
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft
File: 156odshIAT1wTjIDr31ghtsCx50.mft (raw, json)
Hash identifier: BztEeojWb3EgorKBPNCVGIDQt8+PDPXYz6SH9h3DJ9w=
Subject key identifier: 8B:24:A1:95:0D:CF:11:CD:30:37:62:B2:AE:E1:B0:E3:BE:2C:2B:11
Authority key identifier: D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D
Certificate issuer: /CN=A91EB7B8/serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D
Certificate serial: 03C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft
Manifest number: 03B8
Signing time: Wed 13 May 2026 00:47:56 +0000
Manifest this update: Wed 13 May 2026 00:47:56 +0000
Manifest next update: Wed 20 May 2026 00:47:56 +0000
Files and hashes: 1: 156odshIAT1wTjIDr31ghtsCx50.crl (hash: kQKlLbz8FmETo6lFJa5yrmoiA6YI8yZjfRb6Mpx9iSI=)
2: BD8AAEBAD6BE11EEAAFF5049C4F9AE02.roa (hash: vZQX4t8MAHwhEYks15AvCgJPCCzogD0p8+MoFespB6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl
rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 963 (0x3c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB7B8, serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D
Validity
Not Before: May 13 00:47:56 2026 GMT
Not After : May 20 00:47:56 2026 GMT
Subject: CN=6a03ca3c-aad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:89:7b:3d:2f:7b:58:07:5f:2f:df:9b:b2:
72:54:34:bb:7c:21:0a:92:16:c9:1f:93:2d:7f:1a:
e7:60:11:95:be:34:fa:80:3b:ec:72:28:2a:75:c7:
b9:8b:9b:bb:a7:3f:29:99:56:dc:9f:53:cb:9a:2d:
8f:a0:26:67:0c:be:2f:48:17:2d:47:a7:aa:9f:b0:
de:a3:64:d9:91:3d:bd:54:17:98:48:a7:95:93:0d:
77:86:1c:88:b8:56:7d:71:a2:4c:21:36:eb:fe:a8:
19:73:d7:89:13:cb:08:d7:df:b8:aa:1c:46:54:0a:
d2:61:ff:7b:43:d3:1f:c2:c0:fd:3b:d6:d1:d3:d9:
b3:ae:28:f3:e3:fb:11:9d:e1:f5:e4:3d:ea:77:f2:
1e:54:65:c3:74:cb:19:35:52:e0:ec:b5:6b:84:3d:
55:80:b5:b7:72:a1:95:18:72:cd:7e:33:d0:6f:cc:
9b:6b:cb:a9:14:c4:4f:8b:03:72:ae:97:28:c1:b2:
94:48:31:dc:8d:90:11:a1:d9:46:aa:46:78:4a:34:
03:8e:e2:42:ce:b1:c9:22:1a:0a:9b:24:fe:e6:6a:
c3:07:02:80:aa:88:f8:b0:ad:97:b3:f2:45:4d:6c:
8e:15:8a:90:b9:cc:25:46:30:72:e9:84:32:82:02:
14:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:24:A1:95:0D:CF:11:CD:30:37:62:B2:AE:E1:B0:E3:BE:2C:2B:11
X509v3 Authority Key Identifier:
keyid:D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c2:73:4f:98:45:6a:31:85:f5:e4:60:92:14:1e:09:a5:82:
cb:f9:f7:47:c6:9e:0a:b4:bb:5a:ab:9e:01:ec:d4:21:cd:d9:
e3:e1:ce:11:f1:b8:d8:3a:20:89:eb:0a:42:f1:bb:c2:0b:70:
0f:ed:4f:36:72:bc:af:11:9e:2e:60:3a:49:d1:ce:04:1a:ff:
01:ee:d4:6a:e3:96:91:bf:b3:de:e6:b1:d7:94:dd:d7:fe:74:
85:54:3c:8e:3b:13:b7:99:47:5a:0d:e8:84:dd:d4:5a:b6:7e:
6a:f9:8d:0d:12:ce:da:8d:91:49:bf:75:fe:e9:f9:eb:62:cf:
79:24:2a:12:12:4d:3d:50:dc:ed:bb:12:3f:56:c6:d3:2a:5c:
2f:6b:a3:e6:a7:3c:11:8b:e1:9b:82:72:7d:b1:8a:ac:f1:38:
78:a6:95:3b:4f:af:b5:36:8d:e8:30:d4:98:4d:d5:94:86:54:
81:12:2e:f1:85:8b:1f:14:ab:22:0b:fc:04:cb:f9:99:17:c4:
c6:92:a9:05:ce:ad:2c:42:27:33:d1:0e:b7:5b:54:00:d8:08:
0d:7d:60:b9:55:ee:3d:81:ce:36:c6:d3:c2:cd:bb:f9:eb:6d:
b8:ad:8a:75:65:04:30:d0:67:44:8c:82:59:8c:dd:bf:3f:6d:
c3:bf:9d:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUI3QjgxMTAvBgNVBAUTKEQ3OUVBODc2Qzg0ODAxM0Q3MDRFMzIwM0FGN0Q2MDg2
REIwMkM3OUQwHhcNMjYwNTEzMDA0NzU2WhcNMjYwNTIwMDA0NzU2WjAYMRYwFAYD
VQQDEw02YTAzY2EzYy1hYWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnlWJez0ve1gHXy/fm7JyVDS7fCEKkhbJH5MtfxrnYBGVvjT6gDvscigqdce5
i5u7pz8pmVbcn1PLmi2PoCZnDL4vSBctR6eqn7Deo2TZkT29VBeYSKeVkw13hhyI
uFZ9caJMITbr/qgZc9eJE8sI19+4qhxGVArSYf97Q9MfwsD9O9bR09mzrijz4/sR
neH15D3qd/IeVGXDdMsZNVLg7LVrhD1VgLW3cqGVGHLNfjPQb8yba8upFMRPiwNy
rpcowbKUSDHcjZARodlGqkZ4SjQDjuJCzrHJIhoKmyT+5mrDBwKAqoj4sK2Xs/JF
TWyOFYqQucwlRjBy6YQyggIU0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIskoZUN
zxHNMDdisq7hsOO+LCsRMB8GA1UdIwQYMBaAFNeeqHbISAE9cE4yA699YIbbAsed
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCOC80REUxNkNFNEQ4
MTgxMUVDQjY0OTNENUFDNEY5QUUwMi8xNTZvZHNoSUFUMXdUaklEcjMxZ2h0c0N4
NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzE1Nm9kc2hJQVQxd1RqSURyMzFnaHRzQ3g1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QjdCOC80REUxNkNFNEQ4MTgxMUVDQjY0OTNENUFDNEY5QUUwMi8xNTZvZHNoSUFU
MXdUaklEcjMxZ2h0c0N4NTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArMJzT5hFajGF9eRgkhQeCaWCy/n3R8aeCrS7WqueAezUIc3Z4+HOEfG42Dog
iesKQvG7wgtwD+1PNnK8rxGeLmA6SdHOBBr/Ae7UauOWkb+z3uax15Td1/50hVQ8
jjsTt5lHWg3ohN3UWrZ+avmNDRLO2o2RSb91/un562LPeSQqEhJNPVDc7bsSP1bG
0ypcL2uj5qc8EYvhm4JyfbGKrPE4eKaVO0+vtTaN6DDUmE3VlIZUgRIu8YWLHxSr
Igv8BMv5mRfExpKpBc6tLEInM9EOt1tUANgIDX1guVXuPYHONsbTws27+ettuK2K
dWUEMNBnRIyCWYzdvz9tw7+djw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:13:48 2026 by rpki-client