
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
File: PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft (raw, json)
Hash identifier: eI7kPONJoGMyF6Z4O4U48TgzLwK+CE5k0Hs4FomJcts=
Subject key identifier: 0C:66:4E:33:A3:0E:2E:CC:14:D7:3E:8A:31:A6:99:EB:A8:36:EA:60
Authority key identifier: 3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83
Certificate issuer: /CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983
Certificate serial: 0EF8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
Manifest number: 0EED
Signing time: Wed 20 May 2026 17:38:49 +0000
Manifest this update: Wed 20 May 2026 17:38:49 +0000
Manifest next update: Wed 27 May 2026 17:38:49 +0000
Files and hashes: 1: PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl (hash: M0q812eYKu0APxFC25BukQsOz1QkM68jYIfbYw0yJJQ=)
2: 0853C13CA2F011E9B721795CC4F9AE02.roa (hash: YtMmvD8+t+Y0DWKnnIer/ep8HqJT/MOFDON0KvPSWok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl
rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3832 (0xef8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B880, serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983
Validity
Not Before: May 20 17:38:49 2026 GMT
Not After : May 27 17:38:49 2026 GMT
Subject: CN=6a0df1a9-740c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e9:05:54:20:12:04:47:48:ad:ad:77:4d:73:
ff:48:78:7a:c3:cb:28:d7:85:98:d7:42:17:ef:09:
11:3e:ac:07:23:6f:f1:5f:d4:06:38:e8:51:14:b7:
bc:48:1a:56:af:13:c0:85:fc:bd:22:e5:3e:ca:78:
c9:39:cf:19:12:db:ab:6a:5a:28:5d:a4:b1:23:d1:
f2:40:57:f8:7e:4f:4d:31:78:c5:d7:f4:e2:fe:66:
d2:72:ad:1b:ae:e9:b1:91:74:87:51:59:3a:65:95:
ae:e2:ca:21:e1:8d:a0:c0:09:0a:31:f8:c5:13:94:
a8:34:ec:43:a1:84:76:f3:6c:c9:b4:96:b5:3c:36:
d6:99:28:19:1a:b5:ce:cc:dc:77:a7:c8:30:df:8e:
4f:bb:77:99:71:9f:17:d5:d6:78:2a:b1:db:1e:f8:
06:7c:c8:ed:a0:fa:92:5a:cd:9d:d3:50:15:dd:8c:
a2:cd:d2:1e:28:3f:59:62:16:a8:4f:e7:41:36:27:
c3:e2:d6:23:cc:31:de:88:5e:bf:d2:db:d4:07:a9:
e2:3f:c5:2e:6f:44:a4:c4:b2:b5:28:37:bc:26:05:
bd:26:5b:ea:28:42:c6:3b:fe:9b:2b:3b:bc:ef:58:
ee:c7:fe:75:5b:08:5b:78:68:75:be:98:c3:dd:0a:
04:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:66:4E:33:A3:0E:2E:CC:14:D7:3E:8A:31:A6:99:EB:A8:36:EA:60
X509v3 Authority Key Identifier:
keyid:3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:e9:50:f1:ad:1b:d7:93:22:02:da:96:4b:fd:14:e0:84:f1:
4e:87:06:1d:16:39:87:57:87:a6:b8:56:25:e4:2a:c3:41:e0:
7d:eb:de:b8:23:96:23:ae:dc:fb:86:ee:6f:30:cb:97:f9:c4:
88:a7:f0:43:a8:66:f4:b4:e8:73:a7:14:dd:9b:3e:9e:20:24:
5c:73:87:22:e1:80:71:7b:f7:cf:58:a5:5c:ce:7b:6b:fa:b9:
06:72:96:a0:90:2c:76:ea:de:73:2a:f8:1c:7c:80:8b:d1:6e:
91:80:d3:e8:2a:00:e4:af:0c:4c:eb:b7:74:bc:00:fc:d4:50:
f5:e2:24:43:47:0f:8b:73:d2:b6:9c:55:c6:eb:f6:5a:1c:12:
21:97:e0:39:3a:ed:04:60:83:94:d3:7f:0f:6e:4f:3a:ea:b5:
b2:5c:7f:1f:73:c0:ff:18:e5:35:d9:32:cc:ad:73:f0:48:ca:
b7:14:11:1f:b3:63:c4:42:31:c4:d7:fd:1d:cb:1d:d1:ab:0d:
87:11:a6:4e:ff:ad:58:5d:20:9c:ee:fa:5c:1a:e6:12:80:a6:
ca:ae:b9:92:eb:d0:b3:ea:3f:d6:d3:a7:50:d5:3f:66:84:df:
7a:9e:6c:97:d9:ec:33:81:26:81:e8:eb:c0:dd:48:2c:ef:6f:
50:be:5a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:14 2026 by rpki-client