
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
File: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft (raw, json)
Hash identifier: qok63nTx/S2SrO4FBTpmd7Mzlur+zMQKmG9ZjNHK0Y0=
Subject key identifier: 88:A8:F5:C6:84:E8:2E:3B:0A:40:FB:E5:7A:43:38:32:6B:17:13:55
Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
Certificate issuer: /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Certificate serial: 0158
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
Manifest number: 0117
Signing time: Mon 11 May 2026 06:48:52 +0000
Manifest this update: Mon 11 May 2026 06:48:52 +0000
Manifest next update: Mon 18 May 2026 06:48:52 +0000
Files and hashes: 1: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl (hash: KOjYJOkxqN4bSVxu8jO8m3s1r/GTy8tgXYrcKtXxrLc=)
2: C4A5B394A86711F0BD0D193DC4F9AE02.roa (hash: hm+re/F+kko3QCh/gIPkHgLoZzmyZiDh7lHkBsLQ2Lc=)
3: 71A92448186E11F083760527C4F9AE02.roa (hash: 9bixZFbfpNieuLVnpYwH+8Y8Aux98hPNUpWaeSlohAI=)
4: 0AAD710010B111F0A46DA723C4F9AE02.roa (hash: eJ70OPYkFKHnbNzkHtKEBEpwssLXvLcVIfuQt2NpJFU=)
5: 95E16734187411F099AC2133C4F9AE02.roa (hash: 5kAvkiXd0VrwZ3jtx6iRuQ3N6uhhFTy8rHLlpNsn0hI=)
6: 13B46272139511F0BAC02735C4F9AE02.roa (hash: mtm2pGsiJTAaeB0Xp8pic60xQU0wEGWZuLRIZY26FJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:48:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344 (0x158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Validity
Not Before: May 11 06:48:52 2026 GMT
Not After : May 18 06:48:52 2026 GMT
Subject: CN=6a017bd4-3945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ec:2b:2d:bc:17:79:78:14:e4:7f:ea:e1:8e:
fe:84:0a:e7:14:fc:a5:36:67:34:87:d5:02:3f:b1:
04:e1:8c:62:d8:16:e3:07:36:8e:21:b8:11:a3:d3:
34:44:c7:58:33:40:f1:c7:41:46:6a:c5:e3:f4:93:
b1:49:be:a1:c1:bd:ad:20:23:41:4f:7e:8d:ac:e5:
19:f4:34:d9:e9:91:fd:89:4e:f9:4d:89:c3:4f:28:
7f:bb:ff:3b:17:6f:1d:78:f9:dd:a3:f8:9b:bd:4c:
67:53:49:57:f9:73:ef:3f:6c:33:13:f7:e1:ec:a5:
bd:8a:f6:e0:5b:4c:cc:09:5b:42:99:c7:d6:b7:b9:
e8:55:44:da:fc:a5:08:d4:33:c0:ab:3d:a1:0c:db:
85:f4:dd:06:99:d0:c1:a1:8f:5d:ce:ce:18:07:dd:
72:4f:7b:ad:f6:c9:d2:e8:e3:6d:3a:4e:8d:8e:7e:
7c:ba:c7:14:f0:60:f7:e3:86:51:8b:d5:a3:85:33:
43:29:42:cb:15:be:e0:82:98:91:2b:dc:58:27:a2:
a9:15:b8:cf:b3:3d:bb:e9:84:0a:bc:7f:c9:4a:e2:
52:8f:5a:5d:d1:87:23:04:0b:1a:2d:dd:9a:0a:7e:
e9:87:f7:da:74:ee:e3:61:86:37:ec:a4:fa:05:9f:
66:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A8:F5:C6:84:E8:2E:3B:0A:40:FB:E5:7A:43:38:32:6B:17:13:55
X509v3 Authority Key Identifier:
keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:28:71:0b:7a:9d:f6:a5:bb:2a:6f:d4:85:f8:ac:6e:e4:19:
74:91:f4:97:92:71:0e:54:da:e0:61:66:35:05:03:42:9e:55:
c5:98:44:43:e4:d6:31:26:b2:49:d1:d6:ba:2b:23:39:7c:ab:
39:10:44:48:58:f5:16:68:62:01:ee:f3:5b:ca:12:1e:ad:a8:
19:25:2b:1d:b1:13:e7:6b:15:b3:e1:86:3e:9a:7d:6c:9a:52:
b1:87:d8:48:0c:5d:76:29:4d:00:e4:3b:eb:5a:27:8e:c3:6e:
11:77:f5:c5:d6:36:e0:21:ca:ed:f9:5c:73:c4:d0:c6:a4:61:
9e:38:5f:61:24:9f:95:f1:29:c1:eb:02:b0:fc:b1:c8:c2:52:
00:e7:a7:40:0d:f8:ac:18:6e:22:8a:6b:cd:ed:5f:3f:3f:a2:
8e:de:5a:77:e7:79:4c:c0:29:38:7c:85:8d:03:29:71:04:fe:
16:38:79:b9:a5:7a:b3:77:be:c4:76:60:b8:33:ee:8e:61:2e:
8e:ef:67:d7:b1:1a:ad:f6:30:b5:36:3b:86:42:a7:b7:ef:3b:
27:a1:55:89:99:e7:27:0e:53:f7:38:73:64:f9:4d:e8:fa:e8:
24:24:ef:9b:cf:7f:a7:e9:9a:ac:11:02:41:43:35:9f:a6:f4:
cf:6b:99:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:20:28 2026 by rpki-client