
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft
File: -_gSoLmqiu1iGHbIkgH_8QQytpc.mft (raw, json)
Hash identifier: ITD9fY4LOcyj+IRrXEeCuUCSx3GQjljzbADaCdMupuY=
Subject key identifier: 5D:B7:DA:A1:F1:0D:8C:53:B1:4B:9C:7A:35:8D:77:C4:AE:76:D9:27
Authority key identifier: FB:F8:12:A0:B9:AA:8A:ED:62:18:76:C8:92:01:FF:F1:04:32:B6:97
Certificate issuer: /CN=A915A330/serialNumber=FBF812A0B9AA8AED621876C89201FFF10432B697
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft
Manifest number: D8
Signing time: Wed 13 May 2026 06:48:14 +0000
Manifest this update: Wed 13 May 2026 06:48:14 +0000
Manifest next update: Wed 20 May 2026 06:48:14 +0000
Files and hashes: 1: -_gSoLmqiu1iGHbIkgH_8QQytpc.crl (hash: 5dVjbhqP1ddWUzYZlbTSQ3YScqz7CQ4OusttMU2lci8=)
2: 5F2F693A061211F0BA5A2029C4F9AE02.roa (hash: Qkz+Ibp6urTz/gTtZx61VUtVTC7J2PthL9N5ik2a+uA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.crl
rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A330, serialNumber=FBF812A0B9AA8AED621876C89201FFF10432B697
Validity
Not Before: May 13 06:48:14 2026 GMT
Not After : May 20 06:48:14 2026 GMT
Subject: CN=6a041eae-30fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a8:9d:1c:4c:4d:d0:77:9d:91:87:06:87:56:
10:eb:a9:05:d5:f0:e1:f6:96:c0:e9:12:52:88:8b:
83:ba:27:6d:53:f4:fc:b0:5e:9a:f4:82:27:a6:3f:
d3:45:48:8a:c7:fc:2f:13:dc:8d:56:4b:e8:23:3b:
af:8e:35:ae:c1:0c:36:2f:ca:90:57:48:17:36:af:
a0:28:9a:07:50:44:c8:89:11:8d:78:82:fd:f2:93:
be:44:23:c5:39:4f:55:e5:7d:bb:b5:d1:06:c0:86:
b7:ee:7d:8f:15:2a:0b:37:98:b0:ea:9a:5e:41:59:
74:b5:75:28:b5:90:44:32:06:88:4e:4b:b7:a7:0c:
7a:77:bc:e3:49:0c:79:87:f1:f2:25:2a:b5:2e:94:
7a:77:3c:9c:d9:f5:36:72:1e:26:8e:d1:7d:0f:db:
68:5b:1b:a2:5c:3b:3a:9d:a4:d0:c5:f3:48:e3:87:
4b:cb:1d:74:fe:bc:82:67:52:a7:87:f9:b4:4d:72:
6f:16:1a:ed:6e:3b:90:37:8c:8f:e7:e9:16:eb:ca:
48:5e:68:46:1e:f2:9b:73:c2:30:d9:0d:62:86:01:
04:2f:92:53:dc:85:14:14:33:65:58:b0:b0:ca:a0:
0f:86:fd:6d:88:d6:8f:78:ff:8a:b5:7c:34:43:2b:
f2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B7:DA:A1:F1:0D:8C:53:B1:4B:9C:7A:35:8D:77:C4:AE:76:D9:27
X509v3 Authority Key Identifier:
keyid:FB:F8:12:A0:B9:AA:8A:ED:62:18:76:C8:92:01:FF:F1:04:32:B6:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ff:1a:26:08:6d:96:6c:c9:ae:17:67:97:07:bd:01:0d:9b:
3d:cb:06:28:6c:a0:f4:e3:26:71:bc:64:24:49:fc:aa:62:ab:
8a:45:cd:27:c8:2c:b8:cb:1c:29:ac:ab:7e:be:43:6e:d9:f4:
80:35:26:a4:39:b3:0e:21:b0:b2:27:e6:71:f5:83:91:72:70:
d6:5c:d2:1b:bf:17:10:3d:89:7c:d9:5c:df:1c:27:04:0e:3f:
88:f7:ce:82:ce:db:d9:10:6d:87:a0:b9:86:54:25:36:8a:8c:
2b:e4:97:70:68:86:de:69:23:4f:cb:ae:50:e4:87:e0:cc:4e:
90:e8:ec:e9:f8:70:85:e5:b2:79:74:13:66:58:5a:13:0b:4a:
88:52:bd:fa:8e:ae:a9:77:79:2c:61:af:83:7e:9a:9a:62:1d:
7a:98:6a:83:ef:d6:1b:f6:1d:06:41:48:26:a7:cf:d0:a4:ff:
1c:64:dd:a3:f1:b2:96:49:d5:82:a5:26:90:26:79:a2:c5:d9:
b1:e8:8f:16:19:7a:8c:58:42:c9:46:f5:d7:f1:71:2f:95:e4:
02:8a:0d:1b:27:34:97:4b:e3:c6:67:12:29:61:62:aa:8f:b7:
3e:47:f2:9a:96:99:d4:9c:f6:ce:5e:8a:15:e7:42:d1:33:70:
d7:a2:fd:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEzMzAxMTAvBgNVBAUTKEZCRjgxMkEwQjlBQThBRUQ2MjE4NzZDODkyMDFGRkYx
MDQzMkI2OTcwHhcNMjYwNTEzMDY0ODE0WhcNMjYwNTIwMDY0ODE0WjAYMRYwFAYD
VQQDEw02YTA0MWVhZS0zMGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyKidHExN0HedkYcGh1YQ66kF1fDh9pbA6RJSiIuDuidtU/T8sF6a9IInpj/T
RUiKx/wvE9yNVkvoIzuvjjWuwQw2L8qQV0gXNq+gKJoHUETIiRGNeIL98pO+RCPF
OU9V5X27tdEGwIa37n2PFSoLN5iw6ppeQVl0tXUotZBEMgaITku3pwx6d7zjSQx5
h/HyJSq1LpR6dzyc2fU2ch4mjtF9D9toWxuiXDs6naTQxfNI44dLyx10/ryCZ1Kn
h/m0TXJvFhrtbjuQN4yP5+kW68pIXmhGHvKbc8Iw2Q1ihgEEL5JT3IUUFDNlWLCw
yqAPhv1tiNaPeP+KtXw0QyvyawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF232qHx
DYxTsUucejWNd8SudtknMB8GA1UdIwQYMBaAFPv4EqC5qortYhh2yJIB//EEMraX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTMzMC9BQUU0OUEzODA2
MEYxMUYwQTk3MDUyODFDNEY5QUUwMi8tX2dTb0xtcWl1MWlHSGJJa2dIXzhRUXl0
cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1fZ1NvTG1xaXUxaUdIYklrZ0hfOFFReXRwYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTMzMC9BQUU0OUEzODA2MEYxMUYwQTk3MDUyODFDNEY5QUUwMi8tX2dTb0xtcWl1
MWlHSGJJa2dIXzhRUXl0cGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvf8aJghtlmzJrhdnlwe9AQ2bPcsGKGyg9OMmcbxkJEn8qmKrikXNJ8gsuMsc
Kayrfr5Dbtn0gDUmpDmzDiGwsifmcfWDkXJw1lzSG78XED2JfNlc3xwnBA4/iPfO
gs7b2RBth6C5hlQlNoqMK+SXcGiG3mkjT8uuUOSH4MxOkOjs6fhwheWyeXQTZlha
EwtKiFK9+o6uqXd5LGGvg36ammIdephqg+/WG/YdBkFIJqfP0KT/HGTdo/GylknV
gqUmkCZ5osXZseiPFhl6jFhCyUb11/FxL5XkAooNGyc0l0vjxmcSKWFiqo+3Pkfy
mpaZ1Jz2zl6KFedC0TNw16L9ww==
-----END CERTIFICATE-----
Generated at Wed May 13 15:07:59 2026 by rpki-client