPvgcC6TaJczyw5oaRNOC6KjMAxvqqk9WvwFDHEB
OCfV9Ck+hzAf3UyVWhiPsjnKM8LZ7iqh4DouP57dr0ajircLw0vRR/mUeBbvERXn
nYeqsvv3IAv9W5q6K0WkW6pz6kzng89jKwQeUSaQZObG2U6q7TFqHfcYdSw3aaAE
Mi5JLVAa8C85Rgddzl6CS8U9cBNoocWgFvu2cfcOLJYYmVOhOWxsEuEkmqpCoE5D
BOVotNWYVPxlnAvhBR+fpfArcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH3RA6Bt
iIpLXp/9IQpfh+K5vTlUMB8GA1UdIwQYMBaAFNRYBR9tqVIpdHW0hL3dD7vjSQ5w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDg1RS83M0VGOTA5QzNC
QjUxMUVCQjREMTM3N0RDNEY5QUUwMi8xRmdGSDIycFVpbDBkYlNFdmQwUHUtTkpE
bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFGZ0ZIMjJwVWlsMGRiU0V2ZDBQdS1OSkRuQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDg1RS83M0VGOTA5QzNCQjUxMUVCQjREMTM3N0RDNEY5QUUwMi8xRmdGSDIycFVp
bDBkYlNFdmQwUHUtTkpEbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARMLHqbM3cp2RtjzijsUv1wEWJRkvInXZqCeuGPG4VwA3j62gpEUUJhX41vMi
EqLzLGER0NWGzpoGx9HNjTjOBWwKt7fVA9je/FF7GEv8rOiKYIYIRma5pPHdmiZj
blxr+2qCbillinV0vu9EPZUYZe+BkuqASvmB9faCxpkGF14nAnbGeQEGvUVVmaFA
SeqUn7beTcHQhsXdJ/QCaVRImIMvvZ61o+HIZ3gbVs5eSYJa5pPXiSVvAK/Uz7N5
JX7L4w63ie3KqSnd7jjs8yGQAO2yyJibbAb8NAUYZGy0J1HRXvYj++JP7lVsHa9x
L1IlGImfX8kSVCWADaCL7pFzIw==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:52 2026 by rpki-client