
$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
File: Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json)
Hash identifier: rp0vCFPXxjGZCScgV68IySXrxbonwb9ern1MDv/flnM=
Subject key identifier: C9:1F:E9:5D:E7:CA:D7:DB:D0:C0:C9:EA:91:F9:D6:A4:DD:DD:F1:CA
Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E
Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E
Certificate serial: 032A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
Manifest number: 0324
Signing time: Mon 11 May 2026 01:13:05 +0000
Manifest this update: Mon 11 May 2026 01:13:04 +0000
Manifest next update: Mon 18 May 2026 01:13:04 +0000
Files and hashes: 1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: J0qoIIIUVDd2C332u96NJxqHzr9x/KnPAe+QojQxU0E=)
2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: hRSBw3j57fal3n5v23N17SHqFFyn7GkCbwIU7hzC2CA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl
rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 01:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 810 (0x32a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915430A, serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E
Validity
Not Before: May 11 01:13:04 2026 GMT
Not After : May 18 01:13:04 2026 GMT
Subject: CN=6a012d21-6dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1e:7a:26:12:29:38:1a:c8:17:d9:71:04:58:
3b:55:3b:cb:dd:3a:3f:00:a8:43:1b:8f:18:ca:02:
a4:a9:02:cb:ff:38:d7:94:5c:fa:fe:74:9c:cf:ad:
32:50:86:0f:3c:a3:c6:a5:72:b6:ee:8c:c8:92:5e:
7c:e5:d1:72:78:bc:ce:0f:fe:16:6c:e8:d1:06:5d:
9e:a4:8d:d9:50:d6:06:11:b9:a4:43:1a:c3:a2:34:
c7:3d:6c:f8:ba:71:90:27:ae:00:b4:1a:cd:53:97:
07:92:51:bf:fb:77:e6:af:2f:d4:ad:20:56:c5:6f:
29:77:6e:6c:79:b8:f1:27:04:ac:22:07:19:7d:a1:
65:21:07:d7:6e:cd:a7:a5:40:0e:db:1c:64:fa:f8:
a1:16:52:48:b4:50:56:c8:90:36:52:14:75:94:69:
a6:29:da:20:52:16:2a:a1:f1:6f:e5:df:22:91:f9:
61:71:3f:38:92:55:d1:97:90:73:d7:80:99:28:60:
d7:b0:a4:d3:79:e2:48:60:95:ea:42:5d:44:22:8e:
54:9b:7a:b6:a5:51:64:29:d7:0f:d8:e7:7f:0a:40:
47:97:ac:ea:6c:d2:96:5e:8f:61:78:f5:85:91:9e:
59:15:ae:d7:85:cb:91:e5:88:69:86:80:2e:31:66:
46:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1F:E9:5D:E7:CA:D7:DB:D0:C0:C9:EA:91:F9:D6:A4:DD:DD:F1:CA
X509v3 Authority Key Identifier:
keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:51:13:c3:da:bc:a9:27:65:d0:83:b5:50:84:0a:79:a9:ee:
fb:54:e4:ee:86:26:fa:07:8a:47:cc:e4:d4:44:73:b2:fa:39:
4c:37:ce:1d:49:53:db:bd:a9:27:9d:57:e6:f4:1e:a6:6a:7b:
9c:f1:9a:d9:d1:f5:81:5c:31:4c:09:06:9f:92:69:e0:41:03:
15:6c:56:56:9c:93:8a:a8:6a:7a:cb:87:78:2f:84:c1:c5:1c:
5d:ec:36:16:05:48:65:90:01:d6:15:a9:44:26:89:a5:77:cd:
c7:a9:5e:ff:64:09:b2:a3:56:78:7f:58:69:b7:c7:ca:32:ed:
9a:8d:c5:d0:aa:a5:b1:d0:91:18:0f:86:e0:85:5f:19:39:10:
56:51:c6:de:b9:3b:35:34:3d:1b:8d:c0:f9:ff:c7:64:6d:70:
05:a5:f8:59:53:c2:bf:94:53:63:65:82:fe:8b:4d:a2:fe:e9:
e4:e9:25:f4:57:3e:43:9f:4f:72:2b:08:c1:0d:8d:a2:32:ff:
77:b1:52:5c:fe:6d:bf:55:c0:1f:89:4c:c1:d7:ff:b0:25:d8:
47:9e:79:e5:0b:2a:9a:0c:88:c9:26:54:b6:4b:23:b4:00:d5:
5d:72:1a:ed:1a:58:21:3a:38:9b:a8:9a:34:73:5f:a9:df:f2:
5d:4e:b4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:56:30 2026 by rpki-client