
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
File: 1FgFH22pUil0dbSEvd0Pu-NJDnA.mft (raw, json)
Hash identifier: cskuF1e/Pgzm+hGhSiKw3/JjYIYrQmzMgQq3ircbtXE=
Subject key identifier: 5D:0C:C0:9A:25:97:96:F9:71:F2:D5:05:8D:CA:BA:4E:18:9B:6F:A2
Authority key identifier: D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70
Certificate issuer: /CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
Certificate serial: 07CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
Manifest number: 07B8
Signing time: Sat 28 Feb 2026 21:55:20 +0000
Manifest this update: Sat 28 Feb 2026 21:55:20 +0000
Manifest next update: Sat 07 Mar 2026 21:55:20 +0000
Files and hashes: 1: 1FgFH22pUil0dbSEvd0Pu-NJDnA.crl (hash: 6Bn8xy62pzbIJvgC+V6fq14gyLZuUljljUb//BPN56A=)
2: 9B5A7020522911ED9136DF2AC4F9AE02.roa (hash: EPopl16P2FjqSbPYIytBKy9VJUfecHbvsl/RlqCN98M=)
3: A156AB48195E11F0A64EF837C4F9AE02.roa (hash: Oz8gWNnWVQro8WUzRGDKljMkzvULjWnM5mz0SBgNjR8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl
rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1999 (0x7cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D85E, serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
Validity
Not Before: Feb 28 21:55:20 2026 GMT
Not After : Mar 7 21:55:20 2026 GMT
Subject: CN=69a36448-edae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:06:15:30:0e:ac:bf:b0:49:8e:12:81:b0:f0:
4a:b6:97:f4:f9:ce:3c:c0:59:19:ae:e7:1f:28:e5:
3c:fa:01:52:40:f6:79:02:a6:62:b2:81:9f:5d:96:
fe:35:44:8d:15:d1:4e:84:24:e5:5c:bf:82:a1:1a:
0f:de:5f:25:a9:fc:35:49:f7:54:fe:b9:33:7b:38:
04:0c:0b:63:fe:23:06:29:3c:3b:4a:b8:91:bf:6d:
21:a9:83:1c:3c:07:36:21:e7:fd:b1:fc:6d:3b:f4:
ba:1b:13:6a:4d:a5:10:e5:b3:e1:81:64:37:37:19:
42:ba:53:4f:1f:e6:e7:05:a8:b1:43:f5:0d:6c:f6:
d1:f9:3d:ab:aa:03:12:d9:ce:c4:52:d9:f1:53:43:
81:1b:e1:16:9c:13:f7:26:43:70:66:25:4e:44:3c:
4e:10:1b:6a:32:ae:f1:82:05:a3:b0:2e:f6:c7:3b:
b2:f4:44:00:7f:2c:84:40:f2:34:a5:4d:7f:94:2a:
91:84:31:5e:e1:a9:eb:8c:9a:ef:28:15:ca:c8:40:
dc:d3:4c:14:0e:e3:b8:c6:ac:17:1d:5b:5a:4d:66:
e4:d6:01:f7:6d:be:ad:3a:81:3e:17:20:92:1a:cd:
a5:a3:52:19:3e:40:c9:46:41:53:f0:8d:80:f7:cd:
9f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0C:C0:9A:25:97:96:F9:71:F2:D5:05:8D:CA:BA:4E:18:9B:6F:A2
X509v3 Authority Key Identifier:
keyid:D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:37:9d:08:59:08:0b:43:7a:dc:c9:d4:50:c6:99:e3:64:12:
23:3a:2c:4a:93:7a:01:9b:83:65:26:df:ff:5b:b0:fc:a1:25:
d3:2e:ab:8e:ea:e8:b0:33:36:a5:e1:9d:f2:8b:d9:ce:ad:e7:
80:f2:e0:66:a1:0d:41:46:a7:c1:04:1c:4b:72:70:c9:de:dd:
ed:51:dc:8a:44:10:95:be:3e:eb:7a:49:11:fd:8d:aa:69:30:
f7:6d:65:fa:42:27:1c:a3:c8:ca:27:f5:dd:57:03:09:e0:59:
1c:63:a9:a8:ba:02:29:9e:25:80:5a:1d:d0:13:aa:0b:3f:4c:
97:ad:7c:58:2c:ae:89:f8:26:bd:d8:c7:80:5c:12:ba:90:5b:
23:93:88:ea:f3:81:a4:a1:5f:66:c6:35:22:fe:c9:49:ce:eb:
79:1c:24:63:ea:cd:a8:77:5c:eb:d9:4d:f6:14:99:64:a0:cc:
22:31:b0:07:aa:c3:fa:8c:1c:38:08:f9:04:a6:ac:6d:82:a4:
b3:0d:58:f9:02:28:c5:5b:4a:62:29:cc:a9:16:ca:bf:f9:a5:
06:7b:b2:c3:c5:b7:cb:01:db:13:25:52:33:8d:37:02:1b:1c:
c2:94:8d:40:f7:3f:7e:56:cc:6f:65:25:bb:68:34:b4:dc:e5:
06:18:4f:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ4NUUxMTAvBgNVBAUTKEQ0NTgwNTFGNkRBOTUyMjk3NDc1QjQ4NEJEREQwRkJC
RTM0OTBFNzAwHhcNMjYwMjI4MjE1NTIwWhcNMjYwMzA3MjE1NTIwWjAYMRYwFAYD
VQQDDA02OWEzNjQ0OC1lZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwQYVMA6sv7BJjhKBsPBKtpf0+c48wFkZrucfKOU8+gFSQPZ5AqZisoGfXZb+
NUSNFdFOhCTlXL+CoRoP3l8lqfw1SfdU/rkzezgEDAtj/iMGKTw7SriRv20hqYMc
PAc2Ief9sfxtO/S6GxNqTaUQ5bPhgWQ3NxlCulNPH+bnBaixQ/UNbPbR+T2rqgMS
2c7EUtnxU0OBG+EWnBP3JkNwZiVORDxOEBtqMq7xggWjsC72xzuy9EQAfyyEQPI0
pU1/lCqRhDFe4anrjJrvKBXKyEDc00wUDuO4xqwXHVtaTWbk1gH3bb6tOoE+FyCS
Gs2lo1IZPkDJRkFT8I2A982fUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF0MwJol
l5b5cfLVBY3Kuk4Ym2+iMB8GA1UdIwQYMBaAFNRYBR9tqVIpdHW0hL3dD7vjSQ5w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDg1RS83M0VGOTA5QzNC
QjUxMUVCQjREMTM3N0RDNEY5QUUwMi8xRmdGSDIycFVpbDBkYlNFdmQwUHUtTkpE
bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFGZ0ZIMjJwVWlsMGRiU0V2ZDBQdS1OSkRuQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDg1RS83M0VGOTA5QzNCQjUxMUVCQjREMTM3N0RDNEY5QUUwMi8xRmdGSDIycFVp
bDBkYlNFdmQwUHUtTkpEbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEjedCFkIC0N63MnUUMaZ42QSIzosSpN6AZuDZSbf/1uw/KEl0y6rjurosDM2
peGd8ovZzq3ngPLgZqENQUanwQQcS3Jwyd7d7VHcikQQlb4+63pJEf2Nqmkw921l
+kInHKPIyif13VcDCeBZHGOpqLoCKZ4lgFod0BOqCz9Ml618WCyuifgmvdjHgFwS
upBbI5OI6vOBpKFfZsY1Iv7JSc7reRwkY+rNqHdc69lN9hSZZKDMIjGwB6rD+owc
OAj5BKasbYKksw1Y+QIoxVtKYinMqRbKv/mlBnuyw8W3ywHbEyVSM403AhscwpSN
QPc/flbMb2Ulu2g0tNzlBhhPaA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:54:08 2026 by rpki-client