
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
File: 1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json)
Hash identifier: otAVRuo3uoQqe5/JpVeEiogP1jPpEOt1miLFA4+UzbQ=
Subject key identifier: 08:08:2B:F5:F3:48:E2:7E:38:7E:09:F4:B4:E0:27:7A:DB:69:89:51
Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Certificate serial: 021D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
Manifest number: 01EF
Signing time: Wed 05 Aug 2026 04:43:37 +0000
Manifest this update: Wed 05 Aug 2026 04:43:36 +0000
Manifest next update: Wed 12 Aug 2026 04:43:36 +0000
Files and hashes: 1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: FyYfZkhZrdssMSnBH6ItlsYf3cAfzuGTJgC8hquZflA=)
2: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: X0b3ZN/Eb7T73dnsboUoSmhWFfXS5G0F5wbtUheErQY=)
3: A17C3508168911EFBF38F580C4F9AE02.roa (hash: virvE8MNeacbpPBupuEDzS3TVIUvnhiLbybl98L+CAc=)
4: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: 0fG/vVdhETGxvUxsnTXZR1Zd2MfoUspa8W6pNyP2sU0=)
5: FC98D5921DD311F1A4A9CCCC0B3D8C67.roa (hash: ++fsQ0/jJTKdEu1JkASqMR02WrvMLM0KHw5n4mNel4A=)
6: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: tsA6mcx7ucUTughH+97Dx7IXBusCUvi+yLFT4jUjZ20=)
7: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: CA0JuNkvVVXyVT5toC5IeijiB5JBV7T65rHh34RkVIc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Aug 2026 04:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Validity
Not Before: Aug 5 04:43:36 2026 GMT
Not After : Aug 12 04:43:36 2026 GMT
Subject: CN=6a72bf79-03e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:64:2d:f0:2e:e8:6b:38:f9:9e:c4:16:ac:95:
17:63:0e:b6:8f:f8:0f:e9:5e:89:06:88:c8:dd:ff:
6d:a1:be:17:b7:31:36:eb:ba:c6:21:68:ff:64:4b:
a2:9a:e8:1f:ea:6f:4f:d6:f2:ce:28:e9:93:85:21:
47:98:b0:77:e7:56:56:56:cc:1c:c2:b1:59:59:1a:
95:d8:e2:46:8d:9b:bb:81:30:22:b3:47:58:2a:c8:
ef:f1:bf:7e:b8:78:93:aa:6e:de:36:e2:39:e1:71:
4d:a7:b5:12:0a:60:51:9d:eb:c3:3c:81:89:3f:0e:
66:62:62:20:a1:97:4d:1f:b5:c6:21:6e:61:44:2d:
58:0c:e5:fc:8d:58:99:c8:f0:29:c1:75:04:47:60:
37:67:4e:b6:69:0a:76:d6:8c:25:b1:c1:ae:00:ec:
6b:27:09:dc:6e:26:be:a0:19:36:03:f6:c7:c4:0e:
3f:39:7c:99:31:09:fc:03:fe:6a:2c:e9:28:83:cd:
72:61:57:53:16:f1:63:65:46:82:a0:e0:bf:b3:94:
0c:ce:4c:96:b5:7e:69:17:5d:c9:03:e6:e3:fa:a0:
0c:4b:ed:13:ff:84:9b:e9:8d:9a:79:df:58:ea:11:
2c:f9:f1:2d:88:d8:32:5c:e1:29:4a:f0:3a:70:27:
76:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:08:2B:F5:F3:48:E2:7E:38:7E:09:F4:B4:E0:27:7A:DB:69:89:51
X509v3 Authority Key Identifier:
keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:fc:64:63:a4:25:d9:4f:c3:3e:a3:cd:3f:07:32:0c:ae:74:
24:78:0a:06:62:6b:f0:b3:8e:6e:1e:41:03:b0:9e:35:9b:a4:
f2:9d:b1:ac:d9:09:72:77:38:a8:c0:b6:ef:0e:62:84:cc:23:
9f:2b:1f:49:8d:bd:c5:6a:d5:82:14:62:51:7e:39:1b:39:ff:
a4:ab:25:d9:9e:ea:89:cf:80:a1:06:63:2f:83:f9:1c:3a:b2:
13:71:e9:c7:b6:25:42:0d:2c:2b:67:5d:c2:11:53:51:70:aa:
ff:91:f6:2f:66:e6:ce:6f:54:70:75:71:21:6e:d9:c6:9a:22:
77:5f:88:51:2f:16:99:33:78:33:6e:5f:fc:52:c0:51:da:fe:
33:66:59:44:95:6a:66:a0:c2:d9:ff:b6:40:02:12:a4:e1:3d:
25:5b:d8:9b:11:1b:75:56:90:7b:8c:74:0a:d3:45:de:25:d8:
af:80:07:6a:e1:9a:de:4f:33:96:48:26:dd:f1:da:e5:8e:3f:
f0:77:f2:bc:27:94:f0:93:18:2f:00:59:4f:a7:ee:d3:91:01:
6a:6e:ba:60:d2:6d:65:cf:d3:3f:c9:59:ee:be:98:cc:01:94:
db:d4:04:00:02:22:74:cf:8f:13:0f:43:a7:fc:46:1c:c4:91:
b9:25:94:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 18:58:35 2026 by rpki-client