
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
File: fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json)
Hash identifier: A9yPkfj3SNHts6gJdBsr9vnfLj60cn37VXeYFkMTFDw=
Subject key identifier: FB:74:0F:BB:95:3D:42:C9:FC:14:30:AD:F2:41:69:B3:43:A6:E9:4E
Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
Certificate issuer: /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Certificate serial: 045C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
Manifest number: 0443
Signing time: Mon 27 Jul 2026 01:21:39 +0000
Manifest this update: Mon 27 Jul 2026 01:21:39 +0000
Manifest next update: Mon 03 Aug 2026 01:21:39 +0000
Files and hashes: 1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: kGzgUBvUjGVPrS7ZIcgByPAhJ4Wjo/c325YGV/7UlcA=)
2: 1762C314878E11F199DA80955211F970.roa (hash: IzQBeC4PmDoF+drcIWyzoD8TumN/IGGjux0nGstfa/Q=)
3: 319786BEB63B11EF8D06900EC4F9AE02.roa (hash: Tj4ow2/jq+mUP/LMLTPrpgT8A3SwEW2gBwmbNDd2jrU=)
4: 791CD4FEFAE511F0B461E4A0696F56BC.roa (hash: 7W5oQwxnfaz/Da+/adv0pSip5O41XdqYh1qWJQtoYxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1116 (0x45c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Validity
Not Before: Jul 27 01:21:39 2026 GMT
Not After : Aug 3 01:21:39 2026 GMT
Subject: CN=6a66b2a3-c26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:ec:10:8b:b9:89:8f:9a:11:06:8f:8f:ca:
e8:c1:d2:d0:c1:3d:6c:ab:a6:ea:07:1c:b0:8b:16:
a6:5e:a1:4d:be:03:ff:6e:9d:53:1a:69:21:b9:06:
df:b0:67:2b:c7:04:9e:8f:0c:74:e0:02:eb:fb:2e:
26:b2:66:13:fa:79:68:b2:cd:4f:74:0b:0d:bb:33:
0c:93:8f:c1:a9:09:5d:b0:32:7f:ec:5a:06:c7:25:
b5:66:63:21:62:f3:09:5c:b6:b6:bc:c6:89:6f:98:
cd:48:a3:39:57:d0:9c:12:26:b4:11:45:cd:98:da:
07:ed:1a:6e:0d:4d:0a:59:be:7d:80:db:0d:09:d3:
18:95:20:a3:77:f1:9f:55:4d:d3:f4:5f:12:fb:c0:
b7:a2:b3:7e:9b:67:ec:58:2f:17:e2:ef:85:75:be:
33:89:c2:cc:f2:16:8e:a2:ef:5b:f4:63:6c:ca:e3:
27:47:f1:5d:4d:6a:3b:83:9a:26:a8:41:1a:e8:4e:
25:fb:3e:39:9c:ca:1f:f1:71:ce:34:bc:37:c7:9e:
79:d3:9c:78:a8:f7:51:76:89:91:00:79:a5:24:69:
a8:28:e0:09:7a:09:8b:74:73:36:ef:ae:33:72:4b:
76:35:94:27:9e:d1:d8:ce:f3:5a:fe:b1:f1:8b:d2:
96:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:74:0F:BB:95:3D:42:C9:FC:14:30:AD:F2:41:69:B3:43:A6:E9:4E
X509v3 Authority Key Identifier:
keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:c9:66:e9:b3:20:82:9a:23:f9:12:b2:e7:fa:0e:08:4a:8c:
78:f4:1f:e7:81:6d:b6:ee:c2:59:31:1e:15:26:b8:55:50:70:
30:31:12:04:e2:f9:59:24:88:74:17:e9:6e:d6:c8:7c:d3:fa:
15:ee:6d:08:de:69:50:56:04:5e:e3:b2:33:f3:a2:43:13:6f:
aa:1e:de:7b:ea:09:b1:ff:f2:6d:72:f8:84:03:e6:c5:fb:f2:
fa:8d:ff:df:0e:e6:4a:2e:82:c0:6c:98:37:67:e6:55:f1:d1:
d7:9a:04:ba:62:94:fd:de:4a:cf:68:aa:48:12:6b:3e:e3:5f:
78:4b:df:3a:e2:f6:74:5b:79:80:05:6c:13:35:2f:7a:ab:11:
e5:ab:04:f6:be:ad:0c:df:66:f6:88:35:45:0f:c9:a3:4f:28:
dc:b6:0c:99:e9:71:9d:a6:fc:b0:0b:23:3a:f0:8d:a2:bf:09:
81:00:41:59:57:fb:4e:9c:30:6d:75:80:0a:cb:96:21:53:fd:
7d:76:cf:35:e0:b2:97:bb:aa:bc:30:ab:75:02:9f:43:ff:c5:
66:4c:a3:c0:d2:70:a6:e0:50:f9:b1:e7:cf:e1:e1:1d:f1:ab:
e9:07:67:19:fb:15:e9:a9:05:51:b8:f7:8f:21:b2:54:ea:20:
58:e3:90:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:09:44 2026 by rpki-client