
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
File: PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft (raw, json)
Hash identifier: 4/Avb0hCCnGo/a1Kz5sB1kcP3d1nVSHyK2XSJCZb3lY=
Subject key identifier: F2:2D:00:25:57:F3:D3:32:5A:AA:78:28:5A:22:1B:A8:CB:89:0B:0B
Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19
Certificate issuer: /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519
Certificate serial: 0538
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
Manifest number: 0531
Signing time: Fri 08 May 2026 23:31:59 +0000
Manifest this update: Fri 08 May 2026 23:31:59 +0000
Manifest next update: Fri 15 May 2026 23:31:59 +0000
Files and hashes: 1: PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl (hash: UfFi1wJe+KPgJbDafMIacX88qaDHn5P6skZT7v9PSG4=)
2: 47A72A7441ED11EC9B02377AC4F9AE02.roa (hash: T0ns+7x4iK0WmW0k/dhc+1Ohg2P5NWnpBDqsr9+P9R0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl
rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 15 May 2026 23:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1336 (0x538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A39E, serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519
Validity
Not Before: May 8 23:31:59 2026 GMT
Not After : May 15 23:31:59 2026 GMT
Subject: CN=69fe726f-f1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:15:37:cd:d9:da:1c:15:4e:e4:87:80:31:
d2:83:10:86:98:a1:84:b4:c6:f2:d6:88:22:a4:e9:
f6:b0:70:41:57:bb:50:b3:d7:7c:c6:0c:c0:6b:fb:
ad:81:96:97:63:d4:94:7d:b0:b6:f5:69:8c:c5:e8:
ed:e6:1a:51:c0:3e:eb:e5:64:90:9a:14:88:3f:59:
d3:ea:ba:19:b0:24:c3:60:da:ee:24:2d:28:6b:46:
24:9b:af:56:75:e3:7b:56:e3:3e:55:62:5a:a1:be:
29:15:cd:ad:4f:24:db:35:0d:de:5f:6c:a8:f6:fa:
eb:2d:cf:5a:d6:bd:2b:3a:c2:b3:41:48:56:b7:67:
cb:2f:cb:76:08:d4:61:6c:79:c5:a5:df:c6:30:48:
5a:0b:8c:7b:8f:55:f8:66:97:a9:b9:fc:89:7f:9c:
2d:8b:4d:10:28:96:37:a9:1a:3c:7a:e0:9a:cf:8f:
51:ac:e0:c1:8a:8a:80:dc:c6:7b:dc:fe:6e:e5:c4:
51:39:93:9f:47:1a:a4:f9:67:8e:aa:f1:95:4b:d8:
ab:b7:a5:0a:9c:ff:ef:de:c1:3b:cd:ea:e4:6b:04:
fd:3b:be:56:ea:d3:ef:9e:bd:7b:d0:01:b3:07:2c:
bf:6b:cc:15:1b:18:b1:08:d3:f4:89:32:0f:63:83:
da:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2D:00:25:57:F3:D3:32:5A:AA:78:28:5A:22:1B:A8:CB:89:0B:0B
X509v3 Authority Key Identifier:
keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:58:0b:a4:4d:8f:e2:6f:45:79:ba:d8:02:d2:aa:ad:7f:38:
82:9e:9f:8f:16:e6:5c:90:94:2b:e2:c8:39:87:3d:2b:11:2c:
bb:95:bc:49:a6:9b:c2:26:de:dc:16:eb:b1:8e:da:c2:ed:ef:
37:ae:fd:14:02:10:50:6c:6c:d0:97:ab:b1:04:5a:94:e4:b4:
68:a7:ed:70:42:2d:d5:74:6b:f8:10:2f:d0:87:15:15:ea:59:
e1:b5:09:6e:5b:48:bf:5b:fd:c3:7b:1c:56:3c:99:ee:c2:dd:
b2:e8:5e:38:3a:f6:ae:07:6e:51:10:f4:77:35:9a:b0:27:bd:
fd:de:f4:94:02:28:0f:76:27:ec:e7:c4:22:41:a8:78:6f:5b:
ee:a9:19:b5:99:84:bb:29:cf:27:6d:21:8b:13:d5:78:ad:08:
c5:3b:86:bd:12:58:95:80:4a:94:80:47:02:c3:fe:96:5e:2f:
a8:1e:ed:79:86:b4:c3:1e:a3:fb:3c:29:e5:f3:c0:c0:39:2d:
f1:50:8e:f6:f2:47:34:c6:16:a5:37:9f:74:f4:68:b8:5a:91:
f1:78:38:e0:3f:0e:57:a1:db:e6:36:6b:f2:d5:04:f4:8b:ce:
13:c1:81:b6:8f:f2:de:2f:1c:f6:de:bb:24:b1:94:c3:e8:c8:
2c:68:ae:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 13:24:41 2026 by rpki-client