
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
File: AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft (raw, json)
Hash identifier: kbmWxFF/zS3aPp2q/BLKSlatlvRBUUFMX79+Nnf+WQ0=
Subject key identifier: 40:F6:08:FB:51:F5:45:CA:95:DB:BC:F1:DC:05:94:B8:36:5B:E7:C7
Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91
Certificate issuer: /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
Certificate serial: 01EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
Manifest number: 01E1
Signing time: Wed 13 May 2026 03:36:41 +0000
Manifest this update: Wed 13 May 2026 03:36:41 +0000
Manifest next update: Wed 20 May 2026 03:36:41 +0000
Files and hashes: 1: AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl (hash: V3ULGHduTwAhWog8R5g7kAnnHKWFhGaJ9FQyzRGNNSE=)
2: 5694D344791B11EEA64C016BC4F9AE02.roa (hash: oIvNDV0kKg8+q3urTzdMBjxhKk7FfiR/yZ0iZHzMy9A=)
3: D39B04847C4B11EEB4EA3632C4F9AE02.roa (hash: yzSO4tM9nUI6xnt7Kh6rwJxk9dfi0T3Au+GC85D5PJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl
rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:36:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 495 (0x1ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E678, serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
Validity
Not Before: May 13 03:36:41 2026 GMT
Not After : May 20 03:36:41 2026 GMT
Subject: CN=6a03f1c9-dbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:35:9a:d5:98:a8:1b:08:84:d7:09:1b:e3:
17:84:7b:e8:c8:04:61:cc:6e:bb:bb:96:52:9e:65:
bc:2b:df:05:5b:54:21:62:5a:90:39:cb:7e:50:09:
98:b4:92:25:36:01:8c:38:fe:45:c3:00:d1:47:c2:
2b:a4:62:a2:71:a0:7b:e9:1d:57:72:47:2c:de:92:
de:8c:a0:1c:27:4a:37:b7:ad:3c:1c:24:07:7e:2f:
51:e7:99:ef:18:21:0d:2e:1b:2c:49:de:26:8b:b8:
35:e7:ad:2d:22:2b:36:ce:69:84:f5:ad:1a:25:e5:
88:2a:00:03:55:51:2f:99:1a:2b:56:7a:83:3e:b8:
79:05:13:34:56:f4:4a:ab:91:f5:2d:5b:cf:09:ff:
2d:69:5b:67:bf:80:73:20:b9:51:7b:ed:b8:0d:26:
eb:31:13:df:2e:c9:0e:6e:b0:ea:41:c1:6b:f4:82:
62:a6:70:fd:df:cf:ba:a6:7f:3b:20:4d:94:bc:4f:
05:9d:3f:7f:7a:de:77:08:f7:cc:33:9c:8c:ca:19:
a1:a8:df:ef:06:b2:c9:d8:71:b4:b5:41:f9:d0:41:
61:87:d3:dc:2f:a9:79:0f:f2:ab:68:8a:61:69:1c:
a1:3e:be:33:47:36:cc:6e:ab:03:05:bc:4c:95:f6:
9b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F6:08:FB:51:F5:45:CA:95:DB:BC:F1:DC:05:94:B8:36:5B:E7:C7
X509v3 Authority Key Identifier:
keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fa:b9:be:7a:4a:2f:f5:0a:da:95:1e:98:5d:2f:f3:d5:d5:
09:d0:bf:38:70:c1:97:65:69:ee:fd:78:21:f3:85:49:9b:a7:
11:d0:fb:cd:5f:85:58:31:ae:1a:6f:bf:47:a3:ad:06:ef:2c:
c2:a7:d0:d4:7a:3c:95:8e:d8:30:d6:0c:53:54:d2:af:01:1d:
c6:bb:d7:2d:7e:d1:98:85:38:8c:0f:55:9e:ea:a9:da:43:3b:
72:02:c0:1e:cd:7f:6e:e7:f3:48:e8:b0:12:e2:53:f4:54:00:
41:0f:35:9d:87:a4:c6:8a:72:91:63:9a:b1:c0:a2:56:36:29:
97:d6:df:59:51:40:ce:bd:d8:9c:7e:ca:bb:61:77:f3:bc:43:
2f:b2:cd:17:80:35:4c:15:5c:ac:51:4d:b0:b9:83:8d:89:b9:
74:b7:40:68:f0:f8:94:a9:11:0b:9b:53:49:89:aa:32:64:21:
97:0d:2c:b2:9f:9d:97:9d:15:b7:8f:1b:30:d7:ed:9e:57:5a:
13:27:4f:df:a1:4f:dd:7e:58:80:29:03:32:5f:41:da:ca:15:
4c:ad:33:10:62:68:c0:34:48:e6:5a:e5:7b:b7:79:a0:28:b2:
2c:a5:e5:bb:73:72:6a:b3:1a:82:89:ef:e5:90:f8:09:83:9a:
6f:85:ee:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUU2NzgxMTAvBgNVBAUTKDAwOEY1RDA2RjBGRUZDNDBGRDgzMEIyNkNENzY2MEEz
ODMxMTBDOTEwHhcNMjYwNTEzMDMzNjQxWhcNMjYwNTIwMDMzNjQxWjAYMRYwFAYD
VQQDEw02YTAzZjFjOS1kYmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyq01mtWYqBsIhNcJG+MXhHvoyARhzG67u5ZSnmW8K98FW1QhYlqQOct+UAmY
tJIlNgGMOP5FwwDRR8IrpGKicaB76R1Xckcs3pLejKAcJ0o3t608HCQHfi9R55nv
GCENLhssSd4mi7g1560tIis2zmmE9a0aJeWIKgADVVEvmRorVnqDPrh5BRM0VvRK
q5H1LVvPCf8taVtnv4BzILlRe+24DSbrMRPfLskObrDqQcFr9IJipnD938+6pn87
IE2UvE8FnT9/et53CPfMM5yMyhmhqN/vBrLJ2HG0tUH50EFhh9PcL6l5D/KraIph
aRyhPr4zRzbMbqsDBbxMlfab0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFED2CPtR
9UXKldu88dwFlLg2W+fHMB8GA1UdIwQYMBaAFACPXQbw/vxA/YMLJs12YKODEQyR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTY3OC83QUVFRDg2Mjc5
MUExMUVFQUNBMUFEMkJDNEY5QUUwMi9BSTlkQnZELV9FRDlnd3NtelhaZ280TVJE
SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FJOWRCdkQtX0VEOWd3c216WFpnbzRNUkRKRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RTY3OC83QUVFRDg2Mjc5MUExMUVFQUNBMUFEMkJDNEY5QUUwMi9BSTlkQnZELV9F
RDlnd3NtelhaZ280TVJESkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADPq5vnpKL/UK2pUemF0v89XVCdC/OHDBl2Vp7v14IfOFSZunEdD7zV+FWDGu
Gm+/R6OtBu8swqfQ1Ho8lY7YMNYMU1TSrwEdxrvXLX7RmIU4jA9Vnuqp2kM7cgLA
Hs1/bufzSOiwEuJT9FQAQQ81nYekxopykWOascCiVjYpl9bfWVFAzr3YnH7Ku2F3
87xDL7LNF4A1TBVcrFFNsLmDjYm5dLdAaPD4lKkRC5tTSYmqMmQhlw0ssp+dl50V
t48bMNftnldaEydP36FP3X5YgCkDMl9B2soVTK0zEGJowDRI5lrle7d5oCiyLKXl
u3NyarMagonv5ZD4CYOab4XubA==
-----END CERTIFICATE-----
Generated at Wed May 13 12:03:41 2026 by rpki-client