
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft
File: -tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft (raw, json)
Hash identifier: GB9UNPm0EwBs2Eiyt94B4d/+vlZZ7FPvChbMgicYabo=
Subject key identifier: D4:66:46:AE:38:01:95:58:14:1C:52:F0:DD:1B:E6:60:FA:F5:8B:98
Authority key identifier: FA:D4:29:9C:B2:05:AA:3D:DD:C4:90:A8:60:25:BA:5C:6C:1E:E0:E9
Certificate issuer: /CN=A915E061/serialNumber=FAD4299CB205AA3DDDC490A86025BA5C6C1EE0E9
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft
Manifest number: 28
Signing time: Wed 13 May 2026 08:54:39 +0000
Manifest this update: Wed 13 May 2026 08:54:39 +0000
Manifest next update: Wed 20 May 2026 08:54:39 +0000
Files and hashes: 1: -tQpnLIFqj3dxJCoYCW6XGwe4Ok.crl (hash: Dqyvo3iOdUmyjW9F85VHEikaTa8u06P1UdEme1gn7gg=)
2: CE992CA0138D11F198EDAC703A3D8C67.roa (hash: hnj4b5BrR1oDY8K6unPrq2mmpWra5ZUyWl2C0okWTrc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.crl
rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E061, serialNumber=FAD4299CB205AA3DDDC490A86025BA5C6C1EE0E9
Validity
Not Before: May 13 08:54:39 2026 GMT
Not After : May 20 08:54:39 2026 GMT
Subject: CN=6a043c4f-8978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2d:49:d1:0e:64:e9:26:97:9b:97:63:51:ca:
73:9e:8f:6d:10:ca:cf:ab:ee:4c:21:a4:0b:61:a0:
79:d7:b4:5e:e9:a8:5d:f9:24:53:6e:8f:b8:79:0f:
25:95:6c:5e:29:1a:45:29:1e:18:7d:3a:30:5d:9a:
1f:4e:a4:35:0a:aa:84:8e:ef:d2:ea:2f:11:7a:ef:
aa:d5:9e:3e:5d:64:35:0b:11:96:a9:9b:e4:d3:16:
36:1d:0b:eb:e7:cb:26:87:bb:60:e4:29:2e:35:59:
f0:d9:1d:37:29:97:6a:6f:b1:09:63:47:bb:60:49:
f4:eb:a1:8b:4f:38:ed:79:49:dd:8f:90:fd:d7:c0:
51:9b:c9:fb:d3:1c:d8:78:e2:1f:8e:83:f0:45:e2:
53:ae:f2:0e:6f:f2:13:fc:c6:8a:0a:c1:bc:a5:48:
83:9f:d8:0d:e1:5e:9c:f9:ff:bd:46:3b:cc:83:c1:
72:85:99:77:a5:fd:b9:60:73:eb:8e:c4:67:f6:2f:
4a:08:6a:bf:c0:5e:04:fe:59:b0:b9:4f:84:7d:61:
3b:33:13:0c:f2:8c:1d:c7:95:5c:61:8b:66:c8:96:
a8:97:68:03:04:15:a0:7b:21:7b:e1:a8:20:eb:20:
48:ea:e2:38:f4:ce:01:66:7b:9e:6c:9d:e9:5f:f0:
a2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:66:46:AE:38:01:95:58:14:1C:52:F0:DD:1B:E6:60:FA:F5:8B:98
X509v3 Authority Key Identifier:
keyid:FA:D4:29:9C:B2:05:AA:3D:DD:C4:90:A8:60:25:BA:5C:6C:1E:E0:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:14:20:c5:02:9c:db:f9:5f:b2:09:19:85:07:06:fd:5f:37:
b7:02:1a:31:66:e3:3c:af:53:b4:1a:eb:e3:f4:52:44:3f:74:
bc:81:63:82:bb:53:7e:b1:46:cf:a4:71:aa:bd:b4:d5:e2:c4:
76:72:78:95:b5:e3:d6:bc:07:33:9e:91:da:1d:3a:9e:1f:82:
b5:92:c7:df:6b:99:89:fa:1d:2c:10:b8:20:1c:d8:50:6a:62:
51:6c:58:15:9f:da:88:de:47:65:be:cc:fc:8f:fc:72:df:9a:
38:9b:f8:ca:33:77:7b:6d:20:20:f1:5b:70:ca:10:e0:fe:c4:
cd:2e:c5:df:59:95:00:06:53:44:e7:35:e8:b0:43:49:de:32:
d3:b2:d0:4a:4d:7f:2c:b7:e0:98:23:dc:d8:5d:94:ce:96:a9:
34:48:59:46:6c:e3:82:cb:dd:2c:b5:36:4a:ff:97:01:18:e2:
76:13:96:96:de:37:4a:c6:5f:90:a3:ff:4d:da:e1:bf:50:1b:
c1:a5:d5:27:77:6f:14:ab:94:cb:e6:6a:a5:47:31:e4:68:68:
72:7c:70:dd:2c:a9:1a:99:c6:78:ad:7c:cf:c3:2e:a7:8a:64:
e0:ad:43:8b:6d:d8:66:20:30:28:b3:ae:69:12:41:07:6d:8a:
4c:7e:c5:36
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
RTA2MTExMC8GA1UEBRMoRkFENDI5OUNCMjA1QUEzREREQzQ5MEE4NjAyNUJBNUM2
QzFFRTBFOTAeFw0yNjA1MTMwODU0MzlaFw0yNjA1MjAwODU0MzlaMBgxFjAUBgNV
BAMTDTZhMDQzYzRmLTg5NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDULUnRDmTpJpebl2NRynOej20Qys+r7kwhpAthoHnXtF7pqF35JFNuj7h5DyWV
bF4pGkUpHhh9OjBdmh9OpDUKqoSO79LqLxF676rVnj5dZDULEZapm+TTFjYdC+vn
yyaHu2DkKS41WfDZHTcpl2pvsQljR7tgSfTroYtPOO15Sd2PkP3XwFGbyfvTHNh4
4h+Og/BF4lOu8g5v8hP8xooKwbylSIOf2A3hXpz5/71GO8yDwXKFmXel/blgc+uO
xGf2L0oIar/AXgT+WbC5T4R9YTszEwzyjB3HlVxhi2bIlqiXaAMEFaB7IXvhqCDr
IEjq4jj0zgFme55snelf8KIrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1GZGrjgB
lVgUHFLw3RvmYPr1i5gwHwYDVR0jBBgwFoAU+tQpnLIFqj3dxJCoYCW6XGwe4Okw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMDYxLzkzNEU1OTgyMTM4
QzExRjFBQTQxNzYzMzNBM0Q4QzY3Ly10UXBuTElGcWozZHhKQ29ZQ1c2WEd3ZTRP
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLXRRcG5MSUZxajNkeEpDb1lDVzZYR3dlNE9rLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF
MDYxLzkzNEU1OTgyMTM4QzExRjFBQTQxNzYzMzNBM0Q4QzY3Ly10UXBuTElGcWoz
ZHhKQ29ZQ1c2WEd3ZTRPay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA6FCDFApzb+V+yCRmFBwb9Xze3AhoxZuM8r1O0Guvj9FJEP3S8gWOCu1N+sUbP
pHGqvbTV4sR2cniVtePWvAcznpHaHTqeH4K1ksffa5mJ+h0sELggHNhQamJRbFgV
n9qI3kdlvsz8j/xy35o4m/jKM3d7bSAg8VtwyhDg/sTNLsXfWZUABlNE5zXosENJ
3jLTstBKTX8st+CYI9zYXZTOlqk0SFlGbOOCy90stTZK/5cBGOJ2E5aW3jdKxl+Q
o/9N2uG/UBvBpdUnd28Uq5TL5mqlRzHkaGhyfHDdLKkamcZ4rXzPwy6nimTgrUOL
bdhmIDAos65pEkEHbYpMfsU2
-----END CERTIFICATE-----
Generated at Wed May 13 17:13:24 2026 by rpki-client