
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft
File: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft (raw, json)
Hash identifier: FRWRSrMLGzxl2xO5mmZDTaiGiMh0aj+r1ownbZcPE18=
Subject key identifier: 3D:31:F4:BA:0F:16:98:94:F1:5F:3A:98:07:47:8E:47:F6:3B:2F:09
Authority key identifier: FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B
Certificate issuer: /CN=A915A247/serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B
Certificate serial: 01E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft
Manifest number: 01E2
Signing time: Wed 13 May 2026 03:32:38 +0000
Manifest this update: Wed 13 May 2026 03:32:38 +0000
Manifest next update: Wed 20 May 2026 03:32:38 +0000
Files and hashes: 1: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl (hash: DZkMAg3iVFO8SJsSczTJgA4m2RHxUz4PWrnf2ym5P7M=)
2: B4350DCC6F4B11EEA062D464C4F9AE02.roa (hash: yaCD6IlFpNnlLI1rlXiBW7x7bvmFGdPJIOwJDR7gVRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl
rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:32:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487 (0x1e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A247, serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B
Validity
Not Before: May 13 03:32:38 2026 GMT
Not After : May 20 03:32:38 2026 GMT
Subject: CN=6a03f0d6-3db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0d:0b:90:94:7a:ec:e5:3b:6c:2d:a7:34:4f:
eb:02:4c:9a:25:cf:40:c7:be:c7:99:88:45:a5:a4:
2d:43:a7:bd:75:13:89:99:e1:3a:1e:08:8c:f0:39:
dc:6f:7f:cb:7f:12:7d:13:72:b2:a8:a3:53:8a:84:
ac:43:1e:68:54:9c:94:66:d3:6b:f6:c8:87:e8:2b:
f1:c4:20:fb:40:03:48:21:f5:be:cd:a2:e1:fe:4d:
68:2c:b9:68:1b:73:78:f6:a7:ba:6c:1a:78:f6:70:
33:cc:6f:0c:e5:42:7f:15:d5:05:7e:4d:a3:25:c9:
0c:e8:79:d5:07:8c:fc:f0:38:93:6b:01:07:26:35:
c6:25:4d:59:4d:75:b5:64:73:3c:e0:2b:d2:e8:60:
f9:1a:be:f9:9a:f7:f9:e5:9b:cd:e7:8e:44:d9:e8:
6a:21:2d:b7:74:e9:85:c1:1c:40:33:ea:22:c8:41:
ff:c7:b1:35:54:b5:77:dc:8e:69:36:66:d3:a6:2e:
23:ba:f1:2e:2d:e4:d4:7b:dd:b6:a7:dc:a9:b9:cc:
20:7e:54:d2:1e:d2:20:39:99:6d:d3:51:94:79:36:
b7:f5:b7:16:61:53:aa:45:69:37:67:95:46:11:13:
40:1c:db:ed:37:56:47:91:99:a4:e7:22:6b:40:bc:
77:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:31:F4:BA:0F:16:98:94:F1:5F:3A:98:07:47:8E:47:F6:3B:2F:09
X509v3 Authority Key Identifier:
keyid:FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:72:de:ef:0c:88:51:ce:2d:12:92:68:95:e7:36:12:56:da:
3c:59:bc:98:ee:31:aa:b7:e3:69:ad:53:c4:80:e3:42:07:95:
99:d4:3c:96:8b:0f:a7:ac:2d:d0:a0:da:97:29:55:c7:44:bf:
aa:4e:f5:1b:de:99:12:07:fe:2c:7b:db:db:30:fc:10:14:26:
da:56:f4:de:d0:16:b1:1a:6c:c1:b8:6a:d8:aa:e6:52:fd:f4:
4c:23:20:3d:0c:0b:dc:ed:aa:f0:e2:19:d5:13:d9:ce:4b:61:
c8:f4:b2:47:86:84:83:ca:b8:0f:a7:9b:ad:9b:d5:1e:45:67:
40:8b:9a:38:75:22:26:a8:b6:81:17:1c:bc:94:8a:e5:b5:66:
8e:3b:57:85:3a:2e:b8:a3:88:c0:51:ca:88:98:21:67:80:2c:
32:c8:90:9c:81:05:1e:42:37:b7:95:1c:f1:09:2c:37:5a:e3:
bb:fc:f9:dd:5b:52:7e:bd:fa:32:5d:9b:41:5d:6b:d1:5d:18:
ed:66:90:c6:6e:2b:fd:3e:9b:11:40:ae:c2:02:28:f5:64:e5:
cc:25:0b:13:9c:45:cc:3b:31:2c:cc:21:a0:1e:7e:a7:a4:3b:
aa:4e:b0:b2:81:86:c8:9f:ca:23:12:50:d7:3a:cc:53:16:2e:
d1:16:b5:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEyNDcxMTAvBgNVBAUTKEZCRDRCNDNCNTY3OEYxQTA2Q0M5MDdDNEVEMDRCREEy
MTFEOUREMkIwHhcNMjYwNTEzMDMzMjM4WhcNMjYwNTIwMDMzMjM4WjAYMRYwFAYD
VQQDEw02YTAzZjBkNi0zZGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7Q0LkJR67OU7bC2nNE/rAkyaJc9Ax77HmYhFpaQtQ6e9dROJmeE6HgiM8Dnc
b3/LfxJ9E3KyqKNTioSsQx5oVJyUZtNr9siH6CvxxCD7QANIIfW+zaLh/k1oLLlo
G3N49qe6bBp49nAzzG8M5UJ/FdUFfk2jJckM6HnVB4z88DiTawEHJjXGJU1ZTXW1
ZHM84CvS6GD5Gr75mvf55ZvN545E2ehqIS23dOmFwRxAM+oiyEH/x7E1VLV33I5p
NmbTpi4juvEuLeTUe922p9ypucwgflTSHtIgOZlt01GUeTa39bcWYVOqRWk3Z5VG
ERNAHNvtN1ZHkZmk5yJrQLx3aQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0x9LoP
FpiU8V86mAdHjkf2Oy8JMB8GA1UdIwQYMBaAFPvUtDtWePGgbMkHxO0EvaIR2d0r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTI0Ny9CMUZDNjQ1QzZG
NEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhhQnN5UWZFN1FTOW9oSFoz
U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy05UzBPMVo0OGFCc3lRZkU3UVM5b2hIWjNTcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTI0Ny9CMUZDNjQ1QzZGNEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhh
QnN5UWZFN1FTOW9oSFozU3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAInLe7wyIUc4tEpJolec2ElbaPFm8mO4xqrfjaa1TxIDjQgeVmdQ8losPp6wt
0KDalylVx0S/qk71G96ZEgf+LHvb2zD8EBQm2lb03tAWsRpswbhq2KrmUv30TCMg
PQwL3O2q8OIZ1RPZzkthyPSyR4aEg8q4D6ebrZvVHkVnQIuaOHUiJqi2gRccvJSK
5bVmjjtXhTouuKOIwFHKiJghZ4AsMsiQnIEFHkI3t5Uc8QksN1rju/z53VtSfr36
Ml2bQV1r0V0Y7WaQxm4r/T6bEUCuwgIo9WTlzCULE5xFzDsxLMwhoB5+p6Q7qk6w
soGGyJ/KIxJQ1zrMUxYu0Ra1rw==
-----END CERTIFICATE-----
Generated at Wed May 13 11:43:50 2026 by rpki-client