
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
File: 1FgFH22pUil0dbSEvd0Pu-NJDnA.mft (raw, json)
Hash identifier: G98Fips4H+/h+z8Hpb+FSfLEZ0faJzr6mEBaeM7lrbU=
Subject key identifier: E7:31:38:10:9D:91:2D:7F:1A:4C:20:53:26:AD:C5:30:07:1D:35:AF
Authority key identifier: D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70
Certificate issuer: /CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
Certificate serial: 082E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
Manifest number: 0813
Signing time: Tue 18 Aug 2026 21:36:39 +0000
Manifest this update: Tue 18 Aug 2026 21:36:39 +0000
Manifest next update: Tue 25 Aug 2026 21:36:39 +0000
Files and hashes: 1: 1FgFH22pUil0dbSEvd0Pu-NJDnA.crl (hash: m1pm8yepgoIwUs+TiUTb+6Ut6LxoRYpfbWLWyZlF/MM=)
2: 9B5A7020522911ED9136DF2AC4F9AE02.roa (hash: /XDkwKIyB4rNulgFvMOv5/7NFn8IGhU7PA58aFqz6PU=)
3: A156AB48195E11F0A64EF837C4F9AE02.roa (hash: 4itdgnokjreqGm34fiN0BjbU5Y5cTecgH1DKcBRHiBU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl
rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2094 (0x82e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D85E, serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
Validity
Not Before: Aug 18 21:36:39 2026 GMT
Not After : Aug 25 21:36:39 2026 GMT
Subject: CN=6a84d067-6382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:09:6f:2f:91:5b:53:28:d4:e1:f0:70:15:
d9:14:9b:01:5e:90:e1:7e:64:45:ee:0e:f1:11:6f:
dc:02:26:d5:cd:0d:d0:f7:da:00:fa:96:10:31:84:
82:e0:3b:72:88:43:fe:74:bb:c6:e3:a3:9c:78:87:
ce:17:15:45:da:8e:a8:62:0a:45:a8:b9:4b:dd:f0:
fd:80:15:c4:df:01:c6:79:a0:ca:95:74:50:c2:ad:
fd:fc:96:5d:23:e8:6f:b6:b0:e3:d5:a8:01:70:27:
55:0d:b9:8d:47:25:32:b7:82:ca:02:b7:95:ff:b1:
d7:e5:d2:bc:3a:13:f3:93:a2:cf:b4:50:74:40:36:
ed:89:e0:72:2b:44:45:15:a4:8c:d8:fa:d7:81:8d:
e4:23:60:9e:ef:81:95:3a:67:40:32:46:74:81:cc:
59:c4:bf:81:ac:fd:ef:5f:1d:2b:e5:d1:d1:64:4c:
34:d5:80:2e:6b:40:3a:62:a5:c8:06:2c:db:02:5d:
b6:51:83:3b:e1:82:33:e0:b8:22:87:a7:b5:0c:e3:
83:de:1a:f4:ff:8a:04:a6:2b:fe:27:ca:ea:e8:64:
cc:cf:ae:b0:60:36:1e:26:90:99:44:e4:10:f5:bb:
88:30:1c:0f:9c:f7:3a:90:b4:52:02:50:0a:0d:ec:
70:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:31:38:10:9D:91:2D:7F:1A:4C:20:53:26:AD:C5:30:07:1D:35:AF
X509v3 Authority Key Identifier:
keyid:D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:ac:c0:86:96:18:91:24:2a:fe:fb:a5:13:7b:6f:2c:64:86:
5d:cf:de:f9:cd:e2:d8:f0:41:79:b0:02:01:0a:b4:f9:0a:d7:
f5:c6:03:27:9c:1c:e4:4f:14:f2:11:e4:0d:6c:fb:f7:b9:be:
7d:39:22:70:c8:1b:74:1d:6e:04:bf:c1:c5:64:2a:a6:aa:75:
72:b5:75:1a:07:29:d9:4a:3a:b1:85:52:8e:3f:fb:1c:3a:9f:
ac:63:bc:ec:b2:16:f3:70:ff:ca:e5:e1:11:fc:14:92:3e:7d:
2e:f6:a1:48:35:8d:97:49:30:bd:c0:79:73:61:f2:d9:a0:12:
5a:33:81:4f:f8:56:af:96:66:bd:98:a7:34:ff:fa:07:84:76:
c9:75:72:4e:bd:d4:bd:a3:a2:c5:1a:43:ae:1a:8b:27:02:6a:
fe:90:3f:45:34:39:95:eb:a1:9a:ae:5b:23:1e:3a:3d:2d:e0:
23:bb:c0:ef:b0:f5:6f:33:88:c8:58:6a:44:ee:e5:67:2d:88:
3e:6e:a1:f2:12:69:b2:96:fd:75:49:91:89:c5:fd:50:35:02:
dd:5b:f3:66:c8:48:7c:dc:3b:f0:82:3c:e4:33:78:22:ce:a3:
48:a4:c5:12:06:9a:4f:d8:1e:d3:d6:35:3e:fd:83:1a:5c:bb:
c8:3b:f4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:16:34 2026 by rpki-client