
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
File: 15aZWndnWcQmQxeAAofr7u-0umo.mft (raw, json)
Hash identifier: FOXp1y73vpYSfh9D5z6U4vnJw15b9ZdFS0mwBvck+Iw=
Subject key identifier: 97:6D:25:25:27:F7:34:4F:FA:BF:05:08:00:52:94:BB:89:79:98:4B
Authority key identifier: D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A
Certificate issuer: /CN=A91C022C/serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
Manifest number: ED
Signing time: Sun 05 Apr 2026 05:53:20 +0000
Manifest this update: Sun 05 Apr 2026 05:53:19 +0000
Manifest next update: Sun 12 Apr 2026 05:53:19 +0000
Files and hashes: 1: 15aZWndnWcQmQxeAAofr7u-0umo.crl (hash: zeZmTRhHawp3zXdmymevXEqrpiMJsNHoxu1fkj9lzsM=)
2: 90405CE2D5DD11EF99075D78C4F9AE02.roa (hash: kQBx25rv0OAg3LNp4sGRS+ZO8LvUvN8j03KrtNRTMZ0=)
3: B6CFF1B2D5F911EFB9B1055CC4F9AE02.roa (hash: +ylrl2Ff2ALO29C83H8N85jHc5S3xfeV4PSVjM+41fA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl
rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C022C, serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A
Validity
Not Before: Apr 5 05:53:19 2026 GMT
Not After : Apr 12 05:53:19 2026 GMT
Subject: CN=69d1f8d0-2ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:f6:7e:c5:26:ae:c8:75:d6:ce:5c:70:90:
c5:81:86:81:f5:a4:38:0f:b9:70:14:c3:e8:fc:f0:
d5:ae:69:e6:a2:5b:9c:73:e1:90:a7:a3:8e:48:68:
e5:f5:a3:f0:a3:12:f7:de:03:8c:09:43:98:50:3b:
2e:85:88:57:eb:1d:80:3d:0c:e7:52:32:7c:c9:d1:
57:92:e7:f6:bb:e3:ed:c7:cb:48:58:d3:65:61:62:
90:11:bb:f1:0b:8b:01:c3:e6:9c:23:28:b6:71:bf:
e1:12:4c:ec:07:46:ff:e0:3d:fa:14:aa:32:80:95:
b9:9b:ea:9d:90:f6:3d:c5:be:d5:59:3f:7d:f4:5f:
11:47:41:32:59:74:db:ea:1c:15:15:b9:36:1d:2d:
12:b9:1e:0a:a9:1a:4d:4e:7a:be:4c:4f:59:5b:03:
fa:0c:47:28:b3:53:99:2e:d9:e3:b4:8b:a9:0c:8b:
4f:09:32:bb:86:0e:dc:13:d6:25:88:ff:a2:7f:6e:
f4:0d:88:11:e6:01:56:8f:65:dd:e6:f7:c8:23:69:
bb:c3:f2:cd:1d:c2:17:9f:6b:b0:f8:1c:69:88:63:
b0:2d:27:4a:6f:64:17:5b:ba:34:30:df:be:7e:45:
f5:f5:05:87:d3:4b:33:40:86:61:32:ad:94:97:4c:
3d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6D:25:25:27:F7:34:4F:FA:BF:05:08:00:52:94:BB:89:79:98:4B
X509v3 Authority Key Identifier:
keyid:D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:47:fe:d2:c5:94:6a:bc:f7:82:32:05:e5:28:ad:a2:39:0e:
f1:6e:f9:9e:ea:c1:17:6e:96:67:90:46:5e:90:3c:4e:03:dd:
c3:21:24:1c:47:1d:23:cd:43:c8:11:73:73:4e:02:39:f4:24:
15:31:c8:e3:d2:c3:9a:ca:62:77:db:7e:36:c9:d3:f8:dd:71:
2c:1e:b7:6e:8c:e7:a0:ef:fa:d7:f9:c5:a0:bc:6e:fd:98:63:
92:65:69:14:bb:6d:12:87:bc:58:73:92:f9:40:e8:c9:06:95:
0e:93:13:80:97:a6:a1:9b:4a:48:b4:51:60:92:bc:c7:d5:05:
32:6e:15:27:e8:b6:90:8c:60:b4:f8:06:1d:c8:4f:9d:7f:bb:
4d:e4:ff:f8:22:31:8e:4d:cd:a3:c6:c4:b6:e8:99:4e:9e:fb:
9a:19:10:25:33:35:66:8d:7e:ba:84:30:68:e2:1a:b0:be:cb:
ba:c0:85:72:7e:8f:d8:78:d8:a2:0e:3e:d2:62:41:29:0f:f6:
13:1d:4c:3a:56:a2:c8:b9:67:ac:0f:d6:f4:ac:71:2a:1d:84:
d1:38:04:2b:bc:19:ac:07:ca:99:56:78:2e:c1:88:46:6a:01:
6d:33:ac:26:cc:7a:a9:61:36:d8:32:77:58:9d:24:bf:b0:70:
13:4c:f7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:46:59 2026 by rpki-client