
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft
File: cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json)
Hash identifier: frxVyGGYyNCN0fev+9EJRSZyGtC3QYuMialOAhPOVSw=
Subject key identifier: C8:6C:76:DF:DA:92:32:98:A1:39:16:C8:C4:BF:C6:22:69:C0:72:E4
Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65
Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065
Certificate serial: 025E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft
Manifest number: 0258
Signing time: Wed 13 May 2026 02:27:35 +0000
Manifest this update: Wed 13 May 2026 02:27:34 +0000
Manifest next update: Wed 20 May 2026 02:27:34 +0000
Files and hashes: 1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: gRQOhFIrI1h1gcxdDJTRmozxhU4ZAJO54PplTFuuTtg=)
2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: UUPPLcKEvUEhkpvRtioLB7LEWMQls2sTWKjKgUgudGc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl
rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 606 (0x25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D10D, serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065
Validity
Not Before: May 13 02:27:34 2026 GMT
Not After : May 20 02:27:34 2026 GMT
Subject: CN=6a03e197-7445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:a4:38:49:9d:a3:ae:aa:62:7a:09:39:96:
f3:ce:7e:4e:0a:5c:d8:ad:65:84:c3:47:c0:c6:39:
1c:09:39:a4:bb:af:99:aa:87:04:d7:54:af:c9:f1:
dc:d5:43:3a:fd:1c:22:09:bc:46:8d:dc:91:cb:d6:
37:e5:6f:b5:69:51:1c:13:2c:fd:03:ae:89:cc:8c:
c2:a9:a9:52:45:97:2d:85:7f:b1:6f:6d:c1:ce:6a:
cd:50:42:ba:48:e2:77:84:75:af:82:cb:3d:7f:c0:
3e:95:e8:67:f4:9f:0d:7e:c2:e4:d0:de:31:65:ab:
5f:f0:4b:9e:b3:be:83:6b:74:11:94:0f:f3:72:f9:
77:e8:9c:29:0e:a5:0e:2a:02:c6:41:21:ff:88:7f:
89:e5:9c:9e:c2:7b:0d:24:1f:56:51:f4:38:09:dd:
0f:1a:6b:f3:d8:bd:ab:dc:07:b1:0d:2d:b6:76:ef:
51:18:6d:bb:ce:59:dc:ce:e9:db:c4:00:0f:74:ef:
62:74:d7:b8:66:2e:26:87:02:f3:c4:32:ff:d4:a1:
40:63:d2:86:fc:85:eb:b1:d3:af:4f:54:a4:3e:6b:
5a:85:b1:30:54:5f:d0:d9:41:35:74:c6:09:8c:a9:
2a:aa:22:69:ec:83:5f:73:30:d8:24:32:81:3f:4e:
2f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6C:76:DF:DA:92:32:98:A1:39:16:C8:C4:BF:C6:22:69:C0:72:E4
X509v3 Authority Key Identifier:
keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:43:0d:19:1d:d9:0e:15:8d:cd:ff:a9:dd:3c:f3:90:d9:f9:
80:be:7b:58:35:cb:97:94:03:9a:33:e5:39:5a:8e:34:e9:44:
7a:ae:00:a0:b0:28:19:ab:53:e8:95:1b:fd:bd:5c:09:c3:ac:
7a:5b:2d:1a:de:68:8b:76:fc:28:d5:db:84:2b:c5:3c:e8:b2:
61:8d:0c:3e:5e:e0:9e:11:81:5c:5c:a4:1b:74:9d:18:ba:97:
0d:57:4e:ef:19:f4:2e:65:cd:e0:95:74:97:b0:2d:7f:b0:e3:
c6:d5:d9:7c:60:03:67:dd:9b:a3:cb:01:95:bd:3d:aa:31:9a:
55:51:c1:22:7f:10:10:c1:56:c0:9d:c0:28:b7:90:4a:ba:04:
fe:41:fb:5b:57:f3:61:c9:2b:8c:cd:d3:6e:50:d5:38:6c:60:
45:94:69:f7:c8:37:b7:6e:04:92:02:35:4a:43:b3:83:25:e1:
4d:4e:21:c2:4d:61:b7:e4:03:03:41:b1:ad:ea:47:68:71:22:
d6:e1:7f:b0:ed:30:c3:9a:c6:bd:d6:60:0e:54:06:98:d6:3a:
3a:ae:24:e5:ea:a6:a1:29:d6:f4:ac:dd:b0:f9:4f:cc:62:6d:
a2:75:bb:53:4a:46:92:77:6e:90:b3:73:70:01:d3:83:7b:d5:
65:de:eb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:04:47 2026 by rpki-client