
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
File: aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json)
Hash identifier: E9Nz3JsQ/zNrjnYyb2YSNsnU7Qo31IwSjV/qgvxxJYE=
Subject key identifier: 01:C7:6B:C4:DF:78:01:02:8D:5D:6F:15:E5:03:2F:37:7A:34:B1:7F
Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D
Certificate issuer: /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
Certificate serial: 353F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
Manifest number: 3520
Signing time: Sat 28 Feb 2026 15:18:16 +0000
Manifest this update: Sat 28 Feb 2026 15:18:15 +0000
Manifest next update: Sat 07 Mar 2026 15:18:15 +0000
Files and hashes: 1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: qHlM7LK8XrtOgh/HXq+uuq8IQCCHIFgrZ8pc8YMueyU=)
2: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: lhbAPGcQQjVfLeBPPvSfLGakAoAsie+moEAIzx57Z0Y=)
3: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: 1AXC4CdSqCeZreg7Kdx8zTNNLCij2RY2Acpk7gs3UmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl
rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:18:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13631 (0x353f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C1FE, serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
Validity
Not Before: Feb 28 15:18:15 2026 GMT
Not After : Mar 7 15:18:15 2026 GMT
Subject: CN=69a30737-ceeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f5:09:23:7e:13:33:55:0e:c1:a2:50:06:cb:
10:88:1c:09:e4:38:0e:68:e0:fe:81:2f:da:59:69:
f3:6c:5a:9a:5e:e0:fb:e0:71:75:35:7d:3c:5b:57:
4b:ad:62:78:6c:ab:43:30:91:4e:cf:b3:33:a1:d2:
4e:03:93:3d:5f:f3:b4:21:9f:1b:69:e6:a4:41:1e:
33:9e:ae:43:12:4d:a4:a6:a7:41:6e:5f:b6:40:66:
6c:ef:10:43:3d:cd:63:00:7b:85:10:8d:e2:40:7f:
b8:5f:71:9b:7b:50:49:7f:af:f5:2c:f0:f7:2e:7b:
3a:7d:1d:91:09:b3:eb:dc:be:03:51:05:d8:54:11:
86:73:d1:cd:73:c7:54:82:4f:2f:f2:6e:3e:56:12:
23:b5:47:6c:0b:20:78:21:3a:d7:bc:8a:12:6f:23:
45:04:76:90:84:ec:33:8b:5b:69:43:40:15:2c:f4:
70:40:c0:68:ba:cd:f4:ad:20:85:04:2f:81:d4:1e:
f1:1e:2e:83:ce:f7:19:dc:ce:7d:e4:07:42:ff:06:
ed:0e:9e:dd:9a:bf:d9:0c:07:a5:3e:fa:eb:00:72:
c2:c7:d1:20:ac:e8:f7:95:36:14:3a:c3:63:8e:ff:
d7:aa:c9:56:6b:a5:09:db:12:e0:7d:79:b4:52:07:
58:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C7:6B:C4:DF:78:01:02:8D:5D:6F:15:E5:03:2F:37:7A:34:B1:7F
X509v3 Authority Key Identifier:
keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:aa:25:86:20:6c:c2:4d:f0:66:12:2a:17:0a:d0:a1:7d:b4:
a4:72:ae:86:a5:a4:82:d8:30:33:1d:e7:c1:0f:8f:7c:94:88:
78:29:66:bd:f1:67:03:26:a4:65:a3:85:c4:2f:0b:8b:2f:fa:
bd:a2:38:ac:71:5a:c3:1a:9f:a9:eb:98:a5:8a:69:d3:96:3d:
0d:36:50:ae:7f:55:98:6e:7b:8a:d2:31:f9:8d:0d:a6:35:a0:
79:d9:3e:13:91:a9:11:b7:e6:fe:6e:43:2c:d8:67:ae:96:74:
50:36:b2:82:07:b1:24:1d:a6:e6:11:ab:9f:45:89:83:ca:dc:
ca:94:52:61:5d:d0:c0:5f:5b:ff:3e:1e:55:96:fb:b2:5f:7a:
ed:12:09:a2:0a:f9:28:67:7f:4b:21:7d:c2:8a:74:17:20:a2:
8a:4b:6b:47:75:01:63:6a:a0:73:04:9d:b4:15:5b:66:8d:be:
39:fa:a4:c2:5d:4d:8d:54:d0:5d:31:55:98:c2:05:e3:da:90:
ff:92:0a:e0:69:9d:79:e4:ef:32:2e:3c:4b:46:5c:5c:00:71:
96:8b:ed:0e:dd:93:08:26:fa:e6:1d:6a:f1:df:0a:62:6f:01:
41:d5:67:4c:39:9a:57:75:c2:9c:a2:6d:ce:c7:9e:55:28:9c:
f8:fb:d9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:19 2026 by rpki-client