
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
File: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft (raw, json)
Hash identifier: ZqEPtmzHfbOyu8HOU3wo9pMETeC7K1yiEzLDQ+fbq+Y=
Subject key identifier: F3:87:1C:EA:86:73:60:57:16:91:DD:09:0A:A6:BA:DB:1D:80:61:BE
Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4
Certificate issuer: /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4
Certificate serial: 0208
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
Manifest number: 01FE
Signing time: Wed 25 Mar 2026 02:34:42 +0000
Manifest this update: Wed 25 Mar 2026 02:34:42 +0000
Manifest next update: Wed 01 Apr 2026 02:34:42 +0000
Files and hashes: 1: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl (hash: 11TxfBp5c7dCYHxtMzKqaLU4lZ8Jx6Z7szxZ+bKp87Q=)
2: 9728C64EF10811EE8F128341C4F9AE02.roa (hash: oPiJqmRhnsqJ9VzYZizn2gWr3NtxijO+hht/Af3EOxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl
rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143F26, serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4
Validity
Not Before: Mar 25 02:34:42 2026 GMT
Not After : Apr 1 02:34:42 2026 GMT
Subject: CN=69c349c2-8aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:25:4c:72:96:13:44:6c:61:21:7a:0f:03:9b:
3b:8c:6a:bd:b8:53:06:d3:1a:e3:97:c9:e4:5a:b5:
01:0e:f2:f6:de:28:51:96:0e:90:cd:c1:a3:57:ac:
e2:82:1b:6b:dc:e1:e7:51:9f:ea:8c:96:b4:93:4b:
fb:f0:21:2e:2d:19:22:10:b9:a5:44:3b:90:c6:1b:
cf:72:a9:9f:dd:94:0a:8d:80:6a:b8:01:06:3d:34:
02:8a:f4:0b:fe:70:0c:41:27:4e:62:7a:ac:75:71:
c2:80:e4:ba:fd:b2:73:1d:46:10:34:3f:2e:b2:8b:
ea:4f:0b:f4:ed:77:d9:05:f2:b5:01:a7:e8:c4:bc:
cd:01:d8:92:d4:60:07:e5:a5:f8:78:30:f8:b6:ff:
44:a8:77:a2:b6:10:5e:3c:0d:0d:3c:b8:28:46:0c:
5d:0c:91:ed:73:8e:58:40:95:0b:4d:56:57:59:7a:
73:d8:13:43:90:e2:e5:8f:da:ca:92:a0:c6:57:80:
d9:29:2b:66:7a:8b:a1:6e:26:2b:20:0a:1c:19:ea:
58:d8:4b:f6:2e:a5:77:69:66:84:7d:82:00:b9:a9:
ab:23:e0:bd:90:e7:6c:00:25:d2:44:fa:3c:fa:d1:
c9:5d:0a:65:7e:48:02:41:3e:46:ce:d4:30:13:6f:
b3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:87:1C:EA:86:73:60:57:16:91:DD:09:0A:A6:BA:DB:1D:80:61:BE
X509v3 Authority Key Identifier:
keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e1:51:3c:35:62:bf:e3:1c:61:49:50:3b:0a:cf:17:9c:a7:
b3:5a:c4:47:a6:8f:40:be:5f:0b:99:6e:0d:91:4f:c5:06:10:
c5:67:3e:3e:fb:b2:b6:a4:ab:cc:7c:fd:ae:47:51:d7:23:b6:
cc:94:93:1c:c9:2a:78:11:16:63:e5:35:f8:d5:69:75:d4:b9:
36:35:3d:a7:66:1e:52:14:c4:a6:3a:9a:09:c4:22:9e:20:e3:
48:88:a8:38:f9:96:22:8c:0d:0d:2c:9f:a9:3f:e9:1b:32:de:
40:ee:7c:4f:3a:96:30:a1:4d:46:60:c3:8c:c7:c1:60:57:a4:
59:12:12:c4:c6:06:73:94:48:c8:17:7e:0d:a2:63:34:cd:e3:
9f:fe:56:5e:f0:69:4f:70:80:53:72:fa:f3:49:a9:ae:90:32:
7d:c4:04:2a:de:1e:25:17:4b:0a:ad:80:ee:c1:df:b5:31:8d:
13:46:8c:d6:cf:67:14:b8:a8:96:ba:26:e8:0d:57:b2:52:3b:
65:47:40:6a:af:0b:20:0e:27:44:b2:fa:cd:81:cd:c2:df:37:
b5:91:bc:4d:5a:4e:eb:c2:08:a3:ea:7c:96:d0:ce:fc:8b:53:
db:8f:62:92:14:60:2c:11:74:e8:39:df:05:42:cf:65:09:24:
c2:de:7a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:22:17 2026 by rpki-client