
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft
File: 1pe7bz-Z6USA7gu609JoAKtBYmA.mft (raw, json)
Hash identifier: RCPHpa9+VbLFc1DiJHPpv+9QW0U06J4SXMTDK/MjJ0k=
Subject key identifier: 60:BE:4C:32:CB:F4:E6:9F:F7:B1:6C:E4:AB:AB:4C:97:E5:21:DF:17
Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60
Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
Certificate serial: 35DF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft
Manifest number: 357F
Signing time: Thu 26 Mar 2026 14:22:37 +0000
Manifest this update: Thu 26 Mar 2026 14:22:37 +0000
Manifest next update: Thu 02 Apr 2026 14:22:37 +0000
Files and hashes: 1: 1pe7bz-Z6USA7gu609JoAKtBYmA.crl (hash: Jd1yXYAmkJ3LDe0la53uGh5o5Dqcuc83VV6jev46oQ8=)
2: D2E6AC6A60F111EFB97DD57AC4F9AE02.roa (hash: l7WAwvcZVKlat81bCLOlMjC2QBKLBCvz0UaEYCXONlg=)
3: 964F254A4AEC11EF91EC775FC4F9AE02.roa (hash: HkNBHfCCxWQ28dFsr4VLP9uYL5uGGo+V0spZFxOBLiI=)
4: 146766F4A47B11E9867CBF58C4F9AE02.roa (hash: xJWTRRKyuZjkvrJwtVub0K0nYQi/ZGucKzB1ISqRPw4=)
5: 12FAF07EA47B11E9867CBF58C4F9AE02.roa (hash: kkJ4rjLr4UzQN8c3HU8Z5z8wwvFPs1puIf6qJX6ykA8=)
6: 971866124AEC11EF91EC775FC4F9AE02.roa (hash: XAFPiyCkUajmfqGSLHpWXaC7zQuAH4W6AGpUVOedZk4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl
rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13791 (0x35df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
Validity
Not Before: Mar 26 14:22:37 2026 GMT
Not After : Apr 2 14:22:37 2026 GMT
Subject: CN=69c5412d-fd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d2:20:5d:7e:2c:79:d7:b1:62:d3:4c:f4:1b:
74:b8:60:5b:d3:f7:44:86:88:b9:5d:a9:0f:d4:0e:
5d:bc:5a:2a:03:d0:97:f4:9b:64:5d:46:50:e8:f9:
f2:48:21:62:23:91:f9:db:e1:76:de:71:34:73:32:
c2:a8:4c:e8:70:d5:a5:1d:d3:68:ed:5e:56:ad:4d:
73:78:b5:5c:38:11:35:c8:ba:85:d9:f7:dd:98:4c:
1a:3e:28:2e:2f:4e:e5:69:57:ca:80:f2:e0:7c:a6:
d1:0d:f7:c7:31:37:49:d5:9f:eb:8d:ff:95:c1:43:
6e:63:1e:88:45:92:9d:08:e5:78:5b:ea:9c:b6:53:
24:b2:d6:8d:c1:89:81:f2:8d:85:ac:2c:1d:83:47:
46:69:92:ec:37:f1:92:02:28:48:b6:da:f0:51:1f:
43:82:3f:a3:97:6c:da:25:78:44:17:60:3f:93:a1:
69:a1:7e:ee:c1:94:c8:bc:9a:c4:aa:72:a9:98:c6:
80:3e:29:f7:e7:10:1e:1f:fb:0b:9f:0c:6f:a8:63:
a2:47:15:2c:01:1f:e4:bb:bd:c9:08:d9:3e:d1:78:
51:51:2b:d5:a6:14:47:fd:e3:84:54:df:21:4c:66:
58:7e:62:95:13:b0:bb:ac:7e:aa:54:9c:f9:61:b5:
fc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BE:4C:32:CB:F4:E6:9F:F7:B1:6C:E4:AB:AB:4C:97:E5:21:DF:17
X509v3 Authority Key Identifier:
keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:53:97:63:b1:db:01:e1:61:de:ab:65:e8:b2:2c:fb:4d:60:
09:22:0f:1f:63:50:e6:28:ca:84:46:57:5d:61:01:da:4a:36:
2e:77:44:48:4c:41:22:06:e9:70:b3:5a:25:98:72:26:31:b0:
97:09:05:28:9b:c2:fe:80:48:76:db:13:ff:fc:e8:28:16:ca:
ac:d0:e7:30:ac:b3:a5:bf:eb:8c:79:bf:00:87:fe:f6:54:3c:
21:fb:b1:a4:56:5f:78:d8:1c:a5:14:85:79:04:5c:2d:a2:64:
75:6a:62:15:eb:9f:ee:ce:40:46:4f:67:02:90:21:3d:05:e1:
ae:ef:16:cf:17:d4:fe:0a:cc:62:e9:65:45:9b:4f:cb:83:fd:
8c:ad:66:47:75:bd:77:1b:1d:a0:e3:5e:65:53:54:7a:02:be:
be:99:ef:1c:69:50:70:3d:60:b8:26:1d:72:61:20:b5:0a:e3:
a1:41:24:41:46:3b:ac:16:93:51:cc:d8:66:78:b2:43:cd:03:
25:c4:d9:f8:f8:59:5b:be:46:d4:76:f6:5e:e1:66:e3:86:3c:
45:ea:df:88:4f:07:b2:67:b0:07:e8:cc:6e:d5:8a:e4:a8:d8:
a2:db:37:3d:c4:7a:b9:bf:6d:f2:86:48:f1:8f:e8:0f:39:f5:
2c:61:cf:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw
QUI0MTYyNjAwHhcNMjYwMzI2MTQyMjM3WhcNMjYwNDAyMTQyMjM3WjAYMRYwFAYD
VQQDEw02OWM1NDEyZC1mZDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnNIgXX4sedexYtNM9Bt0uGBb0/dEhoi5XakP1A5dvFoqA9CX9JtkXUZQ6Pny
SCFiI5H52+F23nE0czLCqEzocNWlHdNo7V5WrU1zeLVcOBE1yLqF2ffdmEwaPigu
L07laVfKgPLgfKbRDffHMTdJ1Z/rjf+VwUNuYx6IRZKdCOV4W+qctlMkstaNwYmB
8o2FrCwdg0dGaZLsN/GSAihIttrwUR9Dgj+jl2zaJXhEF2A/k6FpoX7uwZTIvJrE
qnKpmMaAPin35xAeH/sLnwxvqGOiRxUsAR/ku73JCNk+0XhRUSvVphRH/eOEVN8h
TGZYfmKVE7C7rH6qVJz5YbX88wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGC+TDLL
9Oaf97Fs5KurTJflId8XMB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE
ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ
bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Rjg5Qy81QjA3RjNBQzFEODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZV
U0E3Z3U2MDlKb0FLdEJZbUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKlOXY7HbAeFh3qtl6LIs+01gCSIPH2NQ5ijKhEZXXWEB2ko2LndESExBIgbp
cLNaJZhyJjGwlwkFKJvC/oBIdtsT//zoKBbKrNDnMKyzpb/rjHm/AIf+9lQ8Ifux
pFZfeNgcpRSFeQRcLaJkdWpiFeuf7s5ARk9nApAhPQXhru8WzxfU/grMYullRZtP
y4P9jK1mR3W9dxsdoONeZVNUegK+vpnvHGlQcD1guCYdcmEgtQrjoUEkQUY7rBaT
UczYZniyQ80DJcTZ+PhZW75G1Hb2XuFm44Y8RerfiE8HsmewB+jMbtWK5KjYots3
PcR6ub9t8oZI8Y/oDzn1LGHPSg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:41:41 2026 by rpki-client