
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
File: fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json)
Hash identifier: BbvjZLnQ1Y/tY8iF2Y7mLheu3PpFx9z3+codR0An0LU=
Subject key identifier: E7:47:1F:63:CF:4B:84:FD:9A:76:92:ED:E1:9B:02:57:C0:87:09:27
Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
Certificate issuer: /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Certificate serial: 0428
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
Manifest number: 0410
Signing time: Sun 19 Apr 2026 00:23:45 +0000
Manifest this update: Sun 19 Apr 2026 00:23:45 +0000
Manifest next update: Sun 26 Apr 2026 00:23:45 +0000
Files and hashes: 1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: zga8e8KSRhQDkrMiSAn/ljgmglt0nvnGOXLQn9/X9mc=)
2: 791CD4FEFAE511F0B461E4A0696F56BC.roa (hash: 7W5oQwxnfaz/Da+/adv0pSip5O41XdqYh1qWJQtoYxU=)
3: 319786BEB63B11EF8D06900EC4F9AE02.roa (hash: Tj4ow2/jq+mUP/LMLTPrpgT8A3SwEW2gBwmbNDd2jrU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 00:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1064 (0x428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Validity
Not Before: Apr 19 00:23:45 2026 GMT
Not After : Apr 26 00:23:45 2026 GMT
Subject: CN=69e42091-d6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1e:98:3e:ab:f4:c6:04:5c:ea:2e:4f:38:35:
85:91:a5:3a:32:db:74:df:4d:3e:2a:91:b9:b1:14:
34:46:cd:63:9a:db:f4:ae:fb:ae:d7:f0:1f:0c:48:
8c:ce:7f:66:2c:ab:6f:5f:fa:eb:31:79:2a:86:f2:
59:6c:c5:90:47:17:ed:4c:bb:cf:1a:d6:f0:56:9a:
94:3e:2b:16:82:0d:61:bd:ad:28:22:a8:e6:13:2b:
b6:45:ee:ad:e1:7c:c8:7b:40:88:48:e5:2a:6d:7c:
59:83:aa:3b:fa:0d:4f:8e:ce:62:3f:bf:ae:c0:fb:
cf:e8:7c:0d:40:a2:39:b5:73:d4:93:33:87:86:01:
26:08:82:32:b5:01:39:5f:88:88:32:a1:e4:aa:10:
41:0f:ff:bd:2a:46:dc:0f:07:d4:e1:cf:e9:95:40:
ca:aa:78:96:89:e2:6d:60:ce:c8:f5:a7:f0:ff:32:
9e:97:1f:cf:30:dc:b3:7b:a4:e3:bc:67:55:3f:af:
38:bd:61:d3:8a:46:5e:cd:de:06:df:33:57:e1:4f:
08:93:15:a0:ee:0a:f8:1a:ba:41:72:2e:d2:57:f8:
18:84:8c:1c:81:aa:bd:fb:89:73:22:90:1e:62:a3:
60:0c:25:ab:ec:e8:df:95:ce:5f:09:31:2d:68:02:
c8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:47:1F:63:CF:4B:84:FD:9A:76:92:ED:E1:9B:02:57:C0:87:09:27
X509v3 Authority Key Identifier:
keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:1f:15:8c:e8:63:2d:e9:06:cb:2c:42:f5:cf:c7:f9:95:53:
3c:66:0d:c0:52:ef:d2:6f:09:32:74:38:59:90:af:24:69:28:
59:3a:bf:68:c5:78:1b:cc:7b:a2:a1:c5:9c:22:d7:96:24:56:
29:11:b8:a1:d3:88:c0:65:3e:77:93:d5:fe:18:71:a7:5b:66:
7b:c6:94:83:28:cf:46:c0:58:0d:94:03:64:a8:ac:3d:29:70:
e2:73:2c:ac:b2:81:1b:62:2d:5e:01:24:9b:c1:e0:0d:f5:71:
bb:0f:16:6a:65:ee:4c:bd:0f:67:e8:4a:72:77:f1:9e:59:f4:
82:33:78:f5:ba:52:ec:94:6a:83:31:84:80:a2:4f:2c:37:fc:
d8:0b:f4:0d:8c:24:07:d3:bb:06:90:08:52:51:78:20:90:88:
2d:cd:1d:ec:d9:c9:ea:f3:ec:37:f4:01:b8:47:ff:d2:95:db:
88:3b:17:4c:6e:c1:97:87:1b:ee:3b:e8:a6:cb:f3:5b:6b:ba:
29:04:64:3b:d0:09:11:da:0e:bc:24:d0:e0:bb:5b:09:75:40:
ec:6d:56:2c:c7:89:7e:93:39:55:fa:e8:25:78:b9:81:2a:b1:
1f:6b:34:65:a2:ee:dc:b7:a0:30:9d:77:a9:2c:4d:a8:af:3a:
51:84:3f:59
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ0RjIxMTAvBgNVBAUTKDdEMThEODc3NTAyMTA1RkExODcyQURFRTRDRjI2MjND
NDE0RjE2QjUwHhcNMjYwNDE5MDAyMzQ1WhcNMjYwNDI2MDAyMzQ1WjAYMRYwFAYD
VQQDEw02OWU0MjA5MS1kNmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1x6YPqv0xgRc6i5PODWFkaU6Mtt0300+KpG5sRQ0Rs1jmtv0rvuu1/AfDEiM
zn9mLKtvX/rrMXkqhvJZbMWQRxftTLvPGtbwVpqUPisWgg1hva0oIqjmEyu2Re6t
4XzIe0CISOUqbXxZg6o7+g1Pjs5iP7+uwPvP6HwNQKI5tXPUkzOHhgEmCIIytQE5
X4iIMqHkqhBBD/+9KkbcDwfU4c/plUDKqniWieJtYM7I9afw/zKelx/PMNyze6Tj
vGdVP684vWHTikZezd4G3zNX4U8IkxWg7gr4GrpBci7SV/gYhIwcgaq9+4lzIpAe
YqNgDCWr7Ojflc5fCTEtaALI2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOdHH2PP
S4T9mnaS7eGbAlfAhwknMB8GA1UdIwQYMBaAFH0Y2HdQIQX6GHKt7kzyYjxBTxa1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRGMi9EMjk5RjhFQ0I5
QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJmb1ljcTN1VFBKaVBFRlBG
clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZSallkMUFoQmZvWWNxM3VUUEppUEVGUEZyVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDRGMi9EMjk5RjhFQ0I5QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJm
b1ljcTN1VFBKaVBFRlBGclUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsB8VjOhjLekGyyxC9c/H+ZVTPGYNwFLv0m8JMnQ4WZCvJGkoWTq/aMV4G8x7
oqHFnCLXliRWKRG4odOIwGU+d5PV/hhxp1tme8aUgyjPRsBYDZQDZKisPSlw4nMs
rLKBG2ItXgEkm8HgDfVxuw8WamXuTL0PZ+hKcnfxnln0gjN49bpS7JRqgzGEgKJP
LDf82Av0DYwkB9O7BpAIUlF4IJCILc0d7NnJ6vPsN/QBuEf/0pXbiDsXTG7Bl4cb
7jvopsvzW2u6KQRkO9AJEdoOvCTQ4LtbCXVA7G1WLMeJfpM5VfroJXi5gSqxH2s0
ZaLu3LegMJ13qSxNqK86UYQ/WQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:29 2026 by rpki-client