
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
File: 1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json)
Hash identifier: TmY+H7xTWFepGq7EJGqNMubkRakSiKGJl93Jjqm8MF0=
Subject key identifier: D2:C8:BA:99:CD:ED:AF:7A:8B:1A:4F:80:F5:F1:30:02:85:F5:EB:61
Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Certificate serial: 01D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
Manifest number: 01B1
Signing time: Fri 17 Apr 2026 03:53:00 +0000
Manifest this update: Fri 17 Apr 2026 03:52:59 +0000
Manifest next update: Fri 24 Apr 2026 03:52:59 +0000
Files and hashes: 1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: kuaGu+/dnxwje+2t9A/D5y2dK7TgjuNngaH82bji3zg=)
2: FC98D5921DD311F1A4A9CCCC0B3D8C67.roa (hash: k8lZ7CX7mgq/3LVgfyzktUqzG5SajWKj3uNNsmVcBrg=)
3: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: X7fAABSVSD+9LU6mpGruwkT6PSiZnr5qD+C8yW0gUJw=)
4: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: DHViFPvNbWRkbmTAti4Bf+7PoBd6798WiZLchdU3w8g=)
5: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: ozs9i/euuZ75VUP6nxuqwBDiZfQIs7H9cQGCWKxhgPs=)
6: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: UdYA7ysQTtwuAPvC1szdIQjTM7ruBUjRZwFCktSblQQ=)
7: A17C3508168911EFBF38F580C4F9AE02.roa (hash: sy22vtii4K2errt2UOSSRnhaS+2ZGSF4IEAlJ6QMyT8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471 (0x1d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Validity
Not Before: Apr 17 03:52:59 2026 GMT
Not After : Apr 24 03:52:59 2026 GMT
Subject: CN=69e1ae9b-865f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:76:80:74:5c:98:65:18:3f:7a:de:8f:6b:
72:e2:18:4d:58:74:96:c8:53:df:d0:7a:08:83:36:
37:49:77:7a:b5:48:25:6f:84:b3:fc:9d:d4:52:7e:
20:1d:34:f7:77:5e:69:ad:96:f3:d8:4c:ac:9c:82:
33:e9:4a:39:3b:89:d5:c9:dc:80:eb:10:1c:0e:b0:
e5:9e:c8:dd:9d:59:db:39:b5:63:ca:95:a8:1a:98:
ee:06:23:dd:25:44:aa:75:37:45:5c:56:f3:ee:a7:
2e:d9:54:72:38:d6:fe:08:3f:58:51:c5:47:93:a3:
73:d0:4e:f2:05:8d:42:4f:e2:df:0e:b4:df:df:d5:
2c:ee:86:88:af:74:5d:5c:ff:70:f3:6b:3d:42:d5:
f3:22:7c:67:86:42:3f:ad:8c:3a:2a:bb:2b:8b:af:
a5:5c:6b:59:45:e4:07:ab:91:83:da:a2:ae:6d:d6:
c3:a8:39:da:80:80:75:38:af:72:ea:45:97:af:2f:
fe:99:a5:e0:bc:95:14:0a:c3:e3:ad:c9:5a:d3:6b:
18:2a:24:35:b5:fc:2c:82:eb:0b:81:e6:e5:42:62:
28:9f:ef:ee:ac:7b:c4:ac:fc:3b:df:c5:ee:f8:a7:
4b:9f:ec:0b:ab:e7:ee:cc:e1:d6:e3:15:a6:09:b3:
c5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C8:BA:99:CD:ED:AF:7A:8B:1A:4F:80:F5:F1:30:02:85:F5:EB:61
X509v3 Authority Key Identifier:
keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d3:82:ca:c5:51:cd:32:23:c4:f5:40:c4:6c:0f:24:54:ad:
0b:9c:4d:d7:11:e9:f7:c6:5a:f6:a4:4f:be:f1:69:4a:98:38:
9c:8d:46:c8:b3:a1:ca:a2:c9:04:14:35:f5:2e:26:29:b9:1b:
db:24:fd:bd:97:f9:d2:a0:b1:df:f9:c7:80:b1:87:10:26:61:
da:b1:52:ba:1a:80:e2:eb:e2:5f:06:02:30:32:66:4f:4a:f6:
1f:d1:3a:c4:73:bf:a5:9f:96:4d:49:28:b8:c2:c4:c8:92:8b:
48:9c:ea:95:a1:81:04:84:83:6d:1f:87:a8:d9:9b:ad:cd:1c:
b4:b6:0c:08:76:42:ba:e5:f3:ac:8e:20:36:c9:f5:4d:ff:f4:
ae:ea:0d:7d:22:c2:14:08:57:c5:67:c8:e0:ce:70:28:41:2e:
db:6d:04:79:10:c8:47:a4:ec:82:2e:f8:71:d2:d3:75:ff:50:
bf:fd:b2:9d:3d:be:21:ee:71:2d:12:5d:a1:85:6d:a9:d2:c6:
83:c8:62:59:0d:9a:a3:5d:a5:f0:80:12:4f:6d:a7:70:73:28:
1c:25:57:db:67:f0:9c:fa:83:ef:57:6a:9c:e9:91:32:b2:53:
13:7b:34:af:23:89:bd:40:d3:9b:fc:8f:03:64:ba:7f:c8:1d:
75:b0:37:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:13:10 2026 by rpki-client