
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
File: 1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json)
Hash identifier: lk4C+IvVMeUshpVBezMraTPY/gvFPvRKMcEBOWLBrzI=
Subject key identifier: 00:AA:36:4A:D6:3F:39:ED:0F:A2:42:80:35:3C:E2:DA:5E:6D:3D:60
Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Certificate serial: 01E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
Manifest number: 01C2
Signing time: Wed 13 May 2026 04:05:16 +0000
Manifest this update: Wed 13 May 2026 04:05:16 +0000
Manifest next update: Wed 20 May 2026 04:05:16 +0000
Files and hashes: 1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: 5m2gPMFQ/ArWbTP/uFD7f6XNKzs6RSBZkMhrj33oBmw=)
2: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: X7fAABSVSD+9LU6mpGruwkT6PSiZnr5qD+C8yW0gUJw=)
3: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: ozs9i/euuZ75VUP6nxuqwBDiZfQIs7H9cQGCWKxhgPs=)
4: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: UdYA7ysQTtwuAPvC1szdIQjTM7ruBUjRZwFCktSblQQ=)
5: A17C3508168911EFBF38F580C4F9AE02.roa (hash: oNiHZYVs3otoLhuDZWOsSBncaVRA0mwkHCN7V99aPbU=)
6: FC98D5921DD311F1A4A9CCCC0B3D8C67.roa (hash: k8lZ7CX7mgq/3LVgfyzktUqzG5SajWKj3uNNsmVcBrg=)
7: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: DHViFPvNbWRkbmTAti4Bf+7PoBd6798WiZLchdU3w8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:05:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 489 (0x1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Validity
Not Before: May 13 04:05:16 2026 GMT
Not After : May 20 04:05:16 2026 GMT
Subject: CN=6a03f87c-8d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:f0:b6:a7:73:c6:6c:26:ff:9b:75:e6:5f:
ca:21:06:69:5f:17:0d:43:a8:43:a8:11:5c:6d:35:
17:75:9c:5f:1d:4e:1e:61:cc:3e:43:5b:42:90:b1:
e1:19:00:a7:97:c2:7d:17:78:84:0a:c9:93:7f:a0:
99:b3:05:54:77:c0:69:e1:61:ff:a8:79:cd:26:77:
15:de:51:5d:5a:d7:39:f9:71:ff:87:bf:c0:f5:1c:
96:cb:42:5b:71:a2:66:55:68:8b:84:b3:78:57:a2:
3e:d0:a5:b3:b7:a6:68:fe:da:a5:24:72:eb:35:99:
e0:94:9c:39:51:51:53:da:be:c0:cc:c4:0c:c0:f4:
ba:c1:d2:34:83:ef:ce:85:3e:28:dc:69:af:54:e7:
c2:9b:39:58:94:b9:c7:00:49:68:e2:72:1b:fb:ec:
11:f9:a4:3d:cd:a3:38:9c:5b:b7:a3:cc:20:67:f2:
50:ab:90:f6:26:c9:db:bf:e3:de:1b:3d:0d:af:6d:
ee:fc:64:7c:23:74:9e:5d:b6:ae:58:65:a5:10:66:
06:48:99:8e:05:39:1c:8a:34:ab:69:9c:97:77:21:
fc:4b:9d:a3:11:cf:87:7e:df:90:9d:cc:45:8d:83:
b3:c4:98:12:14:ce:80:4f:15:d2:c5:28:3a:51:8e:
a4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AA:36:4A:D6:3F:39:ED:0F:A2:42:80:35:3C:E2:DA:5E:6D:3D:60
X509v3 Authority Key Identifier:
keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:13:f5:04:5f:73:db:e1:f6:e5:a6:f5:5e:6d:e2:fe:0f:9a:
7e:b8:fc:87:6d:8f:24:27:b4:16:8c:c7:2b:70:57:b7:d7:58:
cd:a2:40:5f:84:a1:d8:dd:cd:f6:0f:1d:96:43:76:86:41:db:
55:8c:e7:e7:59:a2:c1:28:da:ec:78:ac:21:e0:d3:70:01:1d:
14:e2:69:8e:5e:9b:c9:79:f4:c6:23:a0:7a:08:bc:ce:27:ea:
fa:f6:81:e1:62:14:c2:5a:1f:5b:5c:99:c6:ff:db:4b:ac:a3:
af:7c:ea:4b:60:ae:91:99:ce:8f:90:1d:84:eb:ba:f8:25:f1:
1f:94:20:3c:4f:6f:bc:e0:fc:85:fe:6a:16:c1:42:4a:90:f1:
f0:45:42:fc:b9:b8:6b:6d:47:48:3c:7d:37:aa:c3:e6:13:be:
d6:17:ea:1a:a4:88:20:50:66:7e:a3:f9:8b:bf:a4:bb:6e:1d:
68:33:76:e9:0e:50:77:78:e0:74:93:16:ed:87:d7:ca:88:bc:
cf:63:5b:26:0a:f5:5c:30:29:40:24:07:38:e1:31:67:55:ad:
77:60:f2:2a:a2:73:a0:88:aa:72:ef:b6:1b:11:ee:68:ee:98:
12:b5:40:0f:9a:19:0d:62:08:bf:92:d4:c2:4b:9f:5e:83:ca:
e7:68:45:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:33:23 2026 by rpki-client