
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
File: 15aZWndnWcQmQxeAAofr7u-0umo.mft (raw, json)
Hash identifier: BHZdjQVwOYo3+kNkzaMIb+R1pEv0HsMjFeJ5eqfiafM=
Subject key identifier: 9F:C8:9D:DB:A0:3C:50:70:32:51:0F:10:76:BA:AF:29:4A:4A:B5:C6
Authority key identifier: D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A
Certificate issuer: /CN=A91C022C/serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
Manifest number: 0125
Signing time: Thu 23 Jul 2026 07:32:25 +0000
Manifest this update: Thu 23 Jul 2026 07:32:24 +0000
Manifest next update: Thu 30 Jul 2026 07:32:24 +0000
Files and hashes: 1: 15aZWndnWcQmQxeAAofr7u-0umo.crl (hash: Y6PV+06GiHKBq/P7sCH92Irg8aKzNT1uL0W7dclKegQ=)
2: B6CFF1B2D5F911EFB9B1055CC4F9AE02.roa (hash: 64GI0jvZyfRwaaUyqyoO9+bG/AmsXG/f9aCo9uCRhhE=)
3: 90405CE2D5DD11EF99075D78C4F9AE02.roa (hash: JQiJdIpN3R5SOAUVHjnNQhCnZmq0gQJLMPrdXEKGdyA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl
rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:32:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C022C, serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A
Validity
Not Before: Jul 23 07:32:24 2026 GMT
Not After : Jul 30 07:32:24 2026 GMT
Subject: CN=6a61c389-fa47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:7a:52:0c:3d:93:c9:8f:64:1f:18:da:90:
5e:a2:66:89:4f:bb:6d:78:96:ae:67:c1:88:50:62:
00:14:61:8a:01:b4:46:29:d2:f2:0d:51:d6:75:02:
d2:5c:75:a7:8a:44:27:e1:b9:2d:b7:d4:fb:81:c9:
c8:aa:ee:2c:70:4e:27:13:cc:66:cd:71:aa:ef:92:
4c:77:bc:06:c0:87:6e:fd:35:c9:b9:b7:b0:e0:7a:
4c:d9:f2:84:5b:2f:96:c2:59:b3:c8:20:e5:74:95:
6c:bc:fb:cd:b8:06:c8:f7:74:dc:06:1e:b0:fc:1c:
07:48:f5:cb:77:be:30:c5:f5:bc:42:74:76:9d:13:
61:b5:d2:d4:d7:87:73:36:74:c7:95:fb:44:61:79:
7d:54:c9:53:56:ac:0a:1d:71:ef:27:bf:31:bc:57:
db:e1:ba:21:ca:ab:ea:da:46:fd:86:97:a9:1b:5a:
61:ef:95:6e:8e:de:bf:4d:ae:dd:5b:0a:26:fd:e7:
fc:8d:53:73:e3:91:67:94:5a:c1:2a:93:92:24:8f:
00:a1:1f:85:72:9b:a2:60:69:6d:56:46:54:40:54:
8f:0f:d0:e8:1b:38:82:24:64:ed:cf:de:91:38:07:
22:ce:34:f9:35:16:55:3c:6d:c4:fb:1c:b9:ea:66:
2a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C8:9D:DB:A0:3C:50:70:32:51:0F:10:76:BA:AF:29:4A:4A:B5:C6
X509v3 Authority Key Identifier:
keyid:D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0e:62:1d:66:b4:47:af:a3:95:c6:60:e0:b5:5c:4c:a4:80:
75:4f:95:02:be:5e:dc:35:bc:38:8e:b2:d1:1e:6d:1d:d6:14:
d9:73:cb:f8:b1:ec:58:e6:52:62:49:c4:89:9e:fb:49:68:10:
52:0c:3e:3d:90:1e:0d:e2:b1:15:b7:60:eb:2c:0a:2d:8a:b3:
eb:2a:0c:f3:32:35:79:6e:cb:df:a5:09:65:41:06:15:12:a6:
49:70:46:21:05:11:cc:85:4f:c9:20:b0:53:1c:99:ae:88:31:
f2:12:72:1e:c8:53:12:68:47:fb:60:d5:8b:6f:3f:b6:9c:b8:
9e:88:1d:fd:3b:ae:a9:b6:65:b5:d3:2c:a6:2b:73:56:be:89:
9e:87:b8:34:a7:1b:e0:28:ab:48:eb:6c:f6:32:71:32:02:08:
50:6a:61:e6:51:18:5c:d6:53:28:5c:35:53:ff:27:0a:c0:18:
8a:03:0b:7c:dc:50:f2:1d:58:5b:cb:77:4c:5f:39:92:b4:68:
6f:e2:da:50:de:04:d2:a1:84:b7:68:e4:1a:6f:01:46:e4:8e:
c6:e4:7e:e2:2c:b6:b6:e0:28:68:66:e8:1b:cd:a2:6a:7e:44:
83:a2:0e:2d:8c:2e:d1:84:20:c9:8e:ee:47:eb:ce:a7:c2:83:
67:bc:5b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:19:29 2026 by rpki-client