
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
File: 1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json)
Hash identifier: n480Mcp+QEYi0N2nqMhLjOqyu90URT1Mg4oAqndYttc=
Subject key identifier: B4:9A:0B:F3:0C:48:12:F6:D8:6B:B7:9B:97:75:49:0B:94:A5:35:53
Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Certificate serial: 01FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
Manifest number: 01D5
Signing time: Fri 19 Jun 2026 03:55:40 +0000
Manifest this update: Fri 19 Jun 2026 03:55:39 +0000
Manifest next update: Fri 26 Jun 2026 03:55:39 +0000
Files and hashes: 1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: E2QA/8F/Qh8LxgAs8YkuGUmx6XI6RFgyiJegl72u9Xk=)
2: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: ozs9i/euuZ75VUP6nxuqwBDiZfQIs7H9cQGCWKxhgPs=)
3: A17C3508168911EFBF38F580C4F9AE02.roa (hash: lERVsj7ZnxrnEf9TOgtovUJSwTh4Gsu5+Sq5arEpLic=)
4: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: DHViFPvNbWRkbmTAti4Bf+7PoBd6798WiZLchdU3w8g=)
5: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: X7fAABSVSD+9LU6mpGruwkT6PSiZnr5qD+C8yW0gUJw=)
6: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: UdYA7ysQTtwuAPvC1szdIQjTM7ruBUjRZwFCktSblQQ=)
7: FC98D5921DD311F1A4A9CCCC0B3D8C67.roa (hash: k8lZ7CX7mgq/3LVgfyzktUqzG5SajWKj3uNNsmVcBrg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Jun 2026 03:55:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Validity
Not Before: Jun 19 03:55:39 2026 GMT
Not After : Jun 26 03:55:39 2026 GMT
Subject: CN=6a34bdbc-fc18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:55:fe:52:0a:b0:fa:f9:7c:b2:56:78:0a:
d4:34:0f:f5:34:b0:15:a2:12:7d:1a:4c:90:9f:26:
49:a9:54:5d:ca:a9:56:bd:33:31:b3:ec:ae:ec:20:
e6:c9:28:8a:bd:a8:04:f2:0d:63:ee:29:15:99:49:
e2:70:33:28:83:6f:81:9c:cb:5b:7c:30:68:60:8f:
fa:7f:1f:12:cc:c2:94:b8:1d:78:d3:b4:82:bc:36:
f3:a4:e0:cd:05:24:0e:93:0e:99:71:c8:69:e3:60:
92:cf:03:99:20:ff:3a:09:0f:34:aa:af:3f:61:24:
b9:26:e7:8d:6b:6f:42:23:3e:47:b8:70:48:70:f8:
f9:29:84:fd:7b:14:3f:3f:04:67:9a:13:a5:f8:6f:
03:bc:46:fc:05:bf:71:b3:59:23:f5:19:9c:65:52:
6d:d9:bf:a2:64:34:fc:33:2a:01:86:60:e2:56:2f:
16:0c:bb:f6:c9:13:03:39:1e:c9:a4:05:62:8f:06:
e7:96:5d:38:c4:3e:05:08:0d:c9:56:23:95:1c:bc:
95:25:12:27:d6:ca:5f:9b:17:23:f2:92:92:04:93:
69:f0:72:79:72:30:0c:6e:ac:af:d2:45:9d:a6:ea:
8d:94:fe:ba:bf:90:d8:65:77:87:be:36:16:c5:9b:
e5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9A:0B:F3:0C:48:12:F6:D8:6B:B7:9B:97:75:49:0B:94:A5:35:53
X509v3 Authority Key Identifier:
keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:42:2b:0b:44:11:3f:b5:19:a5:76:88:c2:34:a7:cf:7d:8c:
08:dd:a9:07:17:db:6f:7a:a9:c2:7c:9b:48:af:d6:d3:9a:b8:
dd:58:38:c9:11:6b:d6:36:b1:53:96:0c:04:f7:00:2b:43:cc:
25:67:92:3d:57:6c:96:68:28:dc:1b:bc:35:6a:59:6f:9a:d7:
3a:45:75:85:04:65:8f:ed:7f:d9:e0:a7:07:91:a9:62:ea:31:
b0:a2:ab:f6:ab:b7:95:db:20:b1:c3:20:91:78:40:86:d2:fa:
74:d3:5b:c7:6c:b5:5c:ed:77:fc:64:c5:f4:f8:13:38:3f:0f:
b0:2c:7c:0a:2a:ca:3a:69:60:17:c9:69:d0:d7:3f:c4:19:fd:
8f:e6:ef:42:9a:85:de:41:df:5b:37:93:d8:d0:33:6f:87:56:
64:ba:34:2e:2d:92:09:85:67:e6:0f:43:e5:6e:1d:50:cb:d3:
0a:df:01:ed:3c:a6:95:41:a2:24:d0:d6:1d:e2:69:ff:c5:be:
19:c0:a2:cb:10:20:3a:36:15:28:f4:81:07:63:44:4b:ec:df:
cb:c3:25:62:7f:80:ed:8f:e8:c9:c4:d8:34:a6:09:9e:28:8d:
fe:70:50:bb:46:b4:0a:63:fd:05:e6:d8:86:84:a1:8d:4d:fc:
a4:f5:99:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 17:26:06 2026 by rpki-client