
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
File: PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft (raw, json)
Hash identifier: a6IBS9h1+lU3ABl+ax5L9MZmld5Nn2M1xpuJ+hDdkos=
Subject key identifier: 4E:3B:3A:45:98:54:AA:16:A9:62:D7:78:A4:C7:9F:C4:47:3D:2F:C8
Authority key identifier: 3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83
Certificate issuer: /CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983
Certificate serial: 0EF4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
Manifest number: 0EE9
Signing time: Tue 12 May 2026 17:40:17 +0000
Manifest this update: Tue 12 May 2026 17:40:16 +0000
Manifest next update: Tue 19 May 2026 17:40:16 +0000
Files and hashes: 1: PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl (hash: T9FdEK/+frBkjo0T+CtEHIr+fzPibM6KrMF4vHINOxM=)
2: 0853C13CA2F011E9B721795CC4F9AE02.roa (hash: YtMmvD8+t+Y0DWKnnIer/ep8HqJT/MOFDON0KvPSWok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl
rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3828 (0xef4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B880, serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983
Validity
Not Before: May 12 17:40:16 2026 GMT
Not After : May 19 17:40:16 2026 GMT
Subject: CN=6a036601-253d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:06:25:b2:89:29:0e:82:71:43:ee:ec:7a:2a:
d2:fb:fa:c0:4e:cf:42:87:90:7c:f2:92:5c:9d:fd:
0e:45:48:25:28:76:37:1d:30:75:d0:d9:98:ca:a3:
3f:58:b6:fa:66:51:f4:47:23:72:2e:15:81:c1:7e:
b5:24:a3:20:3d:f2:ab:4c:61:70:f7:c4:0f:03:06:
e1:87:40:64:78:0b:25:74:8b:90:75:ed:70:b0:2c:
76:92:df:7a:c2:30:4c:82:92:6b:64:0f:7e:89:a9:
fb:16:ed:20:4a:a1:6d:88:36:5b:71:47:0b:36:0a:
4a:4f:6a:71:03:4b:da:85:66:33:5f:b9:1a:99:d6:
9b:36:0a:ff:f2:92:05:77:68:30:3d:2c:be:21:91:
14:7b:12:8f:1a:7c:fb:78:02:1d:7b:10:af:d1:13:
62:f1:70:fe:64:3b:9e:d5:02:73:58:c4:f5:85:5d:
09:00:bd:2b:7f:0b:e8:4b:84:21:b5:8a:30:49:a0:
9d:9d:e4:35:7e:5b:1b:ab:e0:ef:7c:d2:ff:6c:21:
b8:5f:32:80:28:b7:d1:a1:af:02:2e:f1:c2:cc:47:
f6:46:3b:85:00:6d:4c:22:6d:dc:e4:ab:11:fd:e7:
ab:b0:99:7a:e5:60:9d:95:bf:8a:e9:87:51:12:6a:
65:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3B:3A:45:98:54:AA:16:A9:62:D7:78:A4:C7:9F:C4:47:3D:2F:C8
X509v3 Authority Key Identifier:
keyid:3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:cd:51:8c:52:07:ec:20:d7:0e:47:d3:dc:99:84:15:41:8f:
f7:c7:c8:52:c2:f8:cb:62:02:22:dd:eb:5e:44:33:47:b9:46:
5d:17:54:59:38:4b:6d:1e:61:ad:c0:57:bc:bd:74:3a:3e:3c:
00:2a:47:95:bf:2e:8d:db:cf:09:aa:c9:3c:ca:12:1b:a5:78:
3e:2e:a1:28:a4:9b:86:62:5c:03:a9:b0:54:89:b7:11:21:45:
06:13:bc:05:e2:77:39:17:2b:4c:a6:c7:19:8d:f2:6a:5f:b3:
a2:bc:31:e8:27:9d:f1:81:17:e2:2e:23:99:51:b5:a6:ea:6d:
b7:42:a2:c3:bb:53:3a:6c:b1:cf:5e:6e:e7:6b:99:97:56:06:
d2:80:57:28:25:36:22:be:41:38:37:bc:3f:65:03:0e:23:c6:
a8:a8:54:c3:92:e0:fb:f7:c6:04:36:ed:de:64:dc:43:b1:de:
60:d3:f1:88:dc:b7:47:a7:25:88:21:90:5b:76:92:fd:4d:63:
a3:c3:65:51:38:49:d4:e9:98:9d:c3:98:e1:2d:55:bd:a2:97:
e5:8e:ec:a6:da:1e:a5:eb:b8:96:e4:8b:82:84:5a:79:ea:ca:
d1:df:1c:9e:3b:bd:42:72:34:00:f5:ad:b2:b3:2d:9c:24:d2:
89:15:c2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:08:08 2026 by rpki-client