
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
File: 0pm8o5yZPbgNETe5mbIhhGrPVWs.mft (raw, json)
Hash identifier: yDXH8QwViWMNSlRAJIDKl5gsuKx5Ge4k60A9S+su8Yo=
Subject key identifier: EE:7C:B9:5D:83:C8:B0:75:F7:8A:B4:1E:41:AD:95:7B:81:A3:0B:0C
Authority key identifier: D2:99:BC:A3:9C:99:3D:B8:0D:11:37:B9:99:B2:21:84:6A:CF:55:6B
Certificate issuer: /CN=A9115C2E/serialNumber=D299BCA39C993DB80D1137B999B221846ACF556B
Certificate serial: 0583
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
Manifest number: 057B
Signing time: Tue 28 Apr 2026 19:53:34 +0000
Manifest this update: Tue 28 Apr 2026 19:53:33 +0000
Manifest next update: Tue 05 May 2026 19:53:33 +0000
Files and hashes: 1: 0pm8o5yZPbgNETe5mbIhhGrPVWs.crl (hash: s9jFXbng68aAdnZoWcyRbOvw5/aGL90YkQuay1z2Tog=)
2: F490AE2431D811ECA3C4CE3EC4F9AE02.roa (hash: y/RhPkVawSLf+7/JutT935tMP9izv7b3n4uLlLkmRJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.crl
rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 05 May 2026 19:53:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1411 (0x583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115C2E, serialNumber=D299BCA39C993DB80D1137B999B221846ACF556B
Validity
Not Before: Apr 28 19:53:33 2026 GMT
Not After : May 5 19:53:33 2026 GMT
Subject: CN=69f1103e-942f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f4:b9:72:e1:5c:44:d4:bf:cd:16:d5:42:7c:
7a:63:14:8d:20:57:36:0b:c4:69:b3:c9:a6:80:54:
76:4d:8f:c4:c5:86:06:4f:87:7e:74:be:92:12:7e:
87:91:b6:1c:ed:ef:3e:e1:41:9e:6a:44:e6:6a:a4:
1f:35:89:c2:e3:b0:0b:29:ad:b8:d9:dd:2b:74:15:
6c:2b:7f:cb:2e:16:88:c0:06:ed:9b:86:31:54:e2:
af:53:fa:ef:2a:d9:f9:65:1f:b1:e7:6c:32:41:0d:
58:93:d2:7a:6b:43:3c:ad:c6:91:8f:28:7b:8e:f8:
70:eb:20:cb:84:5e:24:dc:ff:74:4b:ef:95:db:30:
48:85:bb:02:d8:0d:15:3a:5f:2c:26:30:b7:94:dd:
ee:99:8a:75:72:9c:ff:11:94:fd:84:d1:45:d2:0c:
fa:17:b8:e6:55:06:b7:6f:46:e7:23:79:cb:9a:da:
d2:23:f1:fa:9a:7a:e1:de:44:e1:83:fd:de:35:bf:
80:78:15:9f:2c:07:c1:25:54:0c:83:3f:63:6d:be:
b1:9b:67:c0:8d:d8:a9:18:a6:10:db:c1:88:11:5f:
cd:9e:5a:44:be:8c:67:d6:9e:62:96:80:45:16:3f:
ed:6f:68:3e:31:27:7b:3f:98:0b:00:14:4d:d5:e2:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7C:B9:5D:83:C8:B0:75:F7:8A:B4:1E:41:AD:95:7B:81:A3:0B:0C
X509v3 Authority Key Identifier:
keyid:D2:99:BC:A3:9C:99:3D:B8:0D:11:37:B9:99:B2:21:84:6A:CF:55:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:a1:39:25:1e:7d:b6:2f:f7:65:3a:0b:e2:49:34:97:ce:dd:
ff:d5:0d:1b:fd:ae:85:5f:e9:25:4f:2f:63:d0:81:8f:f5:12:
48:72:8b:92:22:50:c0:f3:2e:ff:66:95:1d:ea:45:3f:68:7b:
15:97:39:75:fd:d4:d5:93:47:4f:5f:02:0f:68:72:d5:b0:c5:
a0:33:f1:12:bf:1f:d4:31:ae:b9:f8:5e:3b:9d:0c:6d:b9:5c:
0e:57:d7:1d:cc:ea:8d:83:6a:93:ba:54:f1:c6:ae:d6:18:78:
0a:d1:7e:cf:f8:2f:8d:eb:75:88:24:93:08:95:2b:1d:bb:f1:
84:c7:2d:97:7f:88:d7:5c:b5:ff:4a:1b:24:75:1f:c1:2c:3f:
80:9a:6b:92:7f:9e:0c:fa:73:74:8a:28:ef:3f:59:39:aa:cf:
7f:0f:d2:8f:20:a5:e7:c6:61:45:cd:ed:40:7b:88:28:de:a2:
4b:e5:76:fd:9e:00:ce:50:17:d5:b3:b9:8a:74:7b:6d:9b:9a:
65:01:65:91:d6:49:46:9d:c0:11:18:dc:a6:7d:64:39:4b:c1:
43:49:db:c8:b2:b8:46:7c:51:ce:06:f1:85:87:9c:4c:87:3a:
3b:de:2d:d8:b6:a1:70:2d:a1:cd:ca:30:f4:e3:fc:7d:ae:33:
4e:59:c2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 17:24:52 2026 by rpki-client