
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
File: 1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json)
Hash identifier: ciOwvUTs9edgN6jjB5YJDYjhxwTLTyJwfKlMacNRj4w=
Subject key identifier: F7:20:DF:A4:F5:58:41:1A:7A:92:E2:C8:DD:A4:73:CB:95:59:1B:39
Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Certificate serial: 01FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
Manifest number: 01D2
Signing time: Sat 13 Jun 2026 03:51:35 +0000
Manifest this update: Sat 13 Jun 2026 03:51:34 +0000
Manifest next update: Sat 20 Jun 2026 03:51:34 +0000
Files and hashes: 1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: rimp8bAchxIMG7nALBqEAt7qLR278CDBrqvpsop5qbw=)
2: FC98D5921DD311F1A4A9CCCC0B3D8C67.roa (hash: k8lZ7CX7mgq/3LVgfyzktUqzG5SajWKj3uNNsmVcBrg=)
3: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: ozs9i/euuZ75VUP6nxuqwBDiZfQIs7H9cQGCWKxhgPs=)
4: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: X7fAABSVSD+9LU6mpGruwkT6PSiZnr5qD+C8yW0gUJw=)
5: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: UdYA7ysQTtwuAPvC1szdIQjTM7ruBUjRZwFCktSblQQ=)
6: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: DHViFPvNbWRkbmTAti4Bf+7PoBd6798WiZLchdU3w8g=)
7: A17C3508168911EFBF38F580C4F9AE02.roa (hash: lERVsj7ZnxrnEf9TOgtovUJSwTh4Gsu5+Sq5arEpLic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:51:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Validity
Not Before: Jun 13 03:51:34 2026 GMT
Not After : Jun 20 03:51:34 2026 GMT
Subject: CN=6a2cd3c6-be73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:c4:40:64:e0:d5:2d:d1:2f:57:8a:2b:f3:
dd:5a:42:6f:63:05:96:03:01:18:7e:ac:b8:a9:ae:
23:58:a9:b7:03:9c:ee:2a:aa:36:a0:6c:20:da:56:
13:bb:d2:d7:db:ce:db:21:c2:22:b8:0f:cd:e0:4d:
08:e2:9e:94:84:f4:64:2a:5a:2a:21:7c:90:7a:9c:
3a:d6:9b:fb:b9:b3:65:d6:4e:97:7d:8d:c3:ab:42:
4b:ef:47:99:2c:fa:96:35:21:3a:d2:36:6f:1b:bc:
2a:12:db:a1:49:ee:46:b9:98:f4:d3:7e:43:81:e0:
68:8e:f4:61:9d:7b:b6:e2:6b:d6:fb:84:ec:5c:54:
c8:e3:5e:bb:be:07:0c:f3:c7:a0:fe:a6:6b:96:61:
95:41:d4:91:ca:a9:a3:a0:d4:ca:4d:36:85:6e:33:
a0:da:61:00:23:85:fc:d3:ff:98:7d:a8:c8:55:f1:
dc:af:12:30:8d:9d:ef:af:fc:bf:68:b0:12:56:0a:
46:64:ff:94:c4:f6:d1:94:49:3d:08:b1:08:7e:27:
81:4b:4d:f4:f9:d1:a0:e2:6a:ad:bd:b1:84:43:f6:
1c:c4:94:99:d8:d8:de:37:0e:85:c9:1f:84:e4:58:
2a:4e:51:bf:02:bd:78:64:be:3f:07:06:72:3c:0f:
48:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:20:DF:A4:F5:58:41:1A:7A:92:E2:C8:DD:A4:73:CB:95:59:1B:39
X509v3 Authority Key Identifier:
keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5b:a0:79:81:c4:4e:8e:f1:76:8e:5d:1b:9a:2d:26:79:b7:
40:6e:54:b2:c7:65:f8:5b:72:52:31:e3:c8:31:7b:32:36:46:
55:62:bb:c8:51:e9:fe:bc:20:e6:72:0a:18:6d:ef:47:0a:88:
2c:59:18:47:cf:19:4a:91:ce:12:95:d1:1b:9f:fe:50:f4:97:
2b:9c:14:a1:42:f0:bf:00:a8:08:1d:c9:7e:71:12:68:58:9c:
25:25:0b:14:56:f8:ed:1a:52:66:9d:38:ae:d3:48:3d:3a:10:
2d:fa:54:ac:15:46:ad:f9:74:32:92:39:b9:9c:07:64:2c:bb:
f7:4a:e0:a8:94:24:0e:f1:b3:9a:75:f5:53:8d:4a:c4:f5:a8:
a2:cc:28:21:56:bc:1c:9d:b6:2f:90:d2:c5:bb:e9:6c:9e:cd:
8d:0d:f8:8c:ea:5a:d4:36:82:54:b1:73:45:77:0a:e5:60:2b:
5e:e3:91:52:9c:35:9b:66:b3:5d:5a:7d:cc:33:ec:e5:95:dc:
21:60:21:5a:38:16:e2:15:61:b3:d3:42:96:ab:ea:a8:15:e6:
41:75:71:90:8e:95:50:77:a3:ae:49:85:6f:98:fc:2a:8c:a6:
b4:02:68:3e:05:05:44:73:5f:09:25:94:ee:54:52:ce:a2:f1:
d3:b0:59:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:39:59 2026 by rpki-client