
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft
File: 1lqglKUeKDl1O1khC2zyxUkVwB4.mft (raw, json)
Hash identifier: BbFdMmn/y1FlmxQJ2K1pqX2jNNxWM95Iw/feeWEAnNo=
Subject key identifier: 05:E5:78:E0:58:EC:F5:91:E6:19:77:F7:3F:1E:54:4A:CD:69:46:8A
Authority key identifier: D6:5A:A0:94:A5:1E:28:39:75:3B:59:21:0B:6C:F2:C5:49:15:C0:1E
Certificate issuer: /CN=A915C1AA/serialNumber=D65AA094A51E2839753B59210B6CF2C54915C01E
Certificate serial: 0A68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft
Manifest number: 0A60
Signing time: Sun 01 Mar 2026 23:11:46 +0000
Manifest this update: Sun 01 Mar 2026 23:11:45 +0000
Manifest next update: Sun 08 Mar 2026 23:11:45 +0000
Files and hashes: 1: 1lqglKUeKDl1O1khC2zyxUkVwB4.crl (hash: F2UOP3civvSh2rIMmIyB3uRSXrCRnUNBfdxiiDpBCIs=)
2: 220853047F2211EA8E730F35C4F9AE02.roa (hash: dvtbQl9WFxEalnHzoaHQdlGL9o00cBASyRMK3uXNSHI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.crl
rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2664 (0xa68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C1AA, serialNumber=D65AA094A51E2839753B59210B6CF2C54915C01E
Validity
Not Before: Mar 1 23:11:45 2026 GMT
Not After : Mar 8 23:11:45 2026 GMT
Subject: CN=69a4c7b2-3449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:03:1f:3e:d8:65:8f:68:68:5e:b5:d0:4d:9b:
f7:7c:55:f5:df:36:10:5e:c8:a5:42:f5:41:c2:b2:
79:cb:0c:ea:cd:cc:1e:cd:2d:f1:bf:78:c1:d9:4c:
ea:85:03:00:27:c7:c0:13:91:cf:83:52:11:44:8a:
ba:a3:0a:b6:8a:5d:b7:c5:85:dd:5e:f1:e8:39:3d:
0e:7a:c8:8d:df:da:79:3d:df:fc:01:05:20:1b:b7:
4d:c7:11:fb:76:c6:0c:0a:4b:0f:4f:f5:77:12:74:
0d:4a:fc:e5:82:a7:42:37:c7:40:54:2f:88:f6:a2:
dd:56:b5:bb:ca:cd:27:f7:24:db:9b:0a:29:6f:ff:
e9:3b:f4:e3:d4:8f:ab:98:f7:6f:8f:fc:7a:30:d9:
aa:47:c8:3f:72:77:9e:da:eb:f1:34:07:e1:f8:a0:
0d:1d:be:02:32:df:de:a6:46:aa:b6:35:ae:f4:e6:
09:21:25:1d:2a:03:9c:0a:9f:9a:0c:7b:83:6c:e5:
4d:99:63:6b:0e:80:fe:db:20:29:44:9c:72:73:db:
0f:56:c8:d6:32:ba:71:5a:1c:a2:ef:45:09:28:a7:
b6:f1:1c:bd:88:b9:4b:fe:06:ce:c8:c4:91:a7:20:
11:54:8f:f5:d8:b7:a7:e6:7b:8e:c0:4a:32:ed:c9:
cf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E5:78:E0:58:EC:F5:91:E6:19:77:F7:3F:1E:54:4A:CD:69:46:8A
X509v3 Authority Key Identifier:
keyid:D6:5A:A0:94:A5:1E:28:39:75:3B:59:21:0B:6C:F2:C5:49:15:C0:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:66:b7:10:29:c5:4b:72:4e:38:db:d4:92:73:96:84:48:64:
0f:3a:2a:37:1d:e4:06:4e:d1:e6:14:54:eb:32:ec:31:9e:36:
64:4b:28:bb:cd:02:16:f2:46:38:55:e8:8a:8e:73:28:82:51:
57:dc:45:7a:63:08:24:98:4a:a1:04:a2:1c:41:94:61:83:19:
85:0e:0f:5c:c8:b4:5b:43:21:43:8f:53:2d:09:88:5a:c6:8f:
a8:9c:fb:c8:36:12:4a:ea:a2:03:00:55:0d:a2:d6:79:94:19:
1d:6b:9f:c0:7c:a4:aa:dd:38:88:5b:42:4f:19:af:dd:5e:c5:
dc:9c:66:96:53:5d:d3:c4:b5:6c:22:69:ce:3b:82:b8:54:3f:
2f:75:db:65:9b:13:0f:ce:fb:fb:fb:c2:9f:76:15:71:5c:14:
1e:b5:04:ff:10:11:f0:31:b3:d0:7f:df:51:7c:d6:17:49:89:
d3:28:c7:a2:32:9b:4d:da:86:ca:08:16:94:86:3a:a8:35:9c:
ac:53:3b:e8:7d:32:a5:85:3a:aa:01:85:b4:e4:72:fa:f2:d9:
a0:a8:22:4d:a5:6b:96:2d:1c:68:36:0c:0b:ee:2c:2a:04:7f:
56:d9:5c:85:04:16:d9:4e:9d:f8:5e:54:1c:1d:52:54:65:80:
5c:6c:3b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:04:01 2026 by rpki-client