
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
File: sQtPQ0P6rissTT3WYGS-km7HTJ8.mft (raw, json)
Hash identifier: u/2rXK6qQiCB7oct3qiNS8n7rjjvLQmp9zh5PB9kTqk=
Subject key identifier: 8E:0C:BA:BA:A3:7D:57:D4:0D:93:AF:07:B3:FA:1C:F8:00:C3:0B:19
Authority key identifier: B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F
Certificate issuer: /CN=A915CE2F/serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F
Certificate serial: 0293
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
Manifest number: 028C
Signing time: Wed 13 May 2026 01:53:08 +0000
Manifest this update: Wed 13 May 2026 01:53:08 +0000
Manifest next update: Wed 20 May 2026 01:53:08 +0000
Files and hashes: 1: sQtPQ0P6rissTT3WYGS-km7HTJ8.crl (hash: d2TVCaUeislIBI9lwqwM3bJFrrX0RMB21h+qfyMCrzE=)
2: 670087C4EEF011ED9C693D31C4F9AE02.roa (hash: 9EODo3VTRqYwzjAsn5kOJ1RRcS5qGi8SpwuOaYpySHc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl
rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 659 (0x293)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CE2F, serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F
Validity
Not Before: May 13 01:53:08 2026 GMT
Not After : May 20 01:53:08 2026 GMT
Subject: CN=6a03d984-383c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:63:16:9a:94:d0:d9:29:2b:34:97:cd:cf:ba:
d3:4a:67:d7:b6:2d:bf:5f:1a:a8:89:48:87:a6:20:
15:97:ac:b7:16:d1:3f:b3:0d:f0:0a:58:81:2e:ee:
9f:5a:c2:ae:c8:1e:ff:8a:57:70:cb:e7:e6:a9:7e:
7c:11:a0:55:98:38:4a:39:a2:11:64:76:09:03:65:
57:a7:c0:67:c2:3c:58:97:86:4b:a3:3c:9d:23:c7:
83:28:c1:71:81:ed:19:d8:0b:25:2c:74:0b:0d:c5:
65:c4:2c:5a:62:1e:85:29:d7:70:39:38:86:20:5d:
eb:d9:1c:ac:ab:27:3e:ff:32:a9:28:ec:8a:55:0b:
c2:65:87:56:cc:83:fa:26:7d:90:37:4c:a9:c2:33:
ae:74:9d:ba:c1:b0:f8:4a:54:42:8e:e1:2a:07:13:
7d:02:7e:ec:fb:e1:6a:4d:24:a7:ad:11:1f:99:8c:
85:0a:b5:1b:b7:40:32:66:ad:c4:e4:b0:d4:43:67:
3e:f7:7a:f9:99:f6:d9:21:88:b1:59:65:05:6d:13:
d2:ce:be:e6:8a:33:47:74:ff:c9:de:4d:f6:82:dd:
c5:f3:03:de:43:60:b9:39:05:70:00:0c:e9:62:3d:
69:ef:92:74:f9:6b:be:29:f2:9e:96:95:a1:32:a5:
6e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0C:BA:BA:A3:7D:57:D4:0D:93:AF:07:B3:FA:1C:F8:00:C3:0B:19
X509v3 Authority Key Identifier:
keyid:B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:e6:e9:d7:a3:ac:da:5f:3e:01:69:ec:c6:cb:b2:f6:e4:f0:
90:72:35:6f:ee:31:36:e3:1a:67:e3:23:ad:3f:48:ad:4a:08:
cf:9c:1f:1d:88:9a:7b:c9:97:3b:63:22:00:1d:7c:e0:40:63:
b3:0c:0d:99:a1:5f:b7:d9:02:a4:24:0d:01:8c:f0:61:28:b2:
7a:52:7c:07:67:ab:75:7f:77:a6:a5:63:61:83:7b:a7:66:bc:
55:a7:75:e3:ff:28:76:2c:b8:70:9d:34:f3:76:14:84:65:e4:
ba:2c:aa:de:12:2b:6a:23:9e:09:69:d0:ea:ce:46:31:df:dc:
10:1b:53:71:e2:bf:2e:2b:18:48:de:58:c1:a1:08:4a:82:e7:
00:67:fa:af:c1:d5:95:11:6a:37:7e:60:bc:76:ce:40:6b:67:
b1:b6:5a:69:31:92:44:87:7f:83:29:13:8d:c9:b7:09:79:bb:
4e:b9:a5:d9:9d:8d:8e:f8:ca:79:93:9e:6c:3c:02:be:75:7b:
1a:96:f8:55:bf:7f:30:01:5b:f2:80:3f:e3:ee:7d:11:7a:b2:
17:cb:b6:f2:d3:ce:02:a4:7b:81:38:73:0c:6f:23:fc:cf:9b:
74:73:e5:63:7c:82:16:2a:29:7d:d1:23:e1:c2:06:2b:5f:4b:
de:55:db:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUNFMkYxMTAvBgNVBAUTKEIxMEI0RjQzNDNGQUFFMkIyQzREM0RENjYwNjRCRTky
NkVDNzRDOUYwHhcNMjYwNTEzMDE1MzA4WhcNMjYwNTIwMDE1MzA4WjAYMRYwFAYD
VQQDEw02YTAzZDk4NC0zODNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo2MWmpTQ2SkrNJfNz7rTSmfXti2/XxqoiUiHpiAVl6y3FtE/sw3wCliBLu6f
WsKuyB7/ildwy+fmqX58EaBVmDhKOaIRZHYJA2VXp8BnwjxYl4ZLozydI8eDKMFx
ge0Z2AslLHQLDcVlxCxaYh6FKddwOTiGIF3r2Rysqyc+/zKpKOyKVQvCZYdWzIP6
Jn2QN0ypwjOudJ26wbD4SlRCjuEqBxN9An7s++FqTSSnrREfmYyFCrUbt0AyZq3E
5LDUQ2c+93r5mfbZIYixWWUFbRPSzr7mijNHdP/J3k32gt3F8wPeQ2C5OQVwAAzp
Yj1p75J0+Wu+KfKelpWhMqVueQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI4Murqj
fVfUDZOvB7P6HPgAwwsZMB8GA1UdIwQYMBaAFLELT0ND+q4rLE091mBkvpJux0yf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0UyRi8wQkRFQTUyODcw
RTMxMUVEQjU3NzA0M0ZDNEY5QUUwMi9zUXRQUTBQNnJpc3NUVDNXWUdTLWttN0hU
SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NRdFBRMFA2cmlzc1RUM1dZR1Mta203SFRKOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Q0UyRi8wQkRFQTUyODcwRTMxMUVEQjU3NzA0M0ZDNEY5QUUwMi9zUXRQUTBQNnJp
c3NUVDNXWUdTLWttN0hUSjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAObp16Os2l8+AWnsxsuy9uTwkHI1b+4xNuMaZ+MjrT9IrUoIz5wfHYiae8mX
O2MiAB184EBjswwNmaFft9kCpCQNAYzwYSiyelJ8B2erdX93pqVjYYN7p2a8Vad1
4/8odiy4cJ0083YUhGXkuiyq3hIraiOeCWnQ6s5GMd/cEBtTceK/LisYSN5YwaEI
SoLnAGf6r8HVlRFqN35gvHbOQGtnsbZaaTGSRId/gykTjcm3CXm7Trml2Z2NjvjK
eZOebDwCvnV7Gpb4Vb9/MAFb8oA/4+59EXqyF8u28tPOAqR7gThzDG8j/M+bdHPl
Y3yCFiopfdEj4cIGK19L3lXbjw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:20:11 2026 by rpki-client