
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
File: aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json)
Hash identifier: nQJUrZ8DEQeM9Py0Mop9+2R7r3xW97dvkJ5YpTXXE98=
Subject key identifier: EC:1C:34:21:4E:6D:42:75:CC:6C:F9:9F:69:A6:A5:35:FA:D8:F3:8B
Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D
Certificate issuer: /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
Certificate serial: 356E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
Manifest number: 354B
Signing time: Wed 20 May 2026 15:17:25 +0000
Manifest this update: Wed 20 May 2026 15:17:24 +0000
Manifest next update: Wed 27 May 2026 15:17:24 +0000
Files and hashes: 1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: QdSM2Ep7vVYjsnDuHV66wAlPcXW89582aNi8J608Hxs=)
2: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: r04m0dygY46FaQTW/nPIfiQRgJAEQgwcrVUDGTqnrns=)
3: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: qSmohF2Ew/7iNqjlaac7NjVFQvypLZR1CdqVmQUsvSo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl
rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 15:17:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13678 (0x356e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C1FE, serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
Validity
Not Before: May 20 15:17:24 2026 GMT
Not After : May 27 15:17:24 2026 GMT
Subject: CN=6a0dd085-904d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c6:a1:79:88:a4:6f:0f:01:bb:4e:d3:50:b6:
9a:70:95:4c:ff:5d:52:18:02:57:10:52:92:18:8b:
4d:a7:bd:c6:36:79:b1:fb:20:e9:e8:da:86:0d:dd:
c5:5f:fd:ae:66:eb:75:4e:37:de:6a:5e:ee:82:0a:
ee:d9:50:68:00:37:a1:b3:57:00:67:ae:16:f4:b8:
a1:14:67:b9:bd:39:c2:a4:e5:65:70:52:c0:c7:a6:
a4:4d:0e:e7:3f:99:fa:09:ab:5b:50:1d:2d:e9:4a:
e5:47:4e:07:a6:a1:57:07:30:fb:98:80:95:85:e0:
df:09:61:38:48:e3:68:dd:c0:e4:be:a0:40:78:54:
c6:36:7b:57:f6:7f:dd:13:07:4b:c7:0b:4f:19:79:
9f:48:8b:b4:28:f0:9c:77:18:af:f0:27:71:32:b5:
37:95:11:0a:47:f3:70:1a:0f:6c:b4:80:9c:dc:97:
92:c1:f5:8b:41:f3:b0:1c:94:c2:f2:d4:9e:0d:a7:
d0:25:c1:6e:d1:78:52:d6:6c:65:97:ce:44:cb:76:
22:9f:55:47:ba:d5:7c:b1:14:2a:68:9b:43:d2:46:
82:43:ea:d4:9b:35:7b:60:8c:3e:4f:b5:9c:a5:ef:
9c:69:10:c2:ba:8f:33:b8:fd:07:91:55:ed:2f:be:
a4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1C:34:21:4E:6D:42:75:CC:6C:F9:9F:69:A6:A5:35:FA:D8:F3:8B
X509v3 Authority Key Identifier:
keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:5e:6b:4c:b6:ab:7d:42:07:a4:fe:bb:72:f2:92:cd:ae:ac:
ed:f6:9f:12:1a:ac:d3:71:9d:5a:f2:13:82:65:16:cf:32:96:
32:8e:0b:07:64:e7:85:3e:d7:b5:ef:2c:c2:a7:b9:4a:80:b9:
b4:59:12:53:c3:fa:53:25:88:9d:32:10:5f:e2:86:9b:7d:85:
48:0a:fa:58:04:7d:8d:2e:45:16:9c:5d:73:5c:0d:46:ad:e1:
13:14:8b:9b:73:be:40:a5:b3:f2:53:06:83:99:0b:86:60:09:
20:5d:a9:17:ea:b1:76:ca:a8:2c:6c:a8:95:41:b6:b9:64:bf:
1e:bb:92:61:4d:e6:d3:bc:98:62:ed:42:3e:14:5a:c2:ed:0b:
3c:17:b5:8b:6f:d9:28:eb:22:cc:94:f2:cc:1f:62:2e:b9:60:
6d:b4:90:d3:49:94:fc:b9:da:58:22:9a:ec:56:6d:d4:91:ce:
b6:fc:af:dc:90:57:14:3d:ac:38:84:cf:7e:a7:5a:3c:00:21:
01:59:4c:79:46:22:a2:94:c2:74:6d:5a:6f:f8:6c:88:8c:06:
a6:53:fc:bf:e0:ae:a1:df:5c:43:4f:69:34:c0:70:b5:08:5b:
9b:75:7c:39:ac:6e:02:4c:2e:19:d7:11:e4:cb:e9:8f:b0:c5:
c1:2a:15:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUMxRkUxMTAvBgNVBAUTKDY5OUEwRjhEMTVBMzRGNTk5NTZDQjQ4MDBDNkM0NDA0
REMwRUJENUQwHhcNMjYwNTIwMTUxNzI0WhcNMjYwNTI3MTUxNzI0WjAYMRYwFAYD
VQQDEw02YTBkZDA4NS05MDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjsaheYikbw8Bu07TULaacJVM/11SGAJXEFKSGItNp73GNnmx+yDp6NqGDd3F
X/2uZut1Tjfeal7uggru2VBoADehs1cAZ64W9LihFGe5vTnCpOVlcFLAx6akTQ7n
P5n6CatbUB0t6UrlR04HpqFXBzD7mICVheDfCWE4SONo3cDkvqBAeFTGNntX9n/d
EwdLxwtPGXmfSIu0KPCcdxiv8CdxMrU3lREKR/NwGg9stICc3JeSwfWLQfOwHJTC
8tSeDafQJcFu0XhS1mxll85Ey3Yin1VHutV8sRQqaJtD0kaCQ+rUmzV7YIw+T7Wc
pe+caRDCuo8zuP0HkVXtL76k9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOwcNCFO
bUJ1zGz5n2mmpTX62POLMB8GA1UdIwQYMBaAFGmaD40Vo09ZlWy0gAxsRATcDr1d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzFGRS9EMTE4QUFCQTFE
QUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQxbVZiTFNBREd4RUJOd092
VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Fab1BqUldqVDFtVmJMU0FER3hFQk53T3ZWMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QzFGRS9EMTE4QUFCQTFEQUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQx
bVZiTFNBREd4RUJOd092VjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFF5rTLarfUIHpP67cvKSza6s7fafEhqs03GdWvITgmUWzzKWMo4LB2TnhT7X
te8swqe5SoC5tFkSU8P6UyWInTIQX+KGm32FSAr6WAR9jS5FFpxdc1wNRq3hExSL
m3O+QKWz8lMGg5kLhmAJIF2pF+qxdsqoLGyolUG2uWS/HruSYU3m07yYYu1CPhRa
wu0LPBe1i2/ZKOsizJTyzB9iLrlgbbSQ00mU/LnaWCKa7FZt1JHOtvyv3JBXFD2s
OITPfqdaPAAhAVlMeUYiopTCdG1ab/hsiIwGplP8v+Cuod9cQ09pNMBwtQhbm3V8
OaxuAkwuGdcR5Mvpj7DFwSoV7Q==
-----END CERTIFICATE-----
Generated at Thu May 21 10:15:33 2026 by rpki-client