
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft
File: 1FLGfvaHRDivqZOoStCrwYUWkhs.mft (raw, json)
Hash identifier: R1wx3Vx7USt1pZSi7ul08EYwbpeDkiJTf6ZByzgvgic=
Subject key identifier: 7A:96:B2:C3:B6:7B:9C:E5:9D:33:E4:60:61:A1:B3:42:C2:A5:85:8F
Authority key identifier: D4:52:C6:7E:F6:87:44:38:AF:A9:93:A8:4A:D0:AB:C1:85:16:92:1B
Certificate issuer: /CN=A915FD27/serialNumber=D452C67EF6874438AFA993A84AD0ABC18516921B
Certificate serial: 0324
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft
Manifest number: 0317
Signing time: Sat 03 Oct 2026 01:25:17 +0000
Manifest this update: Sat 03 Oct 2026 01:25:16 +0000
Manifest next update: Sat 10 Oct 2026 01:25:16 +0000
Files and hashes: 1: 1FLGfvaHRDivqZOoStCrwYUWkhs.crl (hash: BosBtUEpxd1EUUphreVOlUjGLQbIRbPdapw4rx+YYR8=)
2: 9BDA59F69C8C11F0A27C535EC4F9AE02.roa (hash: 1AILx3io2TpfX7hUWzuL2pU58QXDn9h+uBSyFOkdjjg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.crl
rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 01:25:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 804 (0x324)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FD27, serialNumber=D452C67EF6874438AFA993A84AD0ABC18516921B
Validity
Not Before: Oct 3 01:25:16 2026 GMT
Not After : Oct 10 01:25:16 2026 GMT
Subject: CN=6ac0597c-af9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9c:f5:82:f4:ec:5b:53:35:44:d5:c3:93:6e:
0c:67:cf:61:0a:c9:66:a5:f0:e5:e1:5d:22:17:f5:
06:7d:d9:35:bb:db:70:3d:d6:e6:aa:c0:30:4b:9d:
b1:41:45:1d:89:db:70:d7:d5:6d:84:f9:97:b7:de:
aa:f6:aa:56:23:27:5b:ca:1d:87:df:46:ba:79:84:
01:5a:b9:36:a2:cb:d4:ef:d4:0f:e3:e5:2d:4d:21:
2f:2c:c8:55:34:64:26:87:72:27:1f:2f:49:e6:c9:
46:a5:97:32:c4:9b:43:ef:49:bb:5f:cb:bc:af:69:
ce:4f:6b:0a:82:11:24:40:1f:88:21:9e:f0:7a:2b:
ee:9f:7c:ac:c1:73:0f:41:31:60:76:70:57:b0:49:
98:43:a4:a7:fb:5a:ba:29:30:94:d8:78:63:ae:de:
32:72:dc:5a:5e:a4:9e:50:5c:4a:91:27:a2:fd:62:
78:4f:c8:24:77:71:93:7d:d6:1a:0b:89:bc:c2:35:
a2:e8:d9:2d:3b:4b:22:87:95:07:b2:69:a2:16:12:
de:0e:77:d1:01:8e:dd:b9:68:91:5a:22:e5:9e:7b:
26:1d:24:ca:c0:75:09:02:b7:8b:04:15:a4:df:10:
56:ca:bf:b0:91:f0:f8:a6:9c:a2:80:bf:21:65:80:
28:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:96:B2:C3:B6:7B:9C:E5:9D:33:E4:60:61:A1:B3:42:C2:A5:85:8F
X509v3 Authority Key Identifier:
keyid:D4:52:C6:7E:F6:87:44:38:AF:A9:93:A8:4A:D0:AB:C1:85:16:92:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:92:ab:76:bb:38:0c:46:57:cc:8d:ff:8f:e5:c2:87:ec:fb:
30:f5:eb:91:77:0d:f8:eb:80:43:0d:56:be:37:73:e8:af:7c:
9a:8e:8f:23:3d:9c:d2:77:c4:5e:25:1d:40:2e:90:d6:4a:81:
5c:cb:3c:9c:a7:c3:07:94:9c:b4:40:6b:19:1a:96:b9:f2:e0:
01:53:1c:ef:39:4a:49:45:0b:b8:d1:8f:0e:8f:46:ce:c5:04:
cc:fd:9d:94:09:8d:57:a9:a7:82:d7:8f:73:13:4a:fa:a5:cc:
86:f0:23:f6:14:cc:c5:59:0e:a9:f8:60:f7:7f:c0:aa:b4:9d:
21:ea:d0:83:31:1c:6a:ad:65:9a:2c:99:40:0a:93:ff:ea:91:
f1:39:91:1b:2b:9e:39:ed:a7:cc:ca:5d:89:70:6c:90:aa:d1:
2b:65:1f:d9:d6:2c:1c:15:ad:53:a8:76:31:36:23:3c:18:bb:
c2:23:48:16:9d:bf:42:41:af:9b:6d:a1:1f:be:a8:3f:ac:c3:
6d:3a:82:6c:93:ce:6c:8a:97:25:9c:4a:38:aa:2f:17:38:c5:
9c:f2:8c:31:ae:6f:66:01:a7:af:b8:ce:24:b7:51:f7:c5:ac:
db:56:2e:48:67:77:b7:19:45:e0:3e:c3:08:23:5a:ce:50:bb:
84:d5:0b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:57:42 2026 by rpki-client