
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
File: aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json)
Hash identifier: uzYmPIksrAtYV3FuJ7EupkeAKPOIG9xdI5jKo0N2aVE=
Subject key identifier: 60:0F:D4:BB:F4:45:55:9B:CE:B3:09:A4:AE:8C:F6:CB:65:F2:7F:FC
Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D
Certificate issuer: /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
Certificate serial: 3592
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
Manifest number: 356D
Signing time: Wed 22 Jul 2026 15:20:58 +0000
Manifest this update: Wed 22 Jul 2026 15:20:58 +0000
Manifest next update: Wed 29 Jul 2026 15:20:58 +0000
Files and hashes: 1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: kBjH55pP23CsC6/oM+IwtLhzuGX0rkmGITKmqRh6cOQ=)
2: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: FGtCl+rkKsPwQBZaBP2SI6ZyzxIcUGM879HPiMEoLJQ=)
3: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: RQy3CULDGNVnkWRkKUELBca0bv/+qjtto2dvJUv9MVk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl
rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13714 (0x3592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C1FE, serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
Validity
Not Before: Jul 22 15:20:58 2026 GMT
Not After : Jul 29 15:20:58 2026 GMT
Subject: CN=6a60dfda-e8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0a:6e:3c:c6:1b:44:b2:64:17:5f:29:3e:c0:
b8:ec:6b:7b:63:ac:20:fb:ff:27:34:d2:35:5f:4e:
83:eb:a6:d6:7e:eb:b8:75:78:80:e7:94:b8:e9:43:
6b:f0:2d:50:f3:01:4e:a1:03:99:b2:e6:37:75:c8:
b5:d6:f3:e3:38:a0:45:3a:ce:ba:57:6c:30:fe:87:
58:89:e4:89:d8:d1:93:c9:15:d6:c8:da:79:7d:13:
c9:08:17:8d:ae:87:65:6e:3d:97:95:16:40:03:d1:
e4:67:1d:ed:0c:78:cc:20:b4:26:a3:83:2e:4f:9d:
35:4b:10:fb:51:eb:b5:a5:aa:28:e3:8e:62:4e:c4:
5d:eb:5a:54:d3:b9:ba:89:a6:fc:b4:d2:d3:ac:f1:
78:ed:95:23:d5:b2:16:4c:e7:5f:24:d7:04:df:27:
ae:23:98:35:d1:94:f8:31:44:55:e8:96:0b:b6:39:
5b:5a:2e:65:97:16:f7:65:f2:c7:c0:62:b1:a4:e3:
6e:99:b9:fb:f5:91:03:bc:98:83:bc:e1:8a:fc:6d:
04:f3:02:ab:7f:96:e9:4f:65:06:4b:7e:af:72:81:
7d:65:4d:11:34:99:6a:4a:a4:5e:75:0d:aa:54:cd:
77:0c:49:7b:a1:d8:f3:16:89:e7:23:af:95:21:f9:
b3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0F:D4:BB:F4:45:55:9B:CE:B3:09:A4:AE:8C:F6:CB:65:F2:7F:FC
X509v3 Authority Key Identifier:
keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:99:05:c0:00:22:53:97:c0:b9:af:6f:1e:a0:2a:38:24:5f:
f5:f4:61:4c:90:67:38:d9:77:0f:39:7c:72:03:53:61:cb:e0:
b0:fd:6e:c7:e5:e8:a4:45:52:5c:34:69:bb:b1:b1:e6:c4:8e:
4e:ef:36:a8:9c:ad:f5:61:f2:76:72:bb:33:90:3c:54:43:91:
fb:91:7f:ec:d2:7c:01:b9:ef:d4:68:b2:e6:2a:bb:fd:5a:2f:
82:8b:fb:3f:09:46:fd:13:e4:d0:a9:ef:99:be:97:eb:51:17:
0f:5c:f6:d8:95:4f:e6:fb:8e:87:e0:5d:8a:60:6a:14:40:ea:
dd:ff:fe:0b:5a:c8:d1:27:e0:56:68:a2:82:b4:1c:31:20:07:
29:60:11:ef:75:40:8d:8d:c2:f3:4b:2d:fa:a8:1f:dc:8d:db:
ba:6f:e2:b1:9f:c9:26:e4:56:7f:0a:8e:0f:82:0c:ca:9f:80:
2b:94:81:16:1e:e6:94:21:f2:11:5c:d3:04:5a:18:13:d3:75:
d3:15:99:18:56:e6:ac:41:b4:38:2d:b2:09:ef:0c:f5:1a:07:
74:00:fe:e0:40:4b:8b:47:e6:b3:f0:df:d8:ba:b8:3e:ce:7d:
56:b1:93:8a:bd:69:48:2e:fb:33:51:6b:80:72:09:8d:19:37:
ae:55:f6:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUMxRkUxMTAvBgNVBAUTKDY5OUEwRjhEMTVBMzRGNTk5NTZDQjQ4MDBDNkM0NDA0
REMwRUJENUQwHhcNMjYwNzIyMTUyMDU4WhcNMjYwNzI5MTUyMDU4WjAYMRYwFAYD
VQQDEw02YTYwZGZkYS1lOGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApApuPMYbRLJkF18pPsC47Gt7Y6wg+/8nNNI1X06D66bWfuu4dXiA55S46UNr
8C1Q8wFOoQOZsuY3dci11vPjOKBFOs66V2ww/odYieSJ2NGTyRXWyNp5fRPJCBeN
rodlbj2XlRZAA9HkZx3tDHjMILQmo4MuT501SxD7Ueu1paoo445iTsRd61pU07m6
iab8tNLTrPF47ZUj1bIWTOdfJNcE3yeuI5g10ZT4MURV6JYLtjlbWi5llxb3ZfLH
wGKxpONumbn79ZEDvJiDvOGK/G0E8wKrf5bpT2UGS36vcoF9ZU0RNJlqSqRedQ2q
VM13DEl7odjzFonnI6+VIfmzEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGAP1Lv0
RVWbzrMJpK6M9stl8n/8MB8GA1UdIwQYMBaAFGmaD40Vo09ZlWy0gAxsRATcDr1d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzFGRS9EMTE4QUFCQTFE
QUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQxbVZiTFNBREd4RUJOd092
VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Fab1BqUldqVDFtVmJMU0FER3hFQk53T3ZWMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QzFGRS9EMTE4QUFCQTFEQUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQx
bVZiTFNBREd4RUJOd092VjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOpkFwAAiU5fAua9vHqAqOCRf9fRhTJBnONl3Dzl8cgNTYcvgsP1ux+XopEVS
XDRpu7Gx5sSOTu82qJyt9WHydnK7M5A8VEOR+5F/7NJ8Abnv1Giy5iq7/Vovgov7
PwlG/RPk0Knvmb6X61EXD1z22JVP5vuOh+BdimBqFEDq3f/+C1rI0SfgVmiigrQc
MSAHKWAR73VAjY3C80st+qgf3I3bum/isZ/JJuRWfwqOD4IMyp+AK5SBFh7mlCHy
EVzTBFoYE9N10xWZGFbmrEG0OC2yCe8M9RoHdAD+4EBLi0fms/Df2Lq4Ps59VrGT
ir1pSC77M1FrgHIJjRk3rlX2DQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:02:05 2026 by rpki-client