
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft
File: 1pe7bz-Z6USA7gu609JoAKtBYmA.mft (raw, json)
Hash identifier: vs0jleHsG76e3AHtZjJ36q6wvQSjohH3mRTL84MCIjg=
Subject key identifier: 90:7A:32:71:CD:E4:93:7A:92:13:66:80:17:D0:9F:29:20:6A:68:78
Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60
Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
Certificate serial: 35EA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft
Manifest number: 358A
Signing time: Thu 16 Apr 2026 14:22:43 +0000
Manifest this update: Thu 16 Apr 2026 14:22:42 +0000
Manifest next update: Thu 23 Apr 2026 14:22:42 +0000
Files and hashes: 1: 1pe7bz-Z6USA7gu609JoAKtBYmA.crl (hash: Ggk0RIT/Avoo2GwbdbfZSGsKAtmMIG2r9lM/CN/866E=)
2: 964F254A4AEC11EF91EC775FC4F9AE02.roa (hash: HkNBHfCCxWQ28dFsr4VLP9uYL5uGGo+V0spZFxOBLiI=)
3: 12FAF07EA47B11E9867CBF58C4F9AE02.roa (hash: kkJ4rjLr4UzQN8c3HU8Z5z8wwvFPs1puIf6qJX6ykA8=)
4: 146766F4A47B11E9867CBF58C4F9AE02.roa (hash: xJWTRRKyuZjkvrJwtVub0K0nYQi/ZGucKzB1ISqRPw4=)
5: D2E6AC6A60F111EFB97DD57AC4F9AE02.roa (hash: l7WAwvcZVKlat81bCLOlMjC2QBKLBCvz0UaEYCXONlg=)
6: 971866124AEC11EF91EC775FC4F9AE02.roa (hash: XAFPiyCkUajmfqGSLHpWXaC7zQuAH4W6AGpUVOedZk4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl
rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:22:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13802 (0x35ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
Validity
Not Before: Apr 16 14:22:42 2026 GMT
Not After : Apr 23 14:22:42 2026 GMT
Subject: CN=69e0f0b2-68dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9e:e6:e4:f3:4b:b0:94:1e:b6:39:23:a8:c5:
75:e6:6f:6d:aa:f6:8a:08:18:2d:a1:29:5a:a2:ff:
88:06:30:23:7c:97:e1:c9:98:39:0b:88:74:62:d8:
03:2e:a5:8f:87:04:9d:69:63:a2:08:db:03:6a:88:
90:b0:04:77:80:c9:bc:ba:9d:60:a4:25:9f:32:ce:
75:dc:d1:95:bc:26:a4:d9:05:1e:94:3d:a4:0d:28:
a6:68:c3:9f:7b:9b:dc:47:5d:29:ab:d8:d9:bc:02:
0c:45:4a:dd:08:38:04:c4:be:1f:c0:19:eb:d5:85:
06:01:7c:fb:51:ab:c1:c6:ca:12:ad:b1:da:1d:4d:
5b:a0:80:63:13:17:70:91:76:c0:9f:9b:a4:80:d8:
58:80:98:50:30:09:e1:a4:1d:05:b9:3b:0f:b2:88:
34:d3:c6:be:86:08:48:75:ef:a4:8e:09:e3:ea:4e:
1a:2c:f9:ac:8a:a9:d2:f3:fa:d8:14:f9:9d:d9:fc:
46:02:5d:ab:77:95:af:cb:14:4a:fc:62:9d:35:79:
61:72:90:7c:a5:54:c4:93:8f:50:70:81:45:c7:b6:
8d:f3:0f:55:41:11:60:99:d8:40:09:c0:93:fb:01:
af:ee:82:ae:ec:7a:16:0c:80:33:b1:a9:84:8e:8e:
30:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7A:32:71:CD:E4:93:7A:92:13:66:80:17:D0:9F:29:20:6A:68:78
X509v3 Authority Key Identifier:
keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:e8:fe:f1:32:c6:49:da:a0:c9:79:36:8c:3d:f5:8c:7e:95:
f9:f5:df:e2:c8:72:b2:79:67:42:85:e5:0e:15:77:15:c4:d2:
ef:d5:11:15:3b:0b:b3:dc:72:74:ea:7f:97:ea:86:ad:37:31:
da:2c:b9:5a:12:b9:a5:7b:eb:be:db:e5:73:9f:38:88:b1:f8:
8b:ae:a1:29:2a:0d:a0:63:61:c2:52:57:11:a9:44:eb:99:fc:
74:9c:3b:d6:96:9a:d5:1e:5f:2a:fa:6f:25:b0:32:5f:70:fa:
0d:fa:b9:48:c2:0c:e2:66:01:54:a4:03:b0:2c:0b:d0:f3:e6:
f4:1a:94:d2:48:ee:40:07:75:12:a0:89:93:5a:5e:30:48:e8:
36:58:54:4b:e9:3b:1b:16:b4:a6:67:bc:59:37:27:b4:4d:0d:
04:11:88:b1:35:2a:c5:81:a6:fe:92:e1:ab:70:ec:ea:fe:54:
a9:6f:d1:17:ad:f5:e0:dc:66:52:d3:b6:58:c4:66:3d:ef:4c:
d2:be:09:ed:b1:6d:1a:ae:f6:ff:3c:24:30:eb:a3:85:41:9e:
c9:f8:99:f3:7e:cd:ed:4e:4e:a4:48:b8:14:03:e7:68:55:ed:
be:3c:40:e7:48:06:d4:c1:db:c0:4d:67:fb:fb:81:ad:e3:3a:
53:2f:e7:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw
QUI0MTYyNjAwHhcNMjYwNDE2MTQyMjQyWhcNMjYwNDIzMTQyMjQyWjAYMRYwFAYD
VQQDEw02OWUwZjBiMi02OGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApp7m5PNLsJQetjkjqMV15m9tqvaKCBgtoSlaov+IBjAjfJfhyZg5C4h0YtgD
LqWPhwSdaWOiCNsDaoiQsAR3gMm8up1gpCWfMs513NGVvCak2QUelD2kDSimaMOf
e5vcR10pq9jZvAIMRUrdCDgExL4fwBnr1YUGAXz7UavBxsoSrbHaHU1boIBjExdw
kXbAn5ukgNhYgJhQMAnhpB0FuTsPsog008a+hghIde+kjgnj6k4aLPmsiqnS8/rY
FPmd2fxGAl2rd5WvyxRK/GKdNXlhcpB8pVTEk49QcIFFx7aN8w9VQRFgmdhACcCT
+wGv7oKu7HoWDIAzsamEjo4wiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJB6MnHN
5JN6khNmgBfQnykgamh4MB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE
ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ
bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Rjg5Qy81QjA3RjNBQzFEODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZV
U0E3Z3U2MDlKb0FLdEJZbUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAd+j+8TLGSdqgyXk2jD31jH6V+fXf4shysnlnQoXlDhV3FcTS79URFTsLs9xy
dOp/l+qGrTcx2iy5WhK5pXvrvtvlc584iLH4i66hKSoNoGNhwlJXEalE65n8dJw7
1paa1R5fKvpvJbAyX3D6Dfq5SMIM4mYBVKQDsCwL0PPm9BqU0kjuQAd1EqCJk1pe
MEjoNlhUS+k7Gxa0pme8WTcntE0NBBGIsTUqxYGm/pLhq3Ds6v5UqW/RF6314Nxm
UtO2WMRmPe9M0r4J7bFtGq72/zwkMOujhUGeyfiZ837N7U5OpEi4FAPnaFXtvjxA
50gG1MHbwE1n+/uBreM6Uy/niw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:47:46 2026 by rpki-client