
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
File: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft (raw, json)
Hash identifier: T+c0XBfEfc7YqfWX+rDvKTalJYHOdb5Jb/K+8TJhTA4=
Subject key identifier: D6:AA:12:CB:40:A4:C7:AA:19:BE:AF:04:48:97:A7:20:25:F0:EB:CF
Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4
Certificate issuer: /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4
Certificate serial: 025E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
Manifest number: 0253
Signing time: Sat 05 Sep 2026 02:15:22 +0000
Manifest this update: Sat 05 Sep 2026 02:15:21 +0000
Manifest next update: Sat 12 Sep 2026 02:15:21 +0000
Files and hashes: 1: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl (hash: bENYu0s6VeOLivMvcpIEsNfgCe7N7ygVTYW+fjaq6gc=)
2: 9728C64EF10811EE8F128341C4F9AE02.roa (hash: sJz5VeahHTkIZibpFE1f8H8FrejnbU9Z50GoAA1HcF0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl
rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 02:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 606 (0x25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143F26, serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4
Validity
Not Before: Sep 5 02:15:21 2026 GMT
Not After : Sep 12 02:15:21 2026 GMT
Subject: CN=6a9b7b3a-e5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:9a:91:8f:12:70:a4:fa:95:a8:a3:83:cd:
4d:54:88:5c:5d:66:59:6b:31:85:2e:5e:4d:51:a8:
56:96:1f:5c:63:f7:8d:a4:a1:8a:df:9c:3a:8c:18:
5f:a2:bf:8d:e3:47:69:dc:bf:4d:7a:99:58:ba:4f:
10:0d:22:a1:b8:b9:d3:68:61:a2:7c:e2:a8:0e:e0:
f7:25:26:74:50:5f:f8:bf:62:8d:e1:b7:54:30:90:
da:cb:14:70:12:49:f1:e8:bb:f6:c3:51:44:49:a6:
20:fc:e8:c1:fa:ba:3e:79:f3:c2:82:0e:ea:91:53:
64:1f:bd:f9:67:45:6f:07:bf:1f:4d:c7:78:2e:bf:
7a:a3:9a:6e:d4:49:de:b6:d7:07:8e:e4:6f:0d:10:
e7:b9:0a:38:50:6e:08:3d:c6:cd:ab:f3:ea:90:cd:
a4:16:00:71:06:81:ac:f6:4e:0f:59:34:5a:e7:27:
b8:16:83:6e:26:0d:58:0c:83:a0:f4:b6:31:f6:c3:
7d:69:79:7b:05:fa:af:db:28:f2:8e:d4:aa:90:e2:
2e:20:90:f0:f3:57:32:70:46:e4:e9:cf:6c:a5:a6:
19:85:70:44:dd:64:2d:88:1f:d5:38:34:88:b6:a7:
7c:65:fa:a0:99:b0:c7:de:49:76:6d:93:c5:06:e7:
04:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AA:12:CB:40:A4:C7:AA:19:BE:AF:04:48:97:A7:20:25:F0:EB:CF
X509v3 Authority Key Identifier:
keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b2:c3:5f:a4:0f:1d:e6:c6:a7:b7:71:8c:a1:c3:6a:a1:7e:
8f:6a:e9:56:3b:27:f6:cf:65:61:df:e4:dd:e3:e5:0d:35:44:
77:7f:37:ea:6a:e3:0b:b4:b9:13:b6:c2:11:75:fd:75:48:16:
3c:3e:5c:8b:91:97:e6:b0:af:0d:db:0d:33:1c:9a:b1:c5:87:
41:a2:9b:7a:29:6d:3e:79:c9:e6:22:b3:e3:bd:ac:86:5b:02:
9b:5a:07:cb:67:34:60:15:2e:c6:62:e4:79:45:1b:48:b5:5b:
eb:24:e7:7c:a4:71:77:f9:a7:f8:57:ff:67:b8:69:48:7f:ef:
e0:25:ee:99:35:d3:86:fb:58:27:6a:4f:b9:22:2d:ec:4c:1e:
db:9c:1f:dc:e6:72:8f:cf:5c:f3:80:3f:58:c2:87:45:72:74:
bf:7b:02:47:67:06:47:84:1b:05:78:4f:7e:df:26:65:9b:2b:
54:1c:dd:1d:01:fa:7e:b8:0b:7c:9c:00:1d:d4:19:f9:2d:1d:
13:07:97:13:60:80:dc:e6:63:81:90:68:48:22:8d:64:ef:39:
c6:f4:2e:a5:21:3b:4e:3a:e5:b2:92:b8:e6:55:0a:99:ad:8d:
74:98:5e:6d:6c:b5:4d:64:ec:f0:a5:d8:56:86:aa:d7:6a:89:
c6:68:21:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:08:10 2026 by rpki-client