
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft
File: f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft (raw, json)
Hash identifier: h/RZRRPsjdmT0/ce849cxpHl0Y7K7RU/aL1Cr2KF1nM=
Subject key identifier: 85:6A:92:BD:8D:5B:F4:9A:C4:8E:7E:F8:04:C3:67:3F:CB:73:98:93
Authority key identifier: 7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7
Certificate issuer: /CN=A915BA28/serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7
Certificate serial: 1153
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft
Manifest number: 113F
Signing time: Mon 02 Mar 2026 01:37:14 +0000
Manifest this update: Mon 02 Mar 2026 01:37:13 +0000
Manifest next update: Mon 09 Mar 2026 01:37:13 +0000
Files and hashes: 1: f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl (hash: +7MN0eKTlLXRf6U5Pqewmxh52ryXCPngNF/N4XGf9W4=)
2: C90C4476FBA611E9BA00AB33C4F9AE02.roa (hash: 3Xi7wtEGd4JYA4AAv2yv0nPxB/PtZ4h9SU2C5rJNJXI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl
rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4435 (0x1153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BA28, serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7
Validity
Not Before: Mar 2 01:37:13 2026 GMT
Not After : Mar 9 01:37:13 2026 GMT
Subject: CN=69a4e9ca-25c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:3d:03:9a:78:41:38:a4:7d:02:f9:74:bf:
02:d1:15:dc:b2:a3:8c:4c:17:cb:d7:15:3c:35:7b:
f0:79:3e:12:ab:70:02:00:99:9c:04:bc:50:34:0a:
41:b3:12:c3:3a:97:29:f8:dc:5e:30:62:61:0b:7b:
c3:0b:38:7d:a0:ad:11:d2:a6:28:7b:e9:6e:7b:60:
22:3e:de:71:f1:24:22:6c:cf:f8:c6:28:1c:0b:22:
7e:5f:f6:86:ac:6e:91:12:08:8f:99:57:54:26:57:
7b:dc:ff:cb:2f:d4:a0:27:d7:60:1b:1d:20:0d:1d:
7a:11:30:48:97:1a:ed:2a:de:57:0f:bf:b4:8a:d7:
39:ba:6e:00:1a:8e:cf:bc:e4:8f:1d:d7:ac:9d:03:
44:bb:5e:dd:e0:79:3c:df:f3:57:1b:75:f5:63:83:
a2:91:eb:2a:1c:c0:2d:8d:91:26:69:6d:2a:8a:b9:
09:6f:3a:34:5b:59:2e:fc:43:ea:c8:9a:d5:8d:b8:
8e:98:2e:21:57:41:7d:33:06:cc:83:ae:cf:5d:cb:
39:a0:15:3e:60:42:57:07:ac:77:29:4a:65:af:fa:
f3:dd:c4:bd:54:3b:46:bc:81:ba:c5:ed:f6:0f:40:
02:c7:ee:2b:87:06:f7:e2:36:2c:d0:66:86:8a:c2:
56:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6A:92:BD:8D:5B:F4:9A:C4:8E:7E:F8:04:C3:67:3F:CB:73:98:93
X509v3 Authority Key Identifier:
keyid:7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:d1:0e:25:db:e8:94:61:81:ce:14:78:2a:eb:b5:36:2d:09:
10:c8:88:a4:22:a4:60:01:c1:e1:70:bf:f9:90:56:bc:29:84:
2c:cf:d1:e5:bc:a4:f0:64:65:70:b6:56:3e:3e:db:09:53:55:
bb:c5:e6:3b:cf:e4:15:57:78:5b:c0:7a:74:77:2a:e5:34:9a:
dc:12:2f:03:bc:77:cb:7a:af:a4:73:65:5c:65:f8:b2:c9:70:
62:c9:ee:de:bf:62:4e:4c:c2:63:53:c8:c9:b1:8e:7d:24:e6:
d7:b7:23:af:98:34:b4:fd:73:71:5b:6d:77:9f:6e:1a:e7:b3:
4d:e4:5f:f4:94:30:41:27:fc:e4:98:54:27:31:1c:f6:b7:ac:
f3:68:55:2e:f3:60:82:7b:54:0b:2e:28:76:57:ee:1c:78:7b:
b1:9d:04:20:d3:f9:e8:d1:0c:bf:e6:34:e0:c7:5b:5c:75:6a:
e9:4a:a4:01:8c:81:c9:84:e5:4f:f9:b0:05:1c:19:0c:2c:bb:
00:3c:8a:c8:55:21:b3:9e:2e:c3:23:a6:0b:25:66:97:f3:1f:
8d:64:d9:23:60:6f:99:c6:63:99:b5:86:02:c1:76:f2:c8:2a:
82:c1:91:0d:4f:64:d4:bb:15:7c:ce:7d:1b:ad:a7:21:03:ce:
c9:b2:59:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:49 2026 by rpki-client