
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
File: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft (raw, json)
Hash identifier: pOL38W1oBm57Yb8LQrfTaaNyj/ikY5KXOH8hukUgmw0=
Subject key identifier: BA:D1:C6:DB:81:01:59:51:72:7F:C9:F1:FD:B0:78:AF:CC:19:0D:24
Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4
Certificate issuer: /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4
Certificate serial: 0225
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
Manifest number: 021B
Signing time: Thu 21 May 2026 02:58:42 +0000
Manifest this update: Thu 21 May 2026 02:58:41 +0000
Manifest next update: Thu 28 May 2026 02:58:41 +0000
Files and hashes: 1: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl (hash: Cx+q/f29gHfl1+tOfd20PzjamI0IMfIJITpEmSNmeKI=)
2: 9728C64EF10811EE8F128341C4F9AE02.roa (hash: oPiJqmRhnsqJ9VzYZizn2gWr3NtxijO+hht/Af3EOxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl
rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549 (0x225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143F26, serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4
Validity
Not Before: May 21 02:58:41 2026 GMT
Not After : May 28 02:58:41 2026 GMT
Subject: CN=6a0e74e1-99fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:b1:a0:eb:11:04:92:94:8d:22:e5:16:2e:
6a:ad:4d:74:f2:1f:f3:b9:bd:a8:e0:2d:7e:d1:ef:
98:05:c6:63:59:9d:ab:2f:1f:03:a1:45:55:59:6b:
22:90:cb:09:99:84:e5:62:c6:a1:46:62:25:4e:51:
3d:85:4b:6c:b6:81:83:b0:83:48:2e:ba:5a:28:84:
9b:a9:ed:c3:87:d5:62:63:8e:7b:db:f3:78:40:47:
25:85:65:d8:db:43:67:63:3c:02:2d:62:16:ea:a8:
fb:14:d1:db:23:4d:78:df:98:ff:4e:38:10:5a:ed:
b7:ea:53:0a:7a:07:ad:ff:42:09:c5:2f:25:3c:32:
55:a0:14:2f:dd:eb:b0:03:2e:62:31:e0:7f:c2:f9:
6a:a7:2b:94:93:c0:f9:87:eb:ed:c7:95:25:6c:ba:
47:d2:a0:6c:60:be:96:96:b5:09:e8:ae:49:0c:03:
3c:98:b7:ed:3f:42:19:af:05:af:40:0a:28:8b:1b:
3f:d0:53:d7:60:06:ea:22:b5:0a:54:28:55:b3:89:
f7:41:27:e5:4c:a9:d2:2b:ee:66:47:9c:05:f8:24:
c7:2f:1f:55:1a:12:c3:d8:d6:87:2e:c5:07:ee:5b:
6f:5f:2b:3f:a7:1c:31:14:9c:8b:ae:e0:b9:98:8f:
6d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D1:C6:DB:81:01:59:51:72:7F:C9:F1:FD:B0:78:AF:CC:19:0D:24
X509v3 Authority Key Identifier:
keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:c7:c3:bc:28:cb:65:33:fe:f0:d4:ac:e6:6f:a6:5c:3a:8a:
a4:55:42:92:8f:76:4b:ba:66:a7:e0:b1:96:9a:bf:b7:82:da:
43:3f:ac:35:7c:83:91:cd:c9:ae:02:d3:12:c7:3f:eb:d4:41:
08:8b:08:37:41:f6:91:5d:76:b5:2d:2b:0c:d6:4b:e6:3c:c1:
21:a0:48:4b:ad:8a:18:d0:4c:aa:16:5a:6a:a3:ca:dc:2b:a5:
24:22:66:f1:3e:5e:20:ac:d6:3b:52:19:2d:24:f0:03:6d:38:
ea:ac:e6:54:78:e9:44:9d:a0:02:02:ae:f4:81:85:79:c8:b6:
fe:e9:a5:02:b5:57:18:0c:15:59:e7:63:ee:ec:11:1e:06:5e:
52:5d:2c:97:e1:4d:96:5f:3f:c7:38:41:f2:06:9c:c2:06:69:
9c:09:eb:85:99:8d:12:da:af:66:23:77:73:76:40:3d:b9:3a:
be:c3:9c:ec:e3:a7:26:33:d4:81:16:2d:5f:bb:75:88:43:5c:
46:01:7e:79:e2:df:5d:eb:b8:a8:40:d1:61:12:9d:dc:61:09:
3b:23:a1:56:ea:41:40:85:e2:1a:a7:5a:87:c2:47:1e:47:48:
95:5b:13:c3:ad:bf:34:3d:28:f1:78:ea:41:22:9d:e4:3a:9e:
0e:58:34:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:10 2026 by rpki-client