
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft
File: 1FLGfvaHRDivqZOoStCrwYUWkhs.mft (raw, json)
Hash identifier: 30pmH7kTrROiBwQOKHm37HYc995zZxPqnSZSnmh/4Dg=
Subject key identifier: C4:8C:4B:37:9E:AA:E4:25:09:35:30:B9:83:76:2F:9F:DF:73:45:6B
Authority key identifier: D4:52:C6:7E:F6:87:44:38:AF:A9:93:A8:4A:D0:AB:C1:85:16:92:1B
Certificate issuer: /CN=A915FD27/serialNumber=D452C67EF6874438AFA993A84AD0ABC18516921B
Certificate serial: 02C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft
Manifest number: 02BB
Signing time: Sun 05 Apr 2026 01:12:17 +0000
Manifest this update: Sun 05 Apr 2026 01:12:17 +0000
Manifest next update: Sun 12 Apr 2026 01:12:17 +0000
Files and hashes: 1: 1FLGfvaHRDivqZOoStCrwYUWkhs.crl (hash: K33jcO079r+MOUoWwJMPgJ22joDGrbS+3wxcWGMizZo=)
2: 9BDA59F69C8C11F0A27C535EC4F9AE02.roa (hash: 1AILx3io2TpfX7hUWzuL2pU58QXDn9h+uBSyFOkdjjg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.crl
rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 712 (0x2c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FD27, serialNumber=D452C67EF6874438AFA993A84AD0ABC18516921B
Validity
Not Before: Apr 5 01:12:17 2026 GMT
Not After : Apr 12 01:12:17 2026 GMT
Subject: CN=69d1b6f1-76fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e6:e1:d8:11:fe:54:15:40:37:65:60:3c:87:
b2:58:d7:48:15:3c:c7:4f:19:d8:b0:65:26:e8:d9:
60:81:43:9e:3e:f3:10:bd:7b:36:c3:0f:7f:cc:36:
9a:58:f7:05:5d:b8:e1:e3:f7:10:aa:a4:7a:50:2a:
0a:6f:9e:13:4c:b1:bf:0b:a1:c2:d3:03:11:dc:aa:
72:d1:4b:a3:c5:1b:c1:23:07:06:cd:d8:56:43:f8:
de:82:36:af:15:1b:4a:af:a0:b3:25:0f:69:a7:83:
c5:d4:42:70:f8:af:54:50:78:32:dd:89:49:96:70:
ee:eb:1a:f8:44:cf:f4:ae:39:e6:b6:39:e4:42:62:
43:21:e9:a5:6c:79:8f:a2:9c:ba:f2:b8:20:c0:93:
05:cc:eb:22:ac:2c:ea:6f:07:4e:c9:bc:5e:d1:52:
33:30:08:17:be:8b:4d:87:70:f1:0b:a1:93:04:53:
e2:b9:60:e9:e3:03:19:63:49:5c:f7:13:08:ce:6d:
05:7d:83:87:47:5b:c2:56:85:0e:bf:91:22:e5:df:
7f:69:5f:28:42:69:f7:08:26:89:b1:5d:61:f5:b6:
5d:79:2d:08:ad:37:a9:07:62:0b:25:2e:92:3c:67:
a7:ac:54:04:82:61:af:cc:81:c4:c4:5c:e6:95:d9:
aa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8C:4B:37:9E:AA:E4:25:09:35:30:B9:83:76:2F:9F:DF:73:45:6B
X509v3 Authority Key Identifier:
keyid:D4:52:C6:7E:F6:87:44:38:AF:A9:93:A8:4A:D0:AB:C1:85:16:92:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:e1:1b:eb:5d:90:12:02:0e:5c:58:49:8f:6e:b4:a1:5e:03:
d4:40:a5:cc:a1:04:4d:f0:7e:df:28:99:e1:8f:88:2f:f0:e9:
5a:85:dc:29:05:32:b2:e0:60:35:41:b6:19:01:d9:f3:ae:1a:
e2:94:6d:f4:ce:29:2c:52:6a:ce:19:8d:5e:2a:ab:7f:af:a8:
7f:62:ee:61:c0:92:20:a9:d2:f8:62:10:c5:c0:5d:df:4a:94:
48:4a:22:da:ac:4a:7f:13:90:c2:28:76:33:42:d7:9f:d5:31:
cc:3a:2e:f5:40:d6:22:91:49:65:8c:0c:85:22:0a:89:82:ba:
f3:a3:0f:0d:65:44:19:01:15:56:32:6f:ba:75:9f:82:23:31:
98:54:56:84:c7:ca:38:2c:3e:08:d8:4e:dd:7d:bc:ad:36:1c:
85:9c:e2:ba:96:e2:fd:9f:d0:8d:e1:ad:3d:4d:6a:46:ed:23:
f6:24:bd:14:4f:3b:2c:d1:2d:f1:5e:67:6b:f1:27:43:0d:f5:
c2:e6:a4:22:41:d2:6e:24:bb:c4:ef:39:11:45:54:ff:9a:f3:
19:e9:da:77:53:bc:5f:50:28:a5:8b:36:c7:c5:47:9a:0a:fc:
25:8b:b2:1e:80:4e:b0:80:1f:b5:e5:dd:58:59:05:b4:f4:51:
a7:ac:6f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:08:28 2026 by rpki-client