
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
File: Rm8RJELF0C5g8kaZGTriFRlbO6k.mft (raw, json)
Hash identifier: 7f4xczzOTEme7ZI/HmQ9Zc9D7ylbo9LE6wcJOiXdQ+4=
Subject key identifier: 61:04:38:E1:37:44:A0:32:14:50:2A:B4:55:E2:98:52:15:2F:A6:50
Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
Certificate issuer: /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Certificate serial: 0E43
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
Manifest number: 0E1B
Signing time: Tue 24 Mar 2026 14:22:43 +0000
Manifest this update: Tue 24 Mar 2026 14:22:43 +0000
Manifest next update: Tue 31 Mar 2026 14:22:43 +0000
Files and hashes: 1: Rm8RJELF0C5g8kaZGTriFRlbO6k.crl (hash: PsoHXt3qCeN099qdTIEZqItLUZGUcFZOSwmpIR6b2vs=)
2: 266ABA161E5811EF89038F3BC4F9AE02.roa (hash: 2mykxIxiqsMsDnD5UHQtUMKZScZ9tuzk0LE2MZEIafE=)
3: 1D3D0DC21E5811EFAC23683BC4F9AE02.roa (hash: FYg1sztOimGkD/LIpHQVCG8NcB8eonAdaVTsth0VmSw=)
4: 91CA6CBC740111EFB5E97021C4F9AE02.roa (hash: VUZOzVeu3Rmihqe+9bsoHbZ1D9W7VkSJow2zZcM/4pU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3651 (0xe43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Validity
Not Before: Mar 24 14:22:43 2026 GMT
Not After : Mar 31 14:22:43 2026 GMT
Subject: CN=69c29e33-0a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:25:0e:09:64:ee:31:79:c6:03:57:7f:69:49:
21:09:30:f2:3a:a0:4c:c3:4b:d5:27:59:60:10:79:
59:fc:92:bf:e3:77:f7:7a:0b:3e:ba:2d:6e:d6:10:
fa:ed:5d:8d:0e:10:17:28:84:4f:c3:ae:fa:d6:cb:
19:8f:b3:d4:2b:6c:95:4e:d4:68:fa:42:e9:79:f9:
21:1a:34:d0:5f:8f:fc:13:79:33:48:52:69:1c:40:
6c:99:bd:ca:45:48:fb:1b:df:4a:b9:61:92:9d:3c:
bc:93:c6:46:74:58:a1:58:f4:88:f1:20:58:46:00:
ea:eb:7e:1e:b6:5e:e8:81:29:95:1f:ed:e5:1d:49:
5c:21:8f:b7:93:4a:d5:cf:d6:f4:93:c8:25:bf:72:
4a:62:19:1f:be:45:e9:6e:9e:3f:92:0f:e7:67:52:
98:0e:67:d2:60:1a:d7:a5:0f:f3:98:2c:dc:ca:ae:
ea:a3:d7:40:e6:0f:9a:70:21:4c:dc:aa:9b:9e:20:
cc:57:38:0c:85:1f:99:08:18:36:f1:ca:90:65:16:
cd:54:77:a1:e5:7b:2f:09:df:41:2a:9c:23:ab:c8:
9d:89:2e:17:5d:ba:d4:88:79:c4:3c:f3:2d:c0:60:
0f:b8:6d:2e:9d:86:d3:07:0a:f9:77:46:5a:0c:59:
c1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:04:38:E1:37:44:A0:32:14:50:2A:B4:55:E2:98:52:15:2F:A6:50
X509v3 Authority Key Identifier:
keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:16:66:ac:b2:51:a3:2d:75:ce:ee:3d:c9:91:0e:85:e3:f3:
0f:79:d8:47:e7:00:5d:60:4c:df:3d:22:77:51:40:a9:96:19:
fa:ae:35:ae:1b:1a:2d:71:8b:0c:03:43:22:30:55:04:2d:4f:
4d:c3:89:b2:5e:3b:da:3f:9c:c8:3a:82:e5:b5:89:32:84:d2:
17:8b:f0:bc:33:63:6c:35:ae:7a:cb:ae:b3:eb:5c:30:93:9f:
9e:d2:95:cc:e1:db:bd:86:d7:d1:60:3e:da:7c:b2:b1:d3:6b:
60:05:fa:1e:20:b7:4b:87:6a:2e:b9:50:62:4e:77:34:e3:4d:
c8:45:1a:f3:32:a3:75:25:ef:35:36:e6:e7:c2:33:01:ac:16:
87:dc:f7:6d:4b:de:97:9e:f7:de:c5:ce:72:7e:44:e9:be:b5:
aa:05:61:f1:ce:92:e0:ca:de:32:cf:fe:d5:f4:82:db:1a:39:
cb:8a:ba:9c:5c:84:36:50:71:c9:77:8e:95:a2:d0:e3:84:9e:
90:c4:11:5a:3b:d1:af:8e:21:ab:65:2c:25:8b:09:20:44:22:
91:b3:3e:aa:19:61:ec:e6:43:45:9b:37:54:a3:2f:57:40:ee:
6a:f6:49:5d:ec:34:17:48:b8:65:38:a3:a3:9f:c2:12:eb:10:
c9:70:5d:dc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY4OUMxMTAvBgNVBAUTKDQ2NkYxMTI0NDJDNUQwMkU2MEYyNDY5OTE5M0FFMjE1
MTk1QjNCQTkwHhcNMjYwMzI0MTQyMjQzWhcNMjYwMzMxMTQyMjQzWjAYMRYwFAYD
VQQDEw02OWMyOWUzMy0wYTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAryUOCWTuMXnGA1d/aUkhCTDyOqBMw0vVJ1lgEHlZ/JK/43f3egs+ui1u1hD6
7V2NDhAXKIRPw6761ssZj7PUK2yVTtRo+kLpefkhGjTQX4/8E3kzSFJpHEBsmb3K
RUj7G99KuWGSnTy8k8ZGdFihWPSI8SBYRgDq634etl7ogSmVH+3lHUlcIY+3k0rV
z9b0k8glv3JKYhkfvkXpbp4/kg/nZ1KYDmfSYBrXpQ/zmCzcyq7qo9dA5g+acCFM
3KqbniDMVzgMhR+ZCBg28cqQZRbNVHeh5XsvCd9BKpwjq8idiS4XXbrUiHnEPPMt
wGAPuG0unYbTBwr5d0ZaDFnBAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGEEOOE3
RKAyFFAqtFXimFIVL6ZQMB8GA1UdIwQYMBaAFEZvESRCxdAuYPJGmRk64hUZWzup
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy8wMUIwNjlGNkNF
QkIxMUU5OUIxRjdEM0VDNEY5QUUwMi9SbThSSkVMRjBDNWc4a2FaR1RyaUZSbGJP
NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1JtOFJKRUxGMEM1ZzhrYVpHVHJpRlJsYk82ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Rjg5Qy8wMUIwNjlGNkNFQkIxMUU5OUIxRjdEM0VDNEY5QUUwMi9SbThSSkVMRjBD
NWc4a2FaR1RyaUZSbGJPNmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVBZmrLJRoy11zu49yZEOhePzD3nYR+cAXWBM3z0id1FAqZYZ+q41rhsaLXGL
DANDIjBVBC1PTcOJsl472j+cyDqC5bWJMoTSF4vwvDNjbDWuesuus+tcMJOfntKV
zOHbvYbX0WA+2nyysdNrYAX6HiC3S4dqLrlQYk53NONNyEUa8zKjdSXvNTbm58Iz
AawWh9z3bUvel5733sXOcn5E6b61qgVh8c6S4MreMs/+1fSC2xo5y4q6nFyENlBx
yXeOlaLQ44SekMQRWjvRr44hq2UsJYsJIEQikbM+qhlh7OZDRZs3VKMvV0DuavZJ
Xew0F0i4ZTijo5/CEusQyXBd3A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:43 2026 by rpki-client