
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft
File: f1QPcIZAQhpialmxa5Q_AzutP_Y.mft (raw, json)
Hash identifier: EihyMkUdSr6oaJzkbdXtZWjPQkFUzzq1rCb9Byq4Zf4=
Subject key identifier: C9:64:BF:CD:C0:3F:39:BE:2E:2A:8F:53:0C:95:EF:ED:AB:9E:C3:C6
Authority key identifier: 7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6
Certificate issuer: /CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6
Certificate serial: 0CFF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft
Manifest number: 0CF1
Signing time: Tue 24 Mar 2026 18:02:18 +0000
Manifest this update: Tue 24 Mar 2026 18:02:18 +0000
Manifest next update: Tue 31 Mar 2026 18:02:18 +0000
Files and hashes: 1: f1QPcIZAQhpialmxa5Q_AzutP_Y.crl (hash: vkS++/l7eQq0D8KXZuH4Pr2a5PKj0XrBGyHEEVKTk28=)
2: AF905A0C021111EAA331B072C4F9AE02.roa (hash: qd9STy+iZzB+BWK7tdr5s3ge+XISfdZKjAs1tWz1RCs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl
rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3327 (0xcff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B53A, serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6
Validity
Not Before: Mar 24 18:02:18 2026 GMT
Not After : Mar 31 18:02:18 2026 GMT
Subject: CN=69c2d1aa-23db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ab:35:5e:6a:c5:9b:e9:62:0c:be:5b:2d:fb:
30:2d:ea:38:8f:0d:e5:e3:af:cf:fa:d8:08:af:91:
95:73:fd:1e:18:64:07:20:74:b7:07:40:2d:6c:b9:
e0:f7:57:e5:fb:8d:c4:bf:2e:12:bc:d9:d5:7a:d4:
89:c7:58:87:fd:3a:08:3b:cf:ab:c0:50:0c:dd:e2:
c3:9e:f8:58:b2:ef:2f:e2:ba:04:1e:15:60:27:ac:
e6:d6:2f:be:64:bb:df:83:e6:40:57:c2:7c:9c:8b:
c7:66:63:38:46:8e:a3:2a:90:c0:50:c7:43:6a:71:
87:fc:12:d7:0f:26:a0:5e:4e:52:37:aa:31:b0:12:
c8:8e:bc:57:61:7f:b0:e5:2c:f8:3a:eb:58:f1:1a:
02:d8:93:b9:df:25:02:c5:df:bd:d0:d0:9c:eb:90:
58:41:f2:28:27:03:0d:2b:ee:d6:91:40:84:32:ca:
05:ae:a8:b1:cf:f6:9d:e3:31:59:e9:62:a3:d7:1d:
07:82:9e:fb:d5:39:cd:78:63:75:57:33:e6:32:20:
4b:74:00:2e:fb:c0:1d:d4:1d:ed:43:bc:c2:d7:74:
f5:dc:c5:59:58:88:af:a2:ef:36:db:1d:81:b5:de:
32:a8:cd:76:92:5b:88:cb:13:59:b1:5a:61:b0:f9:
cf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:64:BF:CD:C0:3F:39:BE:2E:2A:8F:53:0C:95:EF:ED:AB:9E:C3:C6
X509v3 Authority Key Identifier:
keyid:7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:14:44:0e:e8:c7:07:83:3e:40:f8:40:ef:7c:91:95:a0:c9:
f0:b9:27:77:46:53:1b:0f:02:fe:2a:66:81:6d:99:b6:5d:f4:
cb:c9:32:9d:3c:6d:93:fa:2b:cd:fa:d8:d2:d9:04:43:8e:6f:
6e:b2:69:bf:c1:c6:e4:bd:43:d4:37:f1:12:75:a6:ec:1b:fc:
59:a1:24:73:f0:47:99:69:be:01:f1:f8:a3:57:cd:4a:83:3a:
b8:39:07:1d:ed:e7:88:32:37:b6:98:6c:02:72:f4:b0:1d:87:
bc:69:27:62:c9:55:fe:75:5d:46:61:a2:e5:08:d6:16:2b:3a:
79:d2:1c:8c:e4:27:37:2a:a0:fd:79:97:72:3f:5a:be:12:bf:
fc:21:93:d4:a4:26:52:2d:03:5f:29:f8:48:c6:44:98:94:2e:
fd:d4:0c:62:56:b7:76:b8:f6:bb:23:d1:91:2b:52:70:81:6b:
ba:48:16:6b:80:34:92:dc:a7:3c:2c:3b:40:8d:f5:58:96:77:
a9:4f:b3:fd:32:c3:cc:bb:37:53:84:96:6e:0d:6b:cf:2f:3c:
e4:94:0a:3b:81:28:e0:6d:d2:88:78:89:07:84:76:67:b9:c9:
c7:f2:73:73:06:bb:fb:f7:f8:3c:a2:5e:dd:85:3f:03:ab:47:
45:0a:75:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:14 2026 by rpki-client