
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
File: 15aZWndnWcQmQxeAAofr7u-0umo.mft (raw, json)
Hash identifier: 9M4gKnrYJzWdxGMKvU65Ps5vIAzTbDT7kCvfS7funhA=
Subject key identifier: C7:E8:B8:E9:59:A1:D5:1E:83:7E:17:29:34:3D:A1:B7:5B:14:E3:95
Authority key identifier: D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A
Certificate issuer: /CN=A91C022C/serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
Manifest number: 0148
Signing time: Fri 25 Sep 2026 05:32:48 +0000
Manifest this update: Fri 25 Sep 2026 05:32:47 +0000
Manifest next update: Fri 02 Oct 2026 05:32:47 +0000
Files and hashes: 1: 15aZWndnWcQmQxeAAofr7u-0umo.crl (hash: 1ljxX++TgWqai+LWdeuy8swu8pJaOWDUN78T0qo4gMI=)
2: B75DF5B4885B11F1898FC1875911F970.roa (hash: ClO5piivz8eEsp9F5qrC3vaNrxAb+jMIIwEfco0i7mk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl
rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:32:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C022C, serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A
Validity
Not Before: Sep 25 05:32:47 2026 GMT
Not After : Oct 2 05:32:47 2026 GMT
Subject: CN=6ab60780-30a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f7:6c:ab:f3:f0:ea:c5:79:b8:76:12:ce:f9:
dd:d6:84:2a:c5:5b:ed:9a:ce:88:b6:04:58:8f:21:
37:f1:5c:64:a1:8b:96:58:2c:f9:c2:62:f7:b5:46:
16:05:89:41:a1:c8:52:d4:82:28:0d:9b:1f:6d:ee:
64:fb:33:73:10:26:fb:db:bf:b2:65:8d:08:b9:45:
ba:c2:50:dc:19:32:4a:11:36:a6:4d:da:d7:69:b5:
af:a4:c6:4f:e0:f0:4a:23:32:45:55:49:c1:f7:79:
8e:3f:ee:cd:77:5b:cc:14:30:ac:ec:6b:ff:c0:05:
77:43:40:77:a1:f6:8e:74:c1:83:9b:e5:cb:48:66:
89:2b:4d:25:3f:81:19:07:84:06:fe:12:af:32:d4:
ef:63:1a:58:77:0a:c5:bc:6f:34:4e:8c:41:f2:62:
9e:e2:fc:60:d9:b0:b2:aa:8b:35:7c:c6:c3:35:90:
ee:b3:1a:7f:d2:4c:a1:2a:c6:d2:5b:a7:f3:5e:ad:
5c:f4:1d:7b:2e:fd:bb:f1:3c:56:0f:00:3b:20:59:
64:62:f0:63:b1:4e:ea:80:34:cc:9d:67:7b:54:cf:
e7:58:d1:41:9c:06:09:91:89:54:b9:07:ec:52:7b:
fc:0c:d0:e4:39:e8:3f:5a:46:52:1d:55:f1:ff:1e:
aa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E8:B8:E9:59:A1:D5:1E:83:7E:17:29:34:3D:A1:B7:5B:14:E3:95
X509v3 Authority Key Identifier:
keyid:D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:d5:38:ca:51:1e:65:49:28:14:e6:dd:d7:91:1c:f1:bf:fc:
d8:d9:6d:91:33:b7:26:a7:a2:6f:1c:4f:b1:9b:e3:39:aa:ac:
83:1e:f1:73:53:8e:4f:2e:fc:d1:07:7c:f6:89:44:ad:8d:78:
cb:f3:e3:12:92:5f:04:47:9e:cd:61:7c:ba:ec:92:f7:29:d3:
72:eb:6e:bd:47:01:e2:ff:7e:19:34:62:2d:ad:17:fa:c7:55:
9e:2c:1b:3a:4e:86:68:ec:18:29:1f:9a:b9:33:ed:6d:c9:af:
50:5d:5a:85:28:75:c6:f7:1d:74:4f:bf:13:3a:c1:ab:d4:03:
a1:eb:4e:ba:ff:f1:2b:b9:ec:03:78:ba:2b:38:e3:d2:5e:ee:
9c:fd:ff:b6:98:79:51:36:19:32:b9:6a:d1:a6:e0:71:0b:cd:
14:c3:60:46:f4:a6:73:c1:53:1b:27:9f:29:08:f6:bc:91:05:
ea:41:ea:10:f8:ce:17:13:0f:4a:ef:04:fb:ef:c5:88:5d:da:
79:92:c8:64:51:0f:00:1d:18:38:05:25:39:db:2f:76:48:86:
5c:aa:f9:90:e0:c5:ef:93:94:12:76:e6:d8:79:a2:ca:92:5a:
94:74:63:74:98:fc:fe:67:29:95:ae:59:b0:6c:77:b3:f5:9f:
94:76:36:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:47:36 2026 by rpki-client