
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
File: q1NeEyiEvKNF969pE6sKOXdl56k.mft (raw, json)
Hash identifier: 8Zm/6PvP+flhwoPzJi8DxYohEGoFeWksoMi+hX6YdSg=
Subject key identifier: C7:C8:30:38:45:EF:52:1A:87:AE:9C:3A:97:05:B1:97:B1:F6:D6:0C
Authority key identifier: AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
Certificate issuer: /CN=A9115F15/serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Certificate serial: 0804
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
Manifest number: 07E5
Signing time: Fri 22 May 2026 21:24:53 +0000
Manifest this update: Fri 22 May 2026 21:24:52 +0000
Manifest next update: Fri 29 May 2026 21:24:52 +0000
Files and hashes: 1: q1NeEyiEvKNF969pE6sKOXdl56k.crl (hash: 6l3iqK2koqOQL/5Vq9I+5ocorku9oguK09bCSPNCpEE=)
2: 1F2DD6743A9611EB8CD4224BC4F9AE02.roa (hash: 73c7rPkr5oOJDjoo4nNiA+fWKV7P9/3x9TJs2lmqH+g=)
3: 574E0B4810E111F09B0FF441C4F9AE02.roa (hash: O/pW+oSzPwpDSh1DcS0KrdGVZXKtTtvU2uPHKAV54QQ=)
4: 56D3C71687AB11F095613811C4F9AE02.roa (hash: /iyD3hld6gjpTGLsl0+ygpbYTM+w2T0GBHJEgaI/WgU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 May 2026 21:24:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2052 (0x804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115F15, serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Validity
Not Before: May 22 21:24:52 2026 GMT
Not After : May 29 21:24:52 2026 GMT
Subject: CN=6a10c9a5-e3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:96:98:3f:96:a5:07:71:14:4a:c9:28:b7:
50:13:ac:4b:18:af:cf:b7:6b:1f:22:67:c9:cd:ef:
ce:c3:7a:e8:fd:a0:2c:d1:c8:8f:a0:f9:3f:a2:a9:
5d:aa:67:b9:8e:dd:ab:fc:dc:b5:b2:e7:dd:57:30:
a6:a7:f3:77:f4:db:83:f9:5d:dc:c7:c1:73:19:ec:
6f:9d:b8:cc:2f:43:f7:95:73:ab:4f:20:41:28:24:
bb:73:00:af:11:df:47:0e:bf:cf:ee:d2:d6:ff:6d:
d7:6f:8b:31:b1:a6:07:55:39:52:b5:58:2e:51:8a:
6f:a4:69:19:99:21:e6:90:3e:8c:96:a7:a6:c5:0c:
9a:e0:00:cc:43:9f:af:f5:23:f5:c6:1c:b6:d1:0b:
ef:a7:29:31:df:ea:a3:27:f1:27:a1:f6:d8:e1:f9:
36:b5:4d:7b:e6:23:50:c1:7f:4c:9f:a6:35:b4:77:
bf:82:99:87:9f:75:dc:a6:a4:7c:28:99:56:dc:a3:
0c:f0:30:ff:75:4e:7c:33:7e:0f:9a:66:1e:26:35:
b9:58:0f:ee:ad:a4:6e:b1:08:5e:fd:7f:db:40:80:
b1:fa:24:0e:a5:65:7f:8a:41:aa:08:2a:1d:2f:b3:
72:70:d0:be:d9:b8:19:73:19:f2:d2:27:a7:3b:08:
9d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C8:30:38:45:EF:52:1A:87:AE:9C:3A:97:05:B1:97:B1:F6:D6:0C
X509v3 Authority Key Identifier:
keyid:AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:fa:4a:64:4e:d1:5f:f1:c4:ad:e9:cc:e8:e0:7b:9e:01:25:
d7:48:e5:7b:ae:b7:19:dc:fe:f0:da:51:44:67:b4:1a:24:17:
90:58:1d:c9:eb:70:d1:1b:13:59:05:2c:b1:9c:33:40:10:60:
b8:e9:2b:41:d0:44:bc:b4:50:7f:cb:9f:c2:63:e9:c3:9f:d1:
6f:8e:81:0f:42:dd:bc:3f:24:0e:9b:ad:de:5c:1a:78:e4:32:
09:6f:bf:20:b4:83:f7:97:6a:14:e2:f0:73:60:71:a3:c9:ff:
e7:d2:3e:d4:e9:f7:ce:1e:6e:27:d5:99:9c:6b:ee:aa:88:1e:
f1:a5:68:ed:98:46:dd:45:09:b9:86:36:77:65:f6:da:2f:c8:
81:3d:a9:a3:a8:2c:38:05:a3:5f:aa:f8:a5:8d:61:c1:86:6a:
46:a4:8b:56:a8:11:fe:19:4f:12:72:83:e9:51:e1:c8:6a:af:
e3:6d:9c:63:49:01:f5:5a:5a:a7:3b:b5:d3:3d:91:a5:62:ed:
2e:25:0d:26:d0:eb:3b:74:af:4d:71:29:37:46:76:54:37:e0:
46:04:4a:ae:cb:83:06:b0:b9:bf:80:dd:7d:28:07:4d:1a:4c:
a9:30:f7:52:02:78:85:fb:b4:27:3c:2c:32:ed:ac:a5:ee:38:
e7:35:ba:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:38:33 2026 by rpki-client