
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
File: SC1I47aWHxIIwGcVJOCOkDOV9lk.mft (raw, json)
Hash identifier: bV9OGV0Ps7tVc+ptnLiphBo61IiyI0dzBHbC77hT2w8=
Subject key identifier: BD:79:26:EC:26:0D:30:66:05:A8:47:AF:8D:B4:D2:B3:3D:FA:5D:1F
Authority key identifier: 48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59
Certificate issuer: /CN=A915BCE2/serialNumber=482D48E3B6961F1208C0671524E08E903395F659
Certificate serial: 01C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
Manifest number: 01C5
Signing time: Mon 11 May 2026 03:48:34 +0000
Manifest this update: Mon 11 May 2026 03:48:34 +0000
Manifest next update: Mon 18 May 2026 03:48:34 +0000
Files and hashes: 1: SC1I47aWHxIIwGcVJOCOkDOV9lk.crl (hash: ZGODfIO/PBhhXMPeUAi3+8JhZb9OfrKiMwL3XKQawEA=)
2: EDE9D100B03B11F09472550DC4F9AE02.roa (hash: cPLdFGXiXR/WYDO7jUKAWbiNRii4uYKJ6ALY5+hpRWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.crl
rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BCE2, serialNumber=482D48E3B6961F1208C0671524E08E903395F659
Validity
Not Before: May 11 03:48:34 2026 GMT
Not After : May 18 03:48:34 2026 GMT
Subject: CN=6a015192-15c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:22:c4:be:3b:60:52:d9:af:4e:07:35:7e:e8:
11:89:b6:60:2a:fe:a5:35:fc:a2:33:e1:24:91:62:
d6:f4:43:94:64:45:16:33:30:20:fc:a7:2d:39:ca:
e2:ae:75:cd:47:3e:b3:93:2c:9d:0c:d8:13:43:57:
e6:eb:47:47:49:ee:6c:da:4a:4a:b7:ca:81:d9:5d:
93:8b:73:3b:1b:9f:78:11:17:64:cb:58:94:e5:8a:
cd:8e:f0:de:1a:51:b7:fb:4c:90:e9:17:14:7e:e3:
7f:8c:11:d1:2a:2a:e9:b9:eb:1f:25:dd:bf:1b:41:
e6:ca:de:7c:c2:c6:1f:c6:af:b8:fe:53:34:30:2d:
43:ff:8d:63:23:de:16:44:bc:ad:b2:f2:43:98:60:
ec:c9:5b:69:1b:0f:55:b4:25:21:b8:29:1b:48:c0:
e3:27:f9:27:9c:f3:b0:7b:f7:71:ae:e3:b9:51:ab:
3b:3f:b6:35:22:26:7b:81:1c:e3:a6:7d:fd:75:45:
f4:3b:46:ca:ed:c4:ad:69:45:ac:3b:91:d2:2c:b8:
19:96:00:ea:2f:3f:55:6c:62:2c:e6:c2:45:80:f2:
1e:55:78:ff:16:3a:d5:0f:a0:d6:05:ab:35:f3:50:
cb:0f:61:6d:10:95:70:9c:1b:c3:bc:1f:11:2d:71:
11:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:79:26:EC:26:0D:30:66:05:A8:47:AF:8D:B4:D2:B3:3D:FA:5D:1F
X509v3 Authority Key Identifier:
keyid:48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:f1:2e:75:b5:73:c2:ac:02:1d:97:df:b5:fd:b4:38:33:36:
1d:56:c2:1c:98:c4:44:31:58:4b:7e:b0:59:d0:5b:a1:af:0b:
95:9e:dc:a0:36:d9:60:16:83:55:e3:8b:f6:94:a2:76:6c:ac:
49:08:b8:82:9e:38:ba:56:cb:96:c5:98:3e:ba:0b:0b:70:62:
5b:e5:b1:50:cd:e3:fb:e5:00:cb:9b:9c:84:9e:75:18:c8:1b:
77:1b:a1:ac:93:f4:1d:a2:c8:15:2c:d8:2f:46:e0:32:05:ac:
45:9f:88:df:09:46:61:4a:11:b5:4a:a8:53:d8:1d:e7:0a:98:
79:c3:5a:d0:e1:32:0a:d7:c5:ad:0e:aa:bb:86:ca:85:0a:82:
e3:f4:4e:66:c1:0f:33:18:e8:a8:4e:02:23:21:60:0c:98:84:
c4:21:88:e7:36:21:80:09:35:4d:5b:e0:60:ae:bb:48:eb:db:
91:02:1f:0b:88:6b:a4:24:48:aa:f7:02:7e:ab:79:e2:f4:b8:
91:c6:b0:e6:0d:b1:46:6b:d7:ca:ab:ad:56:65:c7:3e:ae:eb:
17:a1:73:44:0c:6c:d7:7c:96:c9:e3:4d:ee:b9:48:4c:e5:9d:
35:5e:63:21:03:c9:9c:43:ef:4d:0d:53:65:88:eb:c0:45:ee:
0c:45:66:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJDRTIxMTAvBgNVBAUTKDQ4MkQ0OEUzQjY5NjFGMTIwOEMwNjcxNTI0RTA4RTkw
MzM5NUY2NTkwHhcNMjYwNTExMDM0ODM0WhcNMjYwNTE4MDM0ODM0WjAYMRYwFAYD
VQQDEw02YTAxNTE5Mi0xNWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0CLEvjtgUtmvTgc1fugRibZgKv6lNfyiM+EkkWLW9EOUZEUWMzAg/KctOcri
rnXNRz6zkyydDNgTQ1fm60dHSe5s2kpKt8qB2V2Ti3M7G594ERdky1iU5YrNjvDe
GlG3+0yQ6RcUfuN/jBHRKirpuesfJd2/G0Hmyt58wsYfxq+4/lM0MC1D/41jI94W
RLytsvJDmGDsyVtpGw9VtCUhuCkbSMDjJ/knnPOwe/dxruO5Uas7P7Y1IiZ7gRzj
pn39dUX0O0bK7cStaUWsO5HSLLgZlgDqLz9VbGIs5sJFgPIeVXj/FjrVD6DWBas1
81DLD2FtEJVwnBvDvB8RLXER3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL15Juwm
DTBmBahHr4200rM9+l0fMB8GA1UdIwQYMBaAFEgtSOO2lh8SCMBnFSTgjpAzlfZZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkNFMi8yNEY3RTI3RTk3
QzgxMUVFOTEwMjg4MEFDNEY5QUUwMi9TQzFJNDdhV0h4SUl3R2NWSk9DT2tET1Y5
bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDMUk0N2FXSHhJSXdHY1ZKT0NPa0RPVjlsay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QkNFMi8yNEY3RTI3RTk3QzgxMUVFOTEwMjg4MEFDNEY5QUUwMi9TQzFJNDdhV0h4
SUl3R2NWSk9DT2tET1Y5bGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMvEudbVzwqwCHZfftf20ODM2HVbCHJjERDFYS36wWdBboa8LlZ7coDbZYBaD
VeOL9pSidmysSQi4gp44ulbLlsWYProLC3BiW+WxUM3j++UAy5uchJ51GMgbdxuh
rJP0HaLIFSzYL0bgMgWsRZ+I3wlGYUoRtUqoU9gd5wqYecNa0OEyCtfFrQ6qu4bK
hQqC4/ROZsEPMxjoqE4CIyFgDJiExCGI5zYhgAk1TVvgYK67SOvbkQIfC4hrpCRI
qvcCfqt54vS4kcaw5g2xRmvXyqutVmXHPq7rF6FzRAxs13yWyeNN7rlITOWdNV5j
IQPJnEPvTQ1TZYjrwEXuDEVm2w==
-----END CERTIFICATE-----
Generated at Wed May 13 03:39:09 2026 by rpki-client