
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft
File: up0lGkqfrMTkpmOHdQooZioxAFc.mft (raw, json)
Hash identifier: CccLz6bBUNI1X7j4J/DqSszZRR2rFpk9xME89Wt5l7Y=
Subject key identifier: A7:B0:69:07:A9:8A:74:76:38:13:2C:AE:4C:C6:E8:CA:2A:87:3A:0C
Authority key identifier: BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57
Certificate issuer: /CN=A915B581/serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057
Certificate serial: 3566
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft
Manifest number: 3550
Signing time: Tue 12 May 2026 14:47:18 +0000
Manifest this update: Tue 12 May 2026 14:47:18 +0000
Manifest next update: Tue 19 May 2026 14:47:18 +0000
Files and hashes: 1: up0lGkqfrMTkpmOHdQooZioxAFc.crl (hash: vbxP5qi7HhVZftt7vWAKgTleG7GP+aetvXWFuAiMUaI=)
2: 7A38D6B854F311E7AC64ED3AC4F9AE02.roa (hash: wpF9ptajaxcFCU5XYXYL7kAycTSdDrhOWM0Rnpw1Xnw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl
rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13670 (0x3566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B581, serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057
Validity
Not Before: May 12 14:47:18 2026 GMT
Not After : May 19 14:47:18 2026 GMT
Subject: CN=6a033d76-8b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:12:8c:38:41:29:9b:e8:3d:a7:c9:20:33:
2a:66:16:74:97:33:37:2e:22:32:97:b7:58:07:e8:
9a:db:a9:cd:c5:da:b0:3c:5b:28:26:0e:2a:14:98:
c1:69:3a:bc:ff:2e:64:5c:64:8f:3b:5f:f7:4f:d2:
0b:bb:14:9b:25:12:1d:6f:2a:2b:9b:8d:e0:21:61:
59:61:15:db:1f:4d:af:f3:c5:e1:15:2d:c7:41:ca:
bd:ad:4f:a1:d0:c2:fa:0d:7e:96:78:11:d2:62:98:
65:c0:4b:e7:d8:07:18:fd:52:cc:ca:f1:2a:02:4b:
1d:7b:e7:a7:f0:25:9f:56:49:66:94:f7:9a:10:36:
de:c3:e9:43:38:43:d5:c0:10:24:c7:6d:ca:62:c1:
57:e0:b9:f3:ba:bc:b2:69:4f:19:0e:6f:74:1b:7a:
eb:64:82:bb:2f:8a:b5:0c:e2:99:2d:b1:f8:2f:2d:
14:68:58:08:30:be:6f:81:0f:20:17:b1:c4:84:2c:
d7:64:5a:5f:be:f0:59:9c:d0:46:7c:6b:4e:8f:7a:
dc:33:36:ee:98:26:95:21:88:e0:82:df:d8:db:08:
9e:0a:29:c3:2c:49:f1:d2:76:64:81:57:d0:fc:ea:
e0:35:dd:91:01:4c:f6:91:0e:30:d7:36:44:7a:8c:
ac:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B0:69:07:A9:8A:74:76:38:13:2C:AE:4C:C6:E8:CA:2A:87:3A:0C
X509v3 Authority Key Identifier:
keyid:BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:17:9b:30:ec:02:da:98:df:25:ee:b2:71:19:f9:fb:9d:ff:
39:b3:e0:77:8e:02:f0:7f:2f:92:6e:b4:3d:b2:fe:9f:46:96:
85:95:9d:9d:2e:66:5d:4f:82:ca:df:2c:3b:e3:85:d6:bf:6d:
ad:5d:86:43:4d:54:19:bc:56:dc:51:01:61:e2:ba:e1:68:49:
0e:22:18:33:d4:02:87:50:93:5a:bc:b8:4a:65:d6:d1:fe:6f:
26:2b:d9:25:f2:85:f6:40:07:51:6a:a9:65:28:e8:c2:07:30:
ae:d8:40:13:39:b8:50:c4:87:de:f3:d5:03:b6:24:4f:1b:78:
e7:98:21:96:66:93:ba:0a:2f:90:7c:27:98:87:51:f0:c9:ef:
64:bf:04:aa:97:d7:c5:5c:44:75:b4:68:56:4f:92:a2:a2:b2:
ba:fd:35:42:84:e7:f4:7d:4f:cc:a4:5f:02:43:73:01:60:20:
d3:dc:e6:43:6d:e0:43:d7:ae:51:eb:48:0d:e1:d3:4e:5f:40:
3b:d3:0f:8d:3b:e2:65:7e:4a:7d:c2:19:a3:aa:1c:31:5f:6a:
c8:5f:3f:2e:f2:52:76:a8:03:50:8f:32:7c:1a:c5:d4:e6:7d:
18:52:e8:d3:99:c7:43:3a:b3:cb:08:08:56:4a:cc:04:d9:8b:
59:2b:6a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:29:48 2026 by rpki-client