
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft
File: fcRirz5ieKghiQWhs-fbN_LveoI.mft (raw, json)
Hash identifier: vHUU1hH4T1Ldqxl9e2nh6X4G7nQ5peCJfy2j0MekH0E=
Subject key identifier: 54:BD:83:B7:AD:A7:4A:06:AC:ED:62:FD:94:2B:05:C2:E7:F2:7C:01
Authority key identifier: 7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82
Certificate issuer: /CN=A915B598/serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82
Certificate serial: 0D0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft
Manifest number: 0D00
Signing time: Wed 20 May 2026 18:12:22 +0000
Manifest this update: Wed 20 May 2026 18:12:21 +0000
Manifest next update: Wed 27 May 2026 18:12:21 +0000
Files and hashes: 1: fcRirz5ieKghiQWhs-fbN_LveoI.crl (hash: Cth8I5Sp5gNl3fVXDeORV9uIfNXxrqLvjvaOUA9e7j8=)
2: ED6D9A0C047211EAA9BAFB77C4F9AE02.roa (hash: d3fV09yCUPav/zzP6200CpH67X1hYTUcY6e5MwD+Xv8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl
rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 18:12:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3338 (0xd0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B598, serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82
Validity
Not Before: May 20 18:12:21 2026 GMT
Not After : May 27 18:12:21 2026 GMT
Subject: CN=6a0df986-3938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3d:3e:8c:c9:ab:63:ee:41:e2:25:f5:c9:a7:
05:24:3d:df:c3:6a:a4:f2:89:cc:71:2e:17:bc:b1:
6b:bb:fe:41:1c:a8:11:d5:89:90:7f:49:62:bc:13:
16:41:3e:cc:ce:4b:e3:2e:f0:4d:c8:c7:6d:17:ed:
38:3f:96:b3:80:8f:c8:0e:a2:5c:f3:2c:e8:ab:57:
f3:73:ec:ae:3e:46:35:48:d5:76:8c:56:fe:01:1f:
9a:38:e8:d3:f9:7d:bb:36:72:5e:de:d0:bd:3f:7b:
c4:65:03:82:9a:e1:5c:8d:96:1d:43:37:e2:c4:39:
40:30:ac:d5:fd:ab:c2:54:dc:55:b3:2f:28:40:a0:
7b:6d:a7:4e:8b:f0:f1:2f:f9:2c:47:2e:4d:a0:ef:
17:22:72:01:5a:32:1a:1b:0a:d4:b4:dc:4a:b3:d1:
bb:01:1f:48:6c:f0:f6:78:25:3a:3b:eb:c4:89:75:
a1:64:5c:3d:2a:02:a9:d5:dc:25:35:11:0d:5c:b5:
45:1c:54:55:10:f9:ef:77:c3:12:e7:df:a1:33:62:
f0:1a:fb:77:b2:ce:70:76:69:32:08:4a:17:1f:82:
a4:ee:84:b7:a4:02:0e:8b:25:e3:be:8e:7f:46:44:
f0:d1:6a:86:4e:8f:30:11:08:1d:78:31:0e:38:e0:
e1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BD:83:B7:AD:A7:4A:06:AC:ED:62:FD:94:2B:05:C2:E7:F2:7C:01
X509v3 Authority Key Identifier:
keyid:7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:31:9a:5a:3a:a9:93:68:08:97:2c:e6:b4:ba:11:2d:51:39:
b5:c4:30:78:a2:e9:b3:54:b3:9c:36:52:ee:94:1e:4b:71:4d:
75:a6:f6:85:55:b0:88:4c:6d:d9:ca:bf:4c:a8:4c:73:ab:c2:
c3:28:08:83:0a:94:bc:87:82:87:4b:fd:62:23:19:f9:3a:5e:
a8:3b:54:a0:b1:21:c1:4d:d3:0f:ba:f8:6e:19:5e:35:8d:ae:
bd:84:ae:f3:e5:c4:2d:cc:c5:6c:8c:94:7b:9a:8e:4b:9b:61:
d6:59:5e:18:99:d6:bc:8f:68:c0:90:b6:da:ca:c1:06:c0:b7:
1e:04:8f:e8:56:c7:e5:46:f9:0b:87:ce:75:94:47:2f:60:66:
f8:7c:78:61:db:2c:16:fd:88:f4:d6:e3:5a:c7:cc:10:c4:e7:
77:03:44:c3:52:c7:93:a2:cb:03:a5:83:82:08:57:cf:75:6d:
2b:41:92:cd:9c:97:e3:96:26:e5:ad:1f:8f:e3:09:cd:43:6f:
92:e8:cf:d1:de:20:6c:ac:f4:f1:97:0d:9c:5f:f5:54:d3:99:
3d:50:a4:c6:fb:c0:0f:b1:37:cf:99:2b:a6:60:88:d7:e1:9f:
70:bb:b0:23:e6:d6:6f:4f:7e:f2:bf:80:59:9f:50:43:61:6f:
eb:d3:6e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:12 2026 by rpki-client