
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
File: fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json)
Hash identifier: zcJecxAnxPs1nmiMMEZMBqzmdWkYt4RDQkIBt7zOsb8=
Subject key identifier: 45:73:A1:C1:F5:E5:20:36:C5:E2:0E:39:27:9E:7E:8E:C2:81:F7:AF
Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
Certificate issuer: /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Certificate serial: 0416
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
Manifest number: 0400
Signing time: Fri 27 Mar 2026 00:17:20 +0000
Manifest this update: Fri 27 Mar 2026 00:17:19 +0000
Manifest next update: Fri 03 Apr 2026 00:17:19 +0000
Files and hashes: 1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: 9RYwr2OKKulz5MEzX2kels3UoOrPs+DVJ7FeYQylhFI=)
2: A201A06CB42B11F0849A7A7AC4F9AE02.roa (hash: 8711DjizhgwUlMNKXElZ5orEHkZ18p22C/iB5twicyI=)
3: 791CD4FEFAE511F0B461E4A0696F56BC.roa (hash: nkx43CRHYNhsKmR2UchTww3j8r3WylsKbynVxRoROSc=)
4: 319786BEB63B11EF8D06900EC4F9AE02.roa (hash: 9o3pl6rhGeRs3aXVGw+bwYJylicnCZsy7pyeVUVfyFw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 00:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1046 (0x416)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Validity
Not Before: Mar 27 00:17:19 2026 GMT
Not After : Apr 3 00:17:19 2026 GMT
Subject: CN=69c5cc90-dbd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:df:ce:50:26:2c:a6:62:74:47:6c:c7:f1:2f:
2c:33:54:a8:b7:da:26:bb:c5:43:25:ab:be:0d:38:
40:76:5a:d4:70:d8:c3:5e:53:96:4c:c3:05:c2:ec:
63:01:37:8a:cd:7d:a4:8d:2d:bd:30:2f:e8:14:40:
c7:5b:83:c6:a4:e5:75:bf:16:b5:dd:68:6c:31:66:
8b:d0:bb:fe:cd:0a:a6:03:67:50:41:38:d5:ec:60:
04:20:5f:c3:83:0d:c8:a8:03:bf:c5:ef:13:e4:70:
96:31:7b:5b:bf:63:3d:ea:78:3e:e5:b7:eb:28:87:
45:5b:ce:90:93:cb:5a:f3:87:bf:5a:5b:a3:5b:2c:
3a:cb:12:29:d4:c7:ed:68:f7:c8:0b:3f:a0:30:1e:
31:3b:e4:eb:62:c4:fe:2c:1c:f4:94:ef:d3:ad:44:
8c:3d:b8:a0:6c:a9:e3:6d:cf:53:b7:98:0d:e9:6d:
8c:ff:e8:47:f9:54:5d:07:21:3c:46:0f:e7:ca:a1:
c4:60:2f:16:83:cb:2f:53:01:0d:22:f3:17:2d:a8:
c9:6c:d0:59:36:4b:6d:e3:03:fb:ed:d9:80:20:b0:
5b:44:ed:5d:ee:0d:c7:67:96:a9:a8:20:52:8f:1e:
34:78:fd:32:7a:b3:92:44:00:45:83:bd:fb:dd:2a:
43:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:73:A1:C1:F5:E5:20:36:C5:E2:0E:39:27:9E:7E:8E:C2:81:F7:AF
X509v3 Authority Key Identifier:
keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:9e:49:00:09:85:46:f1:88:d7:d6:16:cd:5a:4e:5b:ce:4a:
03:36:48:31:86:d5:47:0a:7c:90:ea:72:82:bd:da:c5:8d:4a:
79:b8:6d:50:4b:0e:8a:6c:53:bd:1f:6a:49:10:3b:82:d5:d4:
89:f2:da:06:39:4b:5c:60:f7:c7:3a:6b:88:5f:17:b4:e1:19:
4f:0d:5b:75:c0:ff:10:b2:a7:fd:64:66:50:a4:4b:9c:90:0c:
ff:b3:b9:18:90:15:89:5b:75:23:38:8f:ab:24:09:61:45:fb:
1d:b1:61:68:c4:98:e9:b4:dc:80:43:08:87:3f:07:66:3b:2f:
bf:08:6f:4d:52:c4:6f:d5:a6:5f:dc:3c:2f:4c:ad:f9:e2:46:
ee:4a:74:d3:d7:64:dd:8c:24:d9:2d:bd:91:c1:9e:d2:84:ba:
fb:0d:5d:73:3e:1c:8a:82:41:d4:40:27:4c:33:36:93:e9:7b:
0f:9f:85:f6:4c:0b:0a:0a:c9:c2:c1:cc:29:a3:11:10:dd:09:
ca:79:44:99:ed:50:74:3a:e8:f4:e7:6e:68:ba:d6:b0:d5:77:
b4:af:48:34:e5:da:db:1d:a3:52:b3:95:74:85:70:92:bc:dc:
0c:57:35:10:ff:61:ed:01:4a:64:53:cf:be:db:7b:4c:c0:28:
a8:fa:42:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:30:52 2026 by rpki-client