
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft
File: 1fozYzT5muNj6lhn0o6KUCMeQiA.mft (raw, json)
Hash identifier: JC34bFrKLbJBK9OYQ6XY0kowMl82D4rEdTCmVe6a2ms=
Subject key identifier: F5:DF:01:1D:61:B5:C7:F2:F6:55:46:9F:B2:32:1D:F4:34:0A:A3:34
Authority key identifier: D5:FA:33:63:34:F9:9A:E3:63:EA:58:67:D2:8E:8A:50:23:1E:42:20
Certificate issuer: /CN=A915F2B8/serialNumber=D5FA336334F99AE363EA5867D28E8A50231E4220
Certificate serial: 0283
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fozYzT5muNj6lhn0o6KUCMeQiA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft
Manifest number: 027E
Signing time: Wed 19 Aug 2026 02:27:26 +0000
Manifest this update: Wed 19 Aug 2026 02:27:26 +0000
Manifest next update: Wed 26 Aug 2026 02:27:26 +0000
Files and hashes: 1: 1fozYzT5muNj6lhn0o6KUCMeQiA.crl (hash: GX/o0G61YamGbWxaCV5vIvehNJPkh98+LPwJtV3bw9w=)
2: 207C45B0CC2F11EDABE25F72C4F9AE02.roa (hash: 3Fmdi951WMlO5pIrJJT0qggVYSRtlXXjg5aoHRb8yfw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.crl
rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fozYzT5muNj6lhn0o6KUCMeQiA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 643 (0x283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F2B8, serialNumber=D5FA336334F99AE363EA5867D28E8A50231E4220
Validity
Not Before: Aug 19 02:27:26 2026 GMT
Not After : Aug 26 02:27:26 2026 GMT
Subject: CN=6a85148e-ebd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:66:0e:81:a1:37:2b:0c:b2:21:1c:65:56:
9e:f0:4c:84:2e:d5:b3:36:24:0b:35:0b:db:82:ae:
ba:82:24:d7:41:9a:d7:18:0e:19:24:1f:51:6b:d6:
89:07:5b:87:5b:85:ed:8f:b4:fa:c7:88:f8:5b:01:
2b:74:3b:a0:b3:2b:e4:e2:46:49:ba:d2:61:0e:38:
e2:93:8a:7b:d4:ae:25:a2:12:4c:20:87:00:1f:f3:
4f:2a:b3:40:2f:16:9a:94:0d:fd:74:ae:9d:3b:21:
f8:51:cb:00:6e:7b:da:27:57:51:1d:93:d9:9b:33:
41:99:6a:5c:4c:43:f0:6b:fb:11:72:35:10:01:2c:
31:4d:08:ba:72:55:fc:68:2c:f6:a8:c0:54:3a:79:
ec:4d:06:79:1b:35:02:79:ed:fa:53:e5:41:00:28:
41:c3:5a:99:23:5d:f7:09:b6:af:7e:88:53:6c:1e:
d7:36:4f:e5:6a:6a:da:5f:58:02:b6:91:cb:95:03:
9c:38:ff:a4:07:7b:46:f3:d7:3b:f9:eb:49:aa:16:
05:ca:99:24:72:ac:5d:be:ed:a5:f0:1d:4e:4f:75:
fe:fa:89:c1:44:00:a6:c2:f6:68:75:90:33:92:9e:
83:31:ec:bc:5d:6b:7a:b8:ed:4a:b0:f3:70:0f:38:
60:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DF:01:1D:61:B5:C7:F2:F6:55:46:9F:B2:32:1D:F4:34:0A:A3:34
X509v3 Authority Key Identifier:
keyid:D5:FA:33:63:34:F9:9A:E3:63:EA:58:67:D2:8E:8A:50:23:1E:42:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fozYzT5muNj6lhn0o6KUCMeQiA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:13:20:dd:a0:16:48:cb:1a:21:9d:f4:95:87:9f:96:dc:f7:
51:e9:ed:37:22:95:00:99:d8:1f:a8:6f:f1:72:79:a8:08:b3:
d1:fc:57:0a:af:84:8a:d2:bb:10:c8:66:ab:e4:ee:e3:03:ee:
42:4d:20:c6:3e:d3:f2:63:74:0f:d4:1c:c5:63:64:78:a8:61:
23:45:fa:13:08:a8:61:69:c5:94:8c:66:8f:e7:a6:f8:fa:29:
f3:7c:e3:d9:d1:74:28:17:42:07:f2:f8:10:d0:35:5a:20:b3:
3a:e4:55:3f:ed:79:22:51:80:47:87:f1:60:2f:6b:84:fe:e8:
1d:87:18:f1:6f:06:e9:f6:8b:5a:e0:4e:fd:f9:85:05:4d:85:
3c:07:b6:1b:97:2e:66:87:af:11:c8:43:e2:aa:5f:29:38:40:
d2:d6:3b:27:36:b9:a4:fe:d4:07:ad:de:41:fd:8b:06:f2:71:
35:39:8b:1a:37:c8:75:06:e9:b7:21:b1:c9:a7:98:b6:30:4d:
01:90:95:2b:db:12:28:85:18:f4:d6:03:88:0e:63:63:61:b1:
86:c7:69:2c:06:80:52:d9:36:00:b8:96:6b:4c:41:99:9d:0a:
08:25:74:a7:ca:75:8e:06:ac:82:2a:f2:be:5e:d7:2c:f9:e7:
e3:f7:f8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:56 2026 by rpki-client