
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft
File: RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft (raw, json)
Hash identifier: gdeBn9o3ZiQpNIeTnw0Cf7a2hzz3Qk1Y9doPrc55LfM=
Subject key identifier: 13:2E:37:3A:D7:01:C3:9E:D7:94:E2:A8:40:48:9D:2F:81:CA:A7:DC
Authority key identifier: 46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73
Certificate issuer: /CN=A915B2EC/serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573
Certificate serial: 05B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft
Manifest number: 0595
Signing time: Sat 04 Apr 2026 23:09:16 +0000
Manifest this update: Sat 04 Apr 2026 23:09:16 +0000
Manifest next update: Sat 11 Apr 2026 23:09:16 +0000
Files and hashes: 1: RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl (hash: PgB3MyYZ8RzpwY8Bk3TMDaYvBbYg3Jp8LOald/p/T4s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl
rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:09:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1464 (0x5b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B2EC, serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573
Validity
Not Before: Apr 4 23:09:16 2026 GMT
Not After : Apr 11 23:09:16 2026 GMT
Subject: CN=69d19a1c-c32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ba:52:6e:5d:21:c3:2f:a4:6d:ac:f6:6e:c2:
e4:3f:6e:7d:07:c3:80:67:a0:25:dc:6e:31:18:05:
79:1a:38:b9:3b:95:bb:fc:b0:a3:37:ce:bd:43:dd:
02:15:ab:02:cc:24:be:d2:86:c7:30:2c:6a:2b:1b:
d0:88:50:80:6b:1d:0e:a1:be:af:4f:96:67:ba:04:
09:96:6b:2d:35:b0:0f:d2:f1:a2:bb:cc:53:90:05:
0e:6b:a7:93:0c:be:8b:6d:dd:7a:d3:b1:0f:75:c1:
23:c8:c7:8e:be:e0:8c:97:2a:b8:8b:9e:51:5d:76:
94:3d:ba:60:8b:9a:cf:bc:02:ca:1d:3f:c9:8d:1b:
c7:ed:9b:74:83:40:dc:09:9a:bd:e2:0c:55:de:13:
6f:cd:67:2b:38:4e:de:fa:2f:06:00:59:e7:c4:67:
15:40:da:9a:9d:b4:b0:54:18:a5:21:7d:c2:89:ba:
99:e5:4d:d9:46:d2:3f:92:f4:07:39:7b:93:73:50:
39:5c:63:60:7a:6b:40:2f:72:c6:0b:be:52:77:db:
ba:e9:13:fc:e4:c5:fe:0f:33:d2:d0:cf:f0:06:16:
ce:27:14:67:8d:81:aa:ad:40:b7:7a:e2:f9:9a:dc:
7e:0c:9b:00:c6:28:ff:bc:44:44:48:08:88:c4:4e:
04:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2E:37:3A:D7:01:C3:9E:D7:94:E2:A8:40:48:9D:2F:81:CA:A7:DC
X509v3 Authority Key Identifier:
keyid:46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:dc:2d:26:11:9d:23:07:d2:cd:58:4a:e1:af:55:cd:fc:90:
0f:71:2f:57:39:c5:0b:e1:ea:e5:47:eb:2b:65:08:93:16:17:
00:8f:12:95:5f:3c:07:b7:ca:aa:3c:ab:54:4c:de:0b:d0:28:
05:26:0a:bd:94:3e:40:51:fe:9c:7b:e7:68:42:d9:e5:5a:f5:
a3:32:42:d9:00:b5:00:b2:45:cb:54:ef:ed:ae:79:7f:45:c7:
4e:93:96:37:9f:20:4a:44:bd:e7:25:49:45:63:49:eb:33:60:
23:55:8a:4b:88:e9:3f:fb:14:96:c5:a8:6b:3b:36:02:54:93:
82:e3:2a:7e:fd:ff:07:fb:0e:2d:2f:fd:87:52:df:0e:64:39:
24:a5:6d:04:ba:b1:b2:9c:06:35:ed:1c:95:dc:30:30:34:29:
77:18:41:42:04:69:55:4a:c6:a0:5a:ce:33:2b:5d:53:87:14:
96:0f:3e:0a:9e:65:a0:a1:fd:be:5b:0e:0d:e6:89:de:c2:14:
94:de:9a:a0:9a:99:ce:90:80:03:c9:65:24:bd:ea:da:6f:2d:
25:4b:b4:e5:55:d8:97:e6:f3:f3:0f:e8:d4:d3:54:d4:01:4c:
51:57:87:11:b6:f1:af:02:40:fd:5c:ec:62:14:30:85:b4:1d:
6d:7d:e8:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUIyRUMxMTAvBgNVBAUTKDQ2OTIyQzU2NTQ0MDA0MEJEOTlBRkQ0RTMyOUVEOURF
QjZGOTI1NzMwHhcNMjYwNDA0MjMwOTE2WhcNMjYwNDExMjMwOTE2WjAYMRYwFAYD
VQQDEw02OWQxOWExYy1jMzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlLpSbl0hwy+kbaz2bsLkP259B8OAZ6Al3G4xGAV5Gji5O5W7/LCjN869Q90C
FasCzCS+0obHMCxqKxvQiFCAax0Oob6vT5ZnugQJlmstNbAP0vGiu8xTkAUOa6eT
DL6Lbd1607EPdcEjyMeOvuCMlyq4i55RXXaUPbpgi5rPvALKHT/JjRvH7Zt0g0Dc
CZq94gxV3hNvzWcrOE7e+i8GAFnnxGcVQNqanbSwVBilIX3CibqZ5U3ZRtI/kvQH
OXuTc1A5XGNgemtAL3LGC75Sd9u66RP85MX+DzPS0M/wBhbOJxRnjYGqrUC3euL5
mtx+DJsAxij/vERESAiIxE4EKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBMuNzrX
AcOe15TiqEBInS+ByqfcMB8GA1UdIwQYMBaAFEaSLFZUQAQL2Zr9TjKe2d62+SVz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjJFQy84NDI3NTk1NjJC
MDkxMUVDODUxQjk4MEVDNEY5QUUwMi9ScElzVmxSQUJBdlptdjFPTXA3WjNyYjVK
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JwSXNWbFJBQkF2Wm12MU9NcDdaM3JiNUpYTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjJFQy84NDI3NTk1NjJCMDkxMUVDODUxQjk4MEVDNEY5QUUwMi9ScElzVmxSQUJB
dlptdjFPTXA3WjNyYjVKWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABdwtJhGdIwfSzVhK4a9VzfyQD3EvVznFC+Hq5UfrK2UIkxYXAI8SlV88B7fK
qjyrVEzeC9AoBSYKvZQ+QFH+nHvnaELZ5Vr1ozJC2QC1ALJFy1Tv7a55f0XHTpOW
N58gSkS95yVJRWNJ6zNgI1WKS4jpP/sUlsWoazs2AlSTguMqfv3/B/sOLS/9h1Lf
DmQ5JKVtBLqxspwGNe0cldwwMDQpdxhBQgRpVUrGoFrOMytdU4cUlg8+Cp5loKH9
vlsODeaJ3sIUlN6aoJqZzpCAA8llJL3q2m8tJUu05VXYl+bz8w/o1NNU1AFMUVeH
EbbxrwJA/VzsYhQwhbQdbX3o3Q==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:00:41 2026 by rpki-client