
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
File: ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft (raw, json)
Hash identifier: DQlSSbWfXLYpVWpep1/BQHJ8jm5UPKz8FlWxqlsFRE8=
Subject key identifier: D2:6A:DC:4F:F7:3F:4E:68:BE:B0:13:1A:C4:38:20:3E:40:E4:1E:6B
Authority key identifier: 72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE
Certificate issuer: /CN=A915FC5C/serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
Manifest number: A4
Signing time: Mon 11 May 2026 07:27:51 +0000
Manifest this update: Mon 11 May 2026 07:27:51 +0000
Manifest next update: Mon 18 May 2026 07:27:51 +0000
Files and hashes: 1: ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl (hash: NFHKaPqDF7Wt0GqpphtI3/cdHsMz0UXbduLC0eGENXk=)
2: D616F9C45CB011F09DD6183AC4F9AE02.roa (hash: b7KSMqHlW/fLzJCiZxf5k1GieLFoYTeHx+A/fvcNQj8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl
rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FC5C, serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE
Validity
Not Before: May 11 07:27:51 2026 GMT
Not After : May 18 07:27:51 2026 GMT
Subject: CN=6a0184f7-8c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:27:8d:f3:33:fb:3b:c3:be:ce:c8:72:8d:
85:25:95:1d:5f:86:2f:61:f9:a3:e2:d4:b2:08:a1:
09:63:97:00:25:1d:5f:1d:29:5c:5a:12:f1:bc:37:
52:f9:07:88:94:25:35:58:4e:cc:b1:6e:a5:13:ac:
14:38:38:a9:ed:fb:19:39:6f:36:15:01:2f:8f:b7:
b1:9d:af:78:91:d8:dd:5d:98:e8:96:d9:60:1b:54:
cc:a3:82:0f:42:35:0f:a4:34:c1:cf:13:c7:01:a5:
1f:b9:c2:80:fb:fe:1c:35:a2:73:bf:ac:7d:84:3c:
38:f1:e2:b7:33:58:a9:d5:b0:f7:78:a2:a6:75:59:
0d:42:fb:f2:d8:ff:1e:c4:24:c0:8b:14:b1:30:ee:
9d:42:20:7c:8d:0c:20:9c:c4:c8:f3:58:3b:3f:7c:
14:96:41:c4:3f:36:88:a2:fe:79:44:05:38:42:b5:
86:97:05:a6:c6:bd:fe:75:0a:01:62:49:77:02:00:
2b:bc:ef:de:6f:5e:87:ee:37:80:46:1b:14:22:a4:
6f:4d:ac:ce:4f:60:e9:aa:6f:81:ca:9a:8d:bc:3f:
fe:58:36:e3:68:c8:03:ab:18:78:01:b1:4c:f2:73:
22:85:e8:40:5d:ed:da:ce:a4:eb:d9:45:32:c4:a1:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6A:DC:4F:F7:3F:4E:68:BE:B0:13:1A:C4:38:20:3E:40:E4:1E:6B
X509v3 Authority Key Identifier:
keyid:72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:bd:fc:c0:cf:dd:bd:a0:32:f2:78:0b:9c:59:59:d5:49:99:
66:f8:ad:e6:28:34:9f:97:72:71:fc:0b:c0:b2:f8:7b:3e:10:
cf:66:cd:68:61:5f:dc:7c:c8:96:ca:d8:b2:e8:a5:a2:0d:fd:
9a:90:23:d6:59:84:5a:ba:8e:4e:f0:44:13:0c:8d:4f:67:cc:
84:bb:fc:44:74:ca:e4:fe:6b:61:69:fc:00:4c:9c:82:21:c4:
f2:83:f9:e7:86:6a:5b:ff:8f:ab:b2:4e:57:44:53:97:ee:0a:
ea:6f:8d:e0:f1:92:e1:6e:25:f2:44:4b:c3:98:fe:51:04:21:
52:54:84:dd:8c:fb:85:48:bc:82:2f:e8:06:6d:81:13:54:1d:
67:c6:ff:3c:82:20:97:73:78:ba:d4:17:a5:08:77:cb:4f:19:
65:20:3c:90:ff:29:5c:43:cc:05:05:28:8c:9a:0e:b0:4b:61:
f7:00:b6:80:28:99:4f:cb:a1:3e:49:77:ba:6b:0d:5d:e9:37:
12:43:8a:b3:56:a1:ed:d7:21:4e:d7:d5:b8:e0:6a:a0:f7:37:
ee:46:d6:18:6b:de:5c:03:61:27:38:0f:66:bb:32:24:dd:28:
bc:2c:9c:84:1f:b1:e2:10:12:fe:0e:ca:3a:e1:b6:11:58:23:
12:b1:af:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:16:51 2026 by rpki-client