
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft
File: Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft (raw, json)
Hash identifier: I7dma1P+Vo+T0shi41PM6KPyrxYojzztMky2wuySNbI=
Subject key identifier: 35:F9:64:7B:62:3B:F5:DE:3F:0A:D8:66:8F:B4:26:F6:0C:AC:BB:9B
Authority key identifier: 15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42
Certificate issuer: /CN=A916B0EA/serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42
Certificate serial: 08C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft
Manifest number: 1578
Signing time: Tue 24 Mar 2026 18:15:35 +0000
Manifest this update: Tue 24 Mar 2026 18:15:35 +0000
Manifest next update: Tue 31 Mar 2026 18:15:35 +0000
Files and hashes: 1: Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl (hash: 3BRGyKawBVpqyvBlQJhCwmyvenUNNs5WqvvLQVN8EF4=)
2: 6535FEC0345C11F0B4126F3CC4F9AE02.roa (hash: RI3k7jd5Py+4n5PpztOSlnf146C3FanWcnH9vVZTti4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl
rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:15:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2247 (0x8c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B0EA, serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42
Validity
Not Before: Mar 24 18:15:35 2026 GMT
Not After : Mar 31 18:15:35 2026 GMT
Subject: CN=69c2d4c7-ae46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a1:04:3d:5b:9c:d2:51:67:d2:ba:e8:c9:a1:
d6:1c:e4:83:f2:6e:86:d9:b6:1d:d6:90:68:92:e3:
e5:bc:81:d7:80:42:d7:5a:0f:e4:e9:4c:b0:f0:7d:
35:49:88:6d:e6:99:e5:d7:33:38:e7:6c:2a:d3:9f:
5b:c0:d0:69:15:e4:2c:20:e0:b3:49:fb:1c:77:d6:
f5:c8:d6:c2:2b:98:0f:c8:5f:22:5e:41:a2:09:ac:
d8:d8:13:2f:f4:1b:f9:c3:c5:3e:29:d3:60:d1:b9:
2b:05:bc:d6:30:e9:0a:fd:bd:cd:b9:0b:27:9b:e1:
7f:e4:66:05:cf:ed:a7:2c:43:8b:3b:78:77:d6:4e:
27:f1:a3:32:20:bd:3f:57:09:2a:c3:95:fa:2d:b5:
0e:c6:71:58:57:e1:a0:e5:36:33:96:60:4c:c1:19:
49:58:ba:d4:af:07:b6:f9:4b:0a:27:6e:dc:84:ee:
53:c0:0f:cf:ca:90:41:c4:9c:d3:b2:ed:ce:9e:5a:
68:e8:24:a9:2a:ce:5d:84:47:c2:2f:c3:e9:8c:fe:
ab:05:e5:d8:5b:e5:9b:97:2c:5f:9b:66:13:75:44:
17:9a:a5:65:15:c3:8b:ff:d5:9e:3c:35:a0:8b:fc:
1c:96:1c:26:93:8f:bd:c5:60:95:8b:a4:38:35:0a:
cd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F9:64:7B:62:3B:F5:DE:3F:0A:D8:66:8F:B4:26:F6:0C:AC:BB:9B
X509v3 Authority Key Identifier:
keyid:15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a9:14:58:ea:24:85:bb:3b:6b:b5:94:c1:ce:36:1b:7e:69:
1d:76:fb:58:0f:89:0f:0b:79:61:fc:08:00:e5:cf:86:74:87:
3c:68:77:46:5a:47:92:2a:17:1b:46:e9:07:f1:f9:63:2f:4c:
10:67:fc:81:9a:d1:31:12:60:57:5c:ee:a8:e7:15:ed:1e:36:
d9:a8:6d:c4:75:41:bb:83:58:43:e5:ce:26:95:ce:bd:a7:f8:
2b:03:35:c8:35:cc:f3:21:22:f3:6d:a9:1f:f8:5e:fa:86:2e:
5a:51:6c:3b:9e:33:e7:20:ff:39:ff:ef:23:50:51:c4:6d:d1:
f7:cd:24:05:29:10:b1:9c:18:25:08:5b:e3:b4:8e:be:31:51:
07:59:c2:0d:f3:f4:a7:96:00:a0:ea:38:85:41:ab:68:15:17:
eb:68:1a:b2:4b:ac:5a:38:a7:d4:8f:b0:9e:c3:f2:0f:63:c4:
d4:f8:42:83:11:cf:f6:75:ab:66:d6:0a:48:13:7d:ed:d2:e2:
53:a2:fc:11:6c:62:b2:16:11:df:bc:97:59:95:1c:ca:a2:d7:
d2:01:94:9d:c7:f4:d3:f2:58:50:e0:0c:5a:8f:b6:44:49:b9:
55:33:16:21:ba:62:08:9e:0d:a4:d4:13:25:8a:4c:8b:3c:78:
a2:52:f4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:25 2026 by rpki-client