
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft
File: 1fozYzT5muNj6lhn0o6KUCMeQiA.mft (raw, json)
Hash identifier: sZF48Ktu7gnLizdSjkWcBAyYawar6kycERaWnOcaPas=
Subject key identifier: E0:B3:18:0A:1D:08:EB:7F:74:E9:2E:9B:28:1B:67:E1:62:D1:EB:64
Authority key identifier: D5:FA:33:63:34:F9:9A:E3:63:EA:58:67:D2:8E:8A:50:23:1E:42:20
Certificate issuer: /CN=A915F2B8/serialNumber=D5FA336334F99AE363EA5867D28E8A50231E4220
Certificate serial: 022A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fozYzT5muNj6lhn0o6KUCMeQiA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft
Manifest number: 0226
Signing time: Mon 02 Mar 2026 02:04:05 +0000
Manifest this update: Mon 02 Mar 2026 02:04:03 +0000
Manifest next update: Mon 09 Mar 2026 02:04:03 +0000
Files and hashes: 1: 1fozYzT5muNj6lhn0o6KUCMeQiA.crl (hash: oJWjDJDFS01A4PrAqDmyLKhYmS7tahxG+LKkF/4Ipjw=)
2: 207C45B0CC2F11EDABE25F72C4F9AE02.roa (hash: OmMxdAPnBhZTGqQOr8JuZaqqyL1RNUDNSiTMUXir/l4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.crl
rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fozYzT5muNj6lhn0o6KUCMeQiA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554 (0x22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F2B8, serialNumber=D5FA336334F99AE363EA5867D28E8A50231E4220
Validity
Not Before: Mar 2 02:04:03 2026 GMT
Not After : Mar 9 02:04:03 2026 GMT
Subject: CN=69a4f014-c511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:d9:3a:0d:b0:51:b9:38:3f:36:46:c3:65:
8d:20:cb:97:29:a5:90:b8:87:cc:65:9c:42:04:1a:
be:87:1a:8b:fe:9b:b7:ac:fb:5c:d0:9e:8a:d3:22:
db:c7:c9:66:67:de:81:c2:55:33:fd:50:5c:9c:e1:
87:0d:c3:24:74:90:95:4e:9e:f7:89:90:27:44:e7:
67:11:ae:b6:4b:d6:48:56:cd:e5:9c:27:f1:89:87:
ad:77:1a:f9:68:b0:d0:77:f8:f1:54:57:49:00:75:
08:7a:cd:96:20:bd:11:39:0f:b1:eb:95:da:93:db:
b8:76:43:5f:fc:dd:63:29:43:b7:82:7a:e3:5a:f6:
c9:50:56:dd:bf:e9:95:98:0e:d6:c6:20:f5:e3:ba:
01:9c:fc:77:5a:91:10:58:71:a3:b4:6b:1d:71:c4:
75:35:73:1f:96:1f:85:8b:bf:29:1e:48:14:cd:f1:
26:cb:d1:b7:30:f2:e4:a5:2b:89:e8:2d:c9:a5:b6:
47:8d:96:bd:94:66:d2:e4:2f:bc:b5:45:87:32:aa:
75:3c:63:bf:62:fc:d3:6f:2e:9e:1e:35:60:97:5a:
c0:9e:3a:88:8b:b8:52:0a:8f:32:37:07:98:06:18:
b8:54:47:21:11:97:63:31:cc:f0:a4:cf:54:22:ee:
6b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B3:18:0A:1D:08:EB:7F:74:E9:2E:9B:28:1B:67:E1:62:D1:EB:64
X509v3 Authority Key Identifier:
keyid:D5:FA:33:63:34:F9:9A:E3:63:EA:58:67:D2:8E:8A:50:23:1E:42:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fozYzT5muNj6lhn0o6KUCMeQiA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:02:4b:37:6e:9a:65:a7:fc:fb:c2:a3:0a:fa:e9:32:9c:07:
50:c2:63:06:4c:af:e1:1b:df:47:ae:c1:f8:be:6c:67:27:a9:
0f:9e:a4:0b:29:31:90:46:9e:bb:2d:9b:f4:76:57:c5:28:76:
a6:a4:7b:f5:ed:64:14:a6:3e:28:88:72:f5:e2:69:49:59:99:
fd:d2:91:81:9d:5b:37:eb:38:d5:71:15:3b:03:dc:77:f7:1a:
86:fb:07:a9:fc:b5:c4:8c:c8:f5:a5:8a:5a:6e:d9:11:ef:ab:
fb:a7:e9:ec:7b:cf:6d:ef:b3:95:55:06:08:0e:ac:51:ae:2f:
b4:f7:cb:76:57:7b:21:7c:15:44:46:08:e0:13:52:57:b5:1f:
75:9c:8e:1f:c8:ab:ec:0c:20:50:2c:94:b3:47:fa:bf:57:80:
96:d2:c1:a3:98:e1:26:69:e8:a3:d3:e9:b7:f0:22:6e:62:5f:
34:80:5d:0e:44:d7:1a:dc:a4:0f:8a:97:c5:3a:5a:05:4a:e0:
d6:ec:b8:0b:c2:40:12:15:7c:00:20:81:80:58:6a:2d:77:61:
f3:7e:5e:13:16:2b:de:1f:31:7f:8a:17:2d:18:8f:dc:06:ac:
c0:7f:a2:99:fe:58:5f:3a:0f:34:98:e7:bd:cc:4c:74:61:8d:
65:41:bd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:43 2026 by rpki-client