
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft
File: ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft (raw, json)
Hash identifier: uQlVu+KLL2yNX9yAVJVGb+xnreyNwezauNV091kOZTE=
Subject key identifier: DC:52:55:5F:A0:27:5D:51:FA:81:82:8C:85:7D:4C:0D:AB:CD:B9:CE
Authority key identifier: 72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A
Certificate issuer: /CN=A915D010/serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A
Certificate serial: 0E5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft
Manifest number: 0E51
Signing time: Tue 12 May 2026 17:48:38 +0000
Manifest this update: Tue 12 May 2026 17:48:37 +0000
Manifest next update: Tue 19 May 2026 17:48:37 +0000
Files and hashes: 1: ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl (hash: SQlOqTfoicetv5oFjZtxQAcWLgvJbco9ued34qxuolk=)
2: BB691FBE889111F09BDDFE1FC4F9AE02.roa (hash: aKgTE44Ui4Km2SlMzbMZshdm2FGBkzXAI+GmGPjCfyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl
rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3676 (0xe5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D010, serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A
Validity
Not Before: May 12 17:48:37 2026 GMT
Not After : May 19 17:48:37 2026 GMT
Subject: CN=6a0367f6-22a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:16:f6:46:a3:07:24:95:bb:fd:26:4f:48:
d1:39:8b:8a:95:bd:90:eb:a0:ac:fe:f2:8a:dd:d1:
d1:1e:83:69:46:8f:cf:95:34:63:41:cc:67:e4:3f:
a5:81:a9:b2:3a:24:04:2d:f3:21:c1:57:bb:20:6c:
18:3d:70:b1:7e:a1:7d:be:62:d0:c3:8f:a5:d7:68:
30:0a:cc:f0:3e:6c:1c:f1:e6:66:71:cb:41:0c:ec:
dc:7d:6a:23:19:f0:ca:89:b6:21:ca:29:ca:40:20:
fa:da:23:b6:c9:6d:f0:0b:cc:61:2a:ef:54:4d:fd:
d6:d5:3e:f6:fc:13:0b:30:09:ae:f3:62:9b:6d:5c:
a9:c3:4a:78:9f:f9:b7:e3:bc:92:d5:87:10:8b:60:
e9:b8:f5:3f:a4:e4:3e:4b:3b:64:c7:01:ca:c7:52:
c5:45:90:a3:db:eb:5f:7e:b0:0d:1c:7e:2b:8d:7d:
fa:8b:36:ef:d5:36:b6:7b:e4:d5:e1:78:bf:33:de:
63:28:d6:fa:30:89:a0:33:51:57:e6:4d:32:f9:b0:
46:ac:7b:d8:e1:c4:34:aa:d2:db:10:69:d3:f1:41:
40:3e:a6:ab:92:ca:ea:c4:79:80:16:31:6e:a6:76:
ae:8f:fc:f4:a0:0e:96:7b:aa:f2:c6:e5:13:51:7c:
01:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:52:55:5F:A0:27:5D:51:FA:81:82:8C:85:7D:4C:0D:AB:CD:B9:CE
X509v3 Authority Key Identifier:
keyid:72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6f:7f:ac:70:b2:94:6d:fb:2d:97:9c:a1:fc:53:cc:0e:e1:
5f:e6:e9:3c:3a:b8:dd:12:41:98:af:bb:16:7a:d6:6c:7f:ca:
f8:54:bd:66:6b:3b:96:c6:78:97:71:c1:4c:2e:08:0e:fc:be:
56:48:24:10:22:6e:aa:6a:05:f8:e2:93:aa:78:5a:34:98:6a:
58:e9:07:8d:8d:cf:64:f5:84:60:b5:ac:60:fd:10:a1:ca:a0:
96:6c:f4:2b:04:68:dc:02:5b:ad:a3:86:7d:e9:d3:e1:e4:d2:
4f:d3:ab:62:f7:2f:29:0c:99:a8:ad:38:83:9f:01:49:7a:26:
99:1b:ab:ce:64:61:56:e9:87:2f:25:73:2b:de:46:a3:ee:b2:
a7:ca:dc:d6:4b:4c:95:78:91:fe:e8:39:d5:88:d0:5b:26:eb:
56:a7:0d:86:ef:b6:95:fe:b2:cc:dd:20:b9:b3:92:bd:c0:38:
90:9d:02:e5:7f:19:47:4f:5c:e4:53:d1:46:c8:6c:04:6a:f5:
9d:49:85:af:43:aa:68:03:83:d2:93:5b:19:cf:73:dd:fc:e2:
aa:68:dd:d8:2b:b2:02:24:59:df:3b:27:b7:cf:93:73:6a:07:
08:b1:1c:9b:6d:8c:b1:1b:a6:94:0e:a0:db:e3:fa:62:bb:30:
3c:b1:ae:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:04:34 2026 by rpki-client