
$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
File: Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json)
Hash identifier: jilTU5eON3csR+MOlnVisRGhNCSqd+YTwFX6lSOTJjg=
Subject key identifier: C4:D9:D3:B2:42:F9:DE:21:79:E7:59:D3:19:45:0B:9B:C9:4B:72:14
Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E
Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E
Certificate serial: 032F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
Manifest number: 0329
Signing time: Thu 21 May 2026 01:12:15 +0000
Manifest this update: Thu 21 May 2026 01:12:14 +0000
Manifest next update: Thu 28 May 2026 01:12:14 +0000
Files and hashes: 1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: Nay3gR6Ibog75Rf3bxIDZr4d39Cqqicp3yNv15TOf/U=)
2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: hRSBw3j57fal3n5v23N17SHqFFyn7GkCbwIU7hzC2CA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl
rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:12:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 815 (0x32f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915430A, serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E
Validity
Not Before: May 21 01:12:14 2026 GMT
Not After : May 28 01:12:14 2026 GMT
Subject: CN=6a0e5bef-8b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ca:06:08:31:1a:64:73:2c:14:b5:9c:1f:00:
e3:70:2d:07:f8:a3:40:1b:8c:9b:a5:a2:e9:12:7a:
54:2a:49:d7:b4:c0:37:fb:9f:71:0d:86:b6:c6:d7:
e6:4d:cd:4a:c0:ec:ec:dd:66:1c:34:fe:62:b2:b0:
d1:5b:22:4e:f6:cb:96:58:4d:f4:c2:6c:77:6b:7b:
6d:4a:c8:56:ad:0d:9e:5c:99:47:35:e7:cf:4a:1b:
7b:3a:03:b0:0e:ed:41:54:ad:ce:38:8c:4b:ad:c5:
cc:57:ee:ab:4f:84:a4:9e:af:a4:cf:a3:97:6d:4f:
ef:a6:7c:fb:18:31:05:ac:c5:1e:f0:cc:8b:98:02:
1e:fd:42:b4:17:b1:a4:85:7a:7f:9a:e8:80:25:01:
f4:43:4c:49:cd:aa:d6:2e:19:b2:f4:dc:de:0f:65:
f0:9e:52:12:a2:f6:a1:1d:cb:e7:d8:af:33:3a:8b:
1c:06:dc:1e:01:3d:6f:bc:f0:95:1c:06:da:e0:d1:
13:a9:e4:73:9c:7c:06:59:db:f4:46:c5:2e:42:4c:
c7:43:47:31:b5:f5:e0:1c:b5:17:ab:22:ec:fe:d0:
23:70:64:b4:57:65:21:03:23:49:24:fd:56:f8:45:
cc:6c:cb:e3:93:f7:30:b6:f8:7c:50:2d:56:06:1e:
82:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D9:D3:B2:42:F9:DE:21:79:E7:59:D3:19:45:0B:9B:C9:4B:72:14
X509v3 Authority Key Identifier:
keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6b:7b:a7:80:ed:8a:1c:f6:9d:83:25:9c:ff:5b:4b:81:7f:
93:d9:7e:cb:f9:f0:b2:c7:45:be:b6:9e:13:b5:85:13:03:97:
ce:74:72:c0:f5:f5:80:ba:c8:3f:ec:ff:a1:85:15:17:49:4e:
ef:43:bc:94:c4:c3:fd:ea:ea:51:f3:e3:44:27:47:dc:56:39:
eb:90:59:f0:34:35:0b:a6:a3:1e:9e:43:cb:43:0f:17:63:d6:
10:69:b6:5c:eb:69:0c:8f:01:aa:ce:df:e2:b6:14:69:69:9a:
4d:f8:1d:73:3f:91:6f:d4:66:d6:87:59:8c:4b:ba:ee:cf:d7:
26:d2:38:c1:04:06:ed:b2:42:3f:16:cd:52:76:61:0a:e9:90:
b2:be:cf:2e:7e:91:56:62:68:5c:b6:85:fe:2c:21:af:62:72:
1e:e6:02:3c:66:0d:78:88:1a:4a:5f:57:14:30:16:45:ae:bc:
46:83:64:f1:f8:38:d6:86:0b:22:c1:38:6b:03:b2:d1:ae:89:
37:74:ad:bd:75:59:9f:3c:a9:ba:ae:a7:b0:0d:bb:70:db:8b:
a4:14:4d:c3:45:1e:15:c9:36:d6:ee:ac:ad:58:32:17:04:17:
c0:83:57:d7:89:4b:ad:58:b5:f1:53:1a:ed:27:42:e3:84:94:
9c:0f:84:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:49 2026 by rpki-client