
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
File: aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json)
Hash identifier: CUABDxmSuLaHi6izlROE20KDggqx9XzudS6MBXrYo/U=
Subject key identifier: 67:5A:74:68:8B:8A:14:FF:49:5A:12:6C:72:47:15:B3:3C:38:82:83
Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D
Certificate issuer: /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
Certificate serial: 3595
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
Manifest number: 3570
Signing time: Tue 28 Jul 2026 15:21:40 +0000
Manifest this update: Tue 28 Jul 2026 15:21:39 +0000
Manifest next update: Tue 04 Aug 2026 15:21:39 +0000
Files and hashes: 1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: mi+QiKcsUg+59TlxnCfVa1O1W6DuzPdeI6tc7Fq40OA=)
2: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: FGtCl+rkKsPwQBZaBP2SI6ZyzxIcUGM879HPiMEoLJQ=)
3: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: RQy3CULDGNVnkWRkKUELBca0bv/+qjtto2dvJUv9MVk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl
rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13717 (0x3595)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C1FE, serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
Validity
Not Before: Jul 28 15:21:39 2026 GMT
Not After : Aug 4 15:21:39 2026 GMT
Subject: CN=6a68c903-b484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:52:f3:fd:8b:8d:d6:6e:cd:b8:ca:9c:be:fc:
15:6e:46:f4:68:f0:e8:f3:23:74:b0:de:9a:16:f1:
5d:9b:4a:5a:5a:e1:4b:ba:86:db:d6:09:d7:13:49:
f4:a6:b2:14:af:e6:77:60:35:71:b8:ff:30:75:83:
87:38:3f:0a:ce:1f:44:9f:64:81:b6:22:8e:87:e5:
d4:99:a3:6f:5e:30:1b:26:c3:50:ab:b3:a4:5a:a7:
e0:72:04:8e:19:e9:39:de:64:4f:bf:a9:d8:9f:5e:
e0:38:49:8f:20:5d:42:19:fe:db:d5:e8:31:12:ca:
94:10:0f:11:b5:79:38:fe:f8:87:c4:f5:15:d8:16:
77:f3:e1:19:85:f0:dc:26:5d:8c:1c:f6:4f:b5:e0:
2f:2e:f9:85:37:fe:57:ca:88:2e:47:16:3e:f0:46:
9a:17:54:9c:2a:3b:7f:a9:92:a2:3a:19:fb:16:03:
fc:6f:4e:cf:d2:6d:70:e8:10:6f:f8:0b:64:66:a7:
27:90:66:de:49:6d:10:e7:39:f7:62:f2:46:79:32:
2b:27:57:2d:7b:e9:5a:db:91:e1:f9:f6:74:8b:29:
e1:b7:bf:de:bb:2e:7b:77:03:2f:18:70:02:c2:d2:
7d:31:aa:32:f4:c1:08:80:b6:b7:22:56:08:e1:d8:
f8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5A:74:68:8B:8A:14:FF:49:5A:12:6C:72:47:15:B3:3C:38:82:83
X509v3 Authority Key Identifier:
keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:eb:3c:83:0e:4b:f9:bd:f4:e8:fd:5b:db:bd:04:8d:85:e7:
de:36:68:7f:31:54:72:55:9f:80:15:54:6f:c9:89:32:7e:17:
f9:b7:35:7a:82:8d:ce:e6:88:f3:93:27:0c:94:9a:aa:8e:84:
be:6c:8e:65:78:e6:f6:bb:0f:60:33:4d:8c:ce:93:f0:d9:d8:
1c:db:ae:63:40:fe:15:c7:9b:3b:3d:76:b8:53:95:6a:90:a7:
8b:cd:ee:e9:fc:1d:81:51:6b:48:bc:31:5e:94:67:c8:cb:7c:
33:11:ef:46:43:f6:9f:d5:ba:3f:31:24:26:df:d9:04:4f:dd:
95:3a:59:c9:7d:6f:cc:49:84:6d:f6:b5:4b:f3:4d:44:6a:94:
10:21:56:de:2a:45:cb:26:a6:4f:d2:a1:cb:78:da:6f:ef:92:
22:69:d0:17:bb:57:f5:df:bb:fc:8c:44:90:d7:63:c9:be:5a:
67:6b:4a:a1:29:c6:79:f5:03:f4:14:63:78:76:01:8c:ad:84:
c9:bb:8a:81:d4:15:78:7c:89:64:93:01:4f:79:88:ea:54:0e:
25:53:a5:0e:98:7e:7e:b9:81:8f:be:82:2d:23:4f:ad:fe:fc:
55:16:3c:95:4c:ee:30:74:cc:62:05:d7:49:38:9f:7c:2f:11:
f3:61:86:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUMxRkUxMTAvBgNVBAUTKDY5OUEwRjhEMTVBMzRGNTk5NTZDQjQ4MDBDNkM0NDA0
REMwRUJENUQwHhcNMjYwNzI4MTUyMTM5WhcNMjYwODA0MTUyMTM5WjAYMRYwFAYD
VQQDEw02YTY4YzkwMy1iNDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6FLz/YuN1m7NuMqcvvwVbkb0aPDo8yN0sN6aFvFdm0paWuFLuobb1gnXE0n0
prIUr+Z3YDVxuP8wdYOHOD8Kzh9En2SBtiKOh+XUmaNvXjAbJsNQq7OkWqfgcgSO
Gek53mRPv6nYn17gOEmPIF1CGf7b1egxEsqUEA8RtXk4/viHxPUV2BZ38+EZhfDc
Jl2MHPZPteAvLvmFN/5XyoguRxY+8EaaF1ScKjt/qZKiOhn7FgP8b07P0m1w6BBv
+AtkZqcnkGbeSW0Q5zn3YvJGeTIrJ1cte+la25Hh+fZ0iynht7/euy57dwMvGHAC
wtJ9Maoy9MEIgLa3IlYI4dj4RQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGdadGiL
ihT/SVoSbHJHFbM8OIKDMB8GA1UdIwQYMBaAFGmaD40Vo09ZlWy0gAxsRATcDr1d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzFGRS9EMTE4QUFCQTFE
QUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQxbVZiTFNBREd4RUJOd092
VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Fab1BqUldqVDFtVmJMU0FER3hFQk53T3ZWMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QzFGRS9EMTE4QUFCQTFEQUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQx
bVZiTFNBREd4RUJOd092VjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqOs8gw5L+b306P1b270EjYXn3jZofzFUclWfgBVUb8mJMn4X+bc1eoKNzuaI
85MnDJSaqo6EvmyOZXjm9rsPYDNNjM6T8NnYHNuuY0D+FcebOz12uFOVapCni83u
6fwdgVFrSLwxXpRnyMt8MxHvRkP2n9W6PzEkJt/ZBE/dlTpZyX1vzEmEbfa1S/NN
RGqUECFW3ipFyyamT9Khy3jab++SImnQF7tX9d+7/IxEkNdjyb5aZ2tKoSnGefUD
9BRjeHYBjK2EybuKgdQVeHyJZJMBT3mI6lQOJVOlDph+frmBj76CLSNPrf78VRY8
lUzuMHTMYgXXSTiffC8R82GGgA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:55:57 2026 by rpki-client