
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft
File: f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft (raw, json)
Hash identifier: rIC2JkNEFGTT6A31ju+jE9oJHeOhF9HpLmC89yjJk6I=
Subject key identifier: A3:B5:60:E0:01:58:9F:45:BA:70:08:EA:27:BA:E5:BA:52:1A:B1:59
Authority key identifier: 7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7
Certificate issuer: /CN=A915BA28/serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7
Certificate serial: 1178
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft
Manifest number: 1164
Signing time: Tue 12 May 2026 17:14:40 +0000
Manifest this update: Tue 12 May 2026 17:14:39 +0000
Manifest next update: Tue 19 May 2026 17:14:39 +0000
Files and hashes: 1: f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl (hash: gqenv+uBSmYxEXBDs26HgI6ZUw4ICkbJMUF8CaWwi5M=)
2: C90C4476FBA611E9BA00AB33C4F9AE02.roa (hash: 3Xi7wtEGd4JYA4AAv2yv0nPxB/PtZ4h9SU2C5rJNJXI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl
rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4472 (0x1178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BA28, serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7
Validity
Not Before: May 12 17:14:39 2026 GMT
Not After : May 19 17:14:39 2026 GMT
Subject: CN=6a036000-6e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7d:4e:9a:e8:63:af:ec:cd:5b:8b:a2:1b:bd:
a7:c9:97:9e:2a:96:3e:7d:1e:b3:97:73:8a:82:d0:
ca:3b:6a:23:96:29:9d:16:29:ed:48:ed:7d:cc:d3:
b9:f6:42:c9:b9:71:4a:7f:5c:c7:74:0a:7f:99:09:
97:df:a4:9e:60:5b:1c:1a:1b:1e:6c:d0:87:7b:b2:
aa:ae:dd:68:71:3e:12:45:f7:1e:59:12:58:5a:bd:
0c:ee:7e:1a:44:a9:39:d3:15:90:04:c1:69:2d:20:
39:f2:2c:06:45:8a:ae:bb:66:35:8a:dd:42:45:04:
30:6c:55:b7:a1:3f:e8:87:e3:c8:21:d1:7b:c8:65:
d5:06:95:15:24:1a:be:f6:04:85:0e:c6:5b:e9:e8:
85:c8:b8:f7:39:c5:54:f3:f8:ef:41:c3:8b:53:e2:
a0:9b:6c:50:d1:b1:d6:0e:12:2b:d6:4f:ac:7e:e2:
2e:74:9a:3a:d2:5a:1b:74:7a:5d:1a:65:27:89:02:
1a:32:8a:d9:c8:e6:df:d6:95:cc:ef:f5:89:a7:fc:
a4:41:13:72:8b:e2:5b:57:03:96:03:e7:2e:1f:28:
b6:01:45:81:34:04:67:6d:bd:75:53:17:0a:e5:66:
35:3d:d7:c6:76:6f:f0:40:78:f7:21:78:9c:6b:14:
b1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B5:60:E0:01:58:9F:45:BA:70:08:EA:27:BA:E5:BA:52:1A:B1:59
X509v3 Authority Key Identifier:
keyid:7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7c:99:bc:77:94:a8:f4:c6:9d:59:da:4b:ef:ef:1b:00:46:
dd:02:6a:32:c9:d9:05:1e:13:d9:16:87:3e:90:d3:c5:7a:94:
b4:b3:99:47:37:2c:52:85:04:74:3c:3d:60:c3:e0:79:37:79:
73:ed:22:50:cf:5e:e9:2e:e0:73:36:db:e2:cf:9d:3c:88:ab:
ee:5e:16:43:87:1a:1c:33:69:e7:4e:1f:69:44:21:90:c9:64:
83:9d:ad:c8:c7:8d:67:d3:fa:05:2e:1f:cf:ea:3c:50:f5:65:
c7:11:aa:86:06:f7:ec:3e:27:e4:22:3d:7b:14:fe:d5:8a:c7:
55:24:d8:ec:b6:cb:e9:ce:eb:a8:4f:36:a1:7e:ce:0a:a6:b3:
2f:5d:2f:b1:88:db:45:7a:18:55:d5:db:c5:12:3e:0c:2d:57:
85:a3:76:bc:c2:b9:99:16:16:d5:8b:b8:c7:a0:b0:80:20:17:
e1:c3:be:e5:81:f1:70:60:c5:3e:c2:10:5d:17:8c:70:17:0c:
d8:c4:78:23:5e:aa:5e:4c:76:4e:00:96:44:f0:fa:be:ae:ac:
c5:0e:bc:18:9a:97:77:9b:0c:8e:8c:8d:fc:7c:9c:f2:05:7f:
6a:b8:d0:91:ad:49:ba:2a:d8:fd:4b:34:a1:f4:dc:c1:6c:51:
87:04:e5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:38:46 2026 by rpki-client