
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
File: aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json)
Hash identifier: SBG/i+KTwBmERVCbhTIY9RywjKAFiUcfdoLi1Tu2X/0=
Subject key identifier: F7:F5:BE:7E:2A:64:DC:54:5B:99:95:62:30:6B:90:AF:8E:CE:6D:1C
Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D
Certificate issuer: /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
Certificate serial: 359F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
Manifest number: 3579
Signing time: Wed 12 Aug 2026 15:13:45 +0000
Manifest this update: Wed 12 Aug 2026 15:13:44 +0000
Manifest next update: Wed 19 Aug 2026 15:13:44 +0000
Files and hashes: 1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: Dels6qTrKXeReg9uaOubAWAdOWqS7b+4PANoiDBYKhI=)
2: Gbm9aJwn4Grd0bUlvCyB3YP5o-E.asa (hash: GfzS/0sFUcU3nk0Xd84HKIBNrFFblmJGFMfuUp5nQmE=)
3: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: FGtCl+rkKsPwQBZaBP2SI6ZyzxIcUGM879HPiMEoLJQ=)
4: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: RQy3CULDGNVnkWRkKUELBca0bv/+qjtto2dvJUv9MVk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl
rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 19 Aug 2026 15:13:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13727 (0x359f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C1FE, serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
Validity
Not Before: Aug 12 15:13:44 2026 GMT
Not After : Aug 19 15:13:44 2026 GMT
Subject: CN=6a7c8da9-aef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:16:8d:ff:fd:5f:28:7d:e4:b9:79:6e:03:
ad:3c:28:53:76:b5:60:87:a4:05:e2:53:23:6f:07:
57:3f:61:77:a7:33:21:76:c2:66:d0:7f:28:09:75:
21:19:92:3d:bb:59:2a:b5:e7:8c:19:2b:e4:30:26:
eb:0e:f0:49:d3:aa:dd:31:dc:37:3d:65:a8:06:5a:
bd:84:54:ba:83:94:e4:75:bd:b9:39:f3:a8:21:ce:
53:6e:52:e6:15:aa:d5:10:3d:dc:b9:17:3d:c5:11:
32:be:76:e6:9d:dd:79:74:2e:dc:f3:f1:37:2f:b3:
e5:3d:da:f7:38:87:57:20:f4:9a:f9:1a:1d:55:74:
cc:b0:d4:58:b0:86:23:c0:d9:d1:60:5c:3c:6e:1a:
2d:e0:d3:5c:75:7f:1b:fc:07:0e:ad:72:c9:44:0c:
84:f4:f5:1b:8b:04:07:fc:7c:b6:7a:c1:18:22:7a:
85:fe:1c:27:5d:62:de:cb:ea:f5:ed:40:ba:47:f7:
46:1e:01:2a:e6:1c:f4:8c:66:5d:6e:a9:63:98:5a:
04:ee:3d:19:20:f4:b5:f5:73:1b:49:ad:c7:30:08:
8f:57:c9:bf:c0:e6:f9:67:84:7c:bf:1e:6d:37:09:
2a:b8:80:3e:13:d2:51:f3:e9:eb:d7:49:4f:85:93:
21:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F5:BE:7E:2A:64:DC:54:5B:99:95:62:30:6B:90:AF:8E:CE:6D:1C
X509v3 Authority Key Identifier:
keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e5:3e:54:9a:d3:84:92:27:90:12:75:8e:82:83:67:20:fa:
6d:03:bc:e9:88:3a:1f:f3:4d:63:52:91:d8:6e:45:6b:fb:a2:
f2:40:57:a2:1e:b1:38:18:d5:2e:2d:9c:6d:7b:33:58:01:fc:
16:b4:7c:30:07:b9:a8:d7:eb:74:d1:e2:d7:fd:05:ca:0b:33:
ad:f6:82:f6:f9:42:98:d2:5b:cf:c3:a5:82:72:31:43:47:3b:
71:fb:5e:cc:bc:0e:72:b9:51:d6:d3:ff:0a:25:22:1c:df:ea:
41:92:ce:ef:93:43:5d:83:b2:50:63:e3:21:66:c7:a3:11:3f:
8a:d4:58:c5:9a:3d:0b:4a:c0:17:88:73:d6:bd:e7:16:7d:9b:
25:56:11:6d:d9:a8:32:ab:8c:1f:4b:76:92:d7:62:11:4f:71:
e8:ee:75:73:63:17:fb:f1:28:95:63:53:cb:16:01:ff:79:5f:
27:67:9a:66:3a:02:17:9d:c1:73:86:cb:cb:c2:90:c5:20:29:
e3:c4:b5:a0:e3:66:ee:d7:4f:90:cc:0a:e2:65:b1:c5:87:11:
15:7c:b4:19:1c:99:6b:db:06:fd:f7:11:76:e2:79:08:fd:3c:
c0:47:2e:ea:5c:dc:19:fb:a1:3a:ba:d0:db:3b:3d:88:3d:bb:
dc:19:9e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:00:54 2026 by rpki-client