
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
File: 1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json)
Hash identifier: RrVusFLhQbuSRAxXM1BB1F3jImNd981L65MX/c3ejPg=
Subject key identifier: A9:29:E4:C4:6C:C5:D3:A6:14:BC:F5:5A:9A:8B:05:CE:C3:A7:D4:9C
Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Certificate serial: 0236
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
Manifest number: 0208
Signing time: Wed 23 Sep 2026 03:09:42 +0000
Manifest this update: Wed 23 Sep 2026 03:09:42 +0000
Manifest next update: Wed 30 Sep 2026 03:09:42 +0000
Files and hashes: 1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: UqIOgKmEVS31NHmi32gIu39L6wpw36VQF66MFJO9iMg=)
2: FC98D5921DD311F1A4A9CCCC0B3D8C67.roa (hash: ++fsQ0/jJTKdEu1JkASqMR02WrvMLM0KHw5n4mNel4A=)
3: A17C3508168911EFBF38F580C4F9AE02.roa (hash: virvE8MNeacbpPBupuEDzS3TVIUvnhiLbybl98L+CAc=)
4: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: CA0JuNkvVVXyVT5toC5IeijiB5JBV7T65rHh34RkVIc=)
5: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: tsA6mcx7ucUTughH+97Dx7IXBusCUvi+yLFT4jUjZ20=)
6: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: X0b3ZN/Eb7T73dnsboUoSmhWFfXS5G0F5wbtUheErQY=)
7: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: 0fG/vVdhETGxvUxsnTXZR1Zd2MfoUspa8W6pNyP2sU0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 566 (0x236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Validity
Not Before: Sep 23 03:09:42 2026 GMT
Not After : Sep 30 03:09:42 2026 GMT
Subject: CN=6ab342f6-5a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:15:75:a8:ae:6d:f6:35:0f:c9:ca:b1:41:
60:0e:64:1a:6c:9e:2c:34:63:7e:33:d8:ef:fa:79:
f1:bb:75:ac:8e:aa:ef:f6:71:42:8b:68:da:99:dd:
b0:f6:74:90:69:4a:a5:0f:8d:88:ab:c0:93:45:72:
6a:e7:dc:4f:4f:44:1f:7a:6f:41:e9:b1:bc:38:27:
b1:e4:29:a4:6b:ab:f0:c1:07:c5:c2:e4:1c:85:ac:
3b:ea:c9:cd:08:dc:ff:11:63:a4:85:5c:44:f2:f0:
8f:45:27:d6:06:c9:83:a0:6d:b3:c6:5f:da:52:f0:
6f:85:0d:ca:6e:3d:26:c2:ad:29:37:95:f2:21:a2:
aa:b7:68:34:75:4f:94:98:17:bb:56:88:7d:09:fd:
bc:45:8a:7d:9b:ea:25:f6:42:d8:75:b6:78:c6:86:
89:10:2b:24:12:75:d2:c2:18:81:c5:52:8c:8a:06:
9d:38:f5:79:72:8f:b4:11:1c:47:43:81:1b:d4:d0:
c1:69:96:cb:38:bc:2b:29:54:cb:ec:a4:39:4a:cc:
14:e2:0f:f6:5c:a6:e7:3d:43:7b:d1:03:57:6b:0a:
20:e2:c1:2f:72:07:b0:04:af:09:10:6d:7b:9d:51:
31:ca:d7:8f:bc:ef:b1:b6:7f:56:b7:0d:28:a5:14:
ec:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:29:E4:C4:6C:C5:D3:A6:14:BC:F5:5A:9A:8B:05:CE:C3:A7:D4:9C
X509v3 Authority Key Identifier:
keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:04:c6:d8:22:2f:36:3a:b7:2d:65:53:cf:01:b9:bf:4f:95:
3b:f2:78:31:d5:a1:d2:b7:fe:48:33:86:35:0b:f3:44:2c:d8:
dc:7b:2f:ef:b1:e1:4a:92:9b:99:5c:9b:51:5d:92:35:03:ee:
e1:ea:83:0f:85:ee:1c:3c:45:6e:7a:dc:8b:2a:0d:6e:dd:22:
5c:ad:94:04:4c:26:21:5d:25:6c:c6:84:44:b3:84:b5:21:42:
13:44:9c:72:7d:e6:1b:e7:7d:d8:91:30:3a:b2:25:69:54:70:
12:e0:05:b4:8e:4b:2f:e9:2e:db:1d:fb:0b:04:7e:ae:a3:33:
40:d3:f9:7b:1e:f3:4c:51:74:ca:73:5a:37:5e:cf:87:8e:3f:
8c:12:23:ce:39:8b:3e:02:d2:88:44:99:ff:a3:66:31:39:9f:
fd:5c:31:21:c2:8a:70:81:f8:64:e6:1e:07:d4:15:b2:b9:f0:
d2:bb:d5:ee:0c:1b:49:85:42:ff:16:23:b5:27:b2:c7:40:29:
ae:77:66:c6:5b:1d:cf:96:91:5e:9b:af:83:07:67:ca:d3:9b:
9e:b9:55:46:26:c6:4c:de:e7:19:8e:55:93:96:fb:b1:49:26:
85:17:7d:6c:4d:6c:f5:df:04:a4:89:c5:a7:8d:94:c4:c1:ac:
2f:66:fe:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:23:50 2026 by rpki-client