
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
File: 1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json)
Hash identifier: 9rAKiYZpa5Phxd83tYyxS4aQMULbBWQNjmGw31v1Zvk=
Subject key identifier: F0:38:93:71:D5:87:17:6D:CA:07:4D:63:AF:08:A5:0C:52:32:5A:95
Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Certificate serial: 01CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
Manifest number: 01A5
Signing time: Wed 25 Mar 2026 03:35:15 +0000
Manifest this update: Wed 25 Mar 2026 03:35:15 +0000
Manifest next update: Wed 01 Apr 2026 03:35:15 +0000
Files and hashes: 1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: NolfsBuRpO9zUdot8VOGJM1Hgdqnaxca5BLyIAOlkDg=)
2: FC98D5921DD311F1A4A9CCCC0B3D8C67.roa (hash: k8lZ7CX7mgq/3LVgfyzktUqzG5SajWKj3uNNsmVcBrg=)
3: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: ozs9i/euuZ75VUP6nxuqwBDiZfQIs7H9cQGCWKxhgPs=)
4: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: UdYA7ysQTtwuAPvC1szdIQjTM7ruBUjRZwFCktSblQQ=)
5: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: X7fAABSVSD+9LU6mpGruwkT6PSiZnr5qD+C8yW0gUJw=)
6: A17C3508168911EFBF38F580C4F9AE02.roa (hash: sy22vtii4K2errt2UOSSRnhaS+2ZGSF4IEAlJ6QMyT8=)
7: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: DHViFPvNbWRkbmTAti4Bf+7PoBd6798WiZLchdU3w8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:35:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459 (0x1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Validity
Not Before: Mar 25 03:35:15 2026 GMT
Not After : Apr 1 03:35:15 2026 GMT
Subject: CN=69c357f3-1466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f8:03:33:13:74:de:de:d7:af:6e:32:6d:41:
6c:9b:05:1e:ac:99:d2:40:db:8d:6c:ba:4e:65:b7:
7e:e4:9f:85:7d:80:9a:c1:69:91:ca:b4:a7:68:81:
71:05:f5:6c:ac:2c:f3:bc:43:21:a0:03:1a:ae:80:
06:8a:33:44:bf:28:39:d8:2e:85:73:44:b2:92:24:
86:62:02:77:7a:60:71:cc:8c:b0:64:9a:f6:a5:73:
75:dd:a1:d1:9e:77:f1:c8:34:a4:d7:7a:84:b3:26:
aa:cf:8a:34:86:68:37:37:e2:f3:73:0c:24:bf:35:
46:85:d4:c1:f9:7f:44:e7:00:c4:48:50:04:f0:9c:
c2:b2:f5:29:ad:e4:7a:8e:02:4e:f9:2b:72:b6:3f:
a9:38:1c:22:ef:90:3f:e8:86:8c:d7:92:8a:18:99:
f1:8e:45:f0:f6:4a:44:d0:eb:6e:b8:15:24:c1:e3:
b3:eb:0a:5c:b6:04:e5:12:a3:e7:3c:6f:aa:44:18:
69:e2:31:7a:cc:83:cb:a1:5a:28:c4:51:89:d9:90:
49:bf:74:22:1d:cf:05:13:8a:bc:b4:bc:e7:dc:28:
61:3b:bc:ba:88:f0:6a:86:b8:e0:4f:84:9c:3d:36:
87:57:1d:49:94:d1:61:ee:83:4e:d8:84:28:bf:f2:
4f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:38:93:71:D5:87:17:6D:CA:07:4D:63:AF:08:A5:0C:52:32:5A:95
X509v3 Authority Key Identifier:
keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:b4:05:bd:6d:26:f9:a3:63:74:60:cd:4e:6c:82:34:23:72:
48:0e:59:7e:3a:7f:16:cf:6b:18:20:85:37:09:58:8c:5d:42:
4a:35:0d:fb:55:a7:39:50:fb:c4:7c:f6:64:7b:40:d6:f9:dd:
e3:47:ec:3c:b7:76:4d:e0:0a:cd:ab:35:83:c3:56:8a:57:aa:
f7:97:e3:ae:6e:8a:1a:cc:6b:5b:6c:e0:f3:12:f8:14:a9:3a:
72:c3:17:c1:09:26:19:f5:00:89:a7:ee:6e:63:5a:b1:4c:fb:
69:5c:88:fb:04:ea:fd:71:a4:7f:a7:e0:07:ba:8d:8e:0f:2a:
32:90:ce:b8:cd:2d:54:a0:fc:5f:6f:0e:8d:9a:48:55:64:e9:
1c:b3:1f:09:da:fb:43:a3:59:76:2a:f8:19:a6:d9:ad:a5:34:
20:e4:42:c2:aa:3f:32:8f:03:e3:7e:66:30:2c:56:35:84:c8:
27:04:6c:a6:a6:fd:a2:27:fb:96:bb:0e:e3:e3:14:e7:26:b2:
6a:87:c0:89:34:57:89:86:de:d3:7e:6c:d0:d3:41:66:04:ca:
d4:40:58:42:5a:7d:d0:7a:36:47:46:d5:a2:5d:33:be:73:af:
d4:cb:ce:d6:81:46:b4:75:69:e5:d9:8b:ca:7e:b8:37:9b:28:
66:4e:2c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:48:33 2026 by rpki-client