
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft
File: cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json)
Hash identifier: panTyGehBjx+fJ4b5+UXG03NTCW2zBGqliQuIzZ8FNQ=
Subject key identifier: A1:0C:6D:B9:CF:5D:9F:1A:0D:1B:5C:81:BD:A8:D8:54:21:A7:0A:DA
Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65
Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065
Certificate serial: 0272
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft
Manifest number: 026C
Signing time: Tue 23 Jun 2026 02:20:07 +0000
Manifest this update: Tue 23 Jun 2026 02:20:06 +0000
Manifest next update: Tue 30 Jun 2026 02:20:06 +0000
Files and hashes: 1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: yjJjcRtYCh0AF4m07okyO/z/n8NBEN3zz4xzWM5nV9U=)
2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: UUPPLcKEvUEhkpvRtioLB7LEWMQls2sTWKjKgUgudGc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl
rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 02:20:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 626 (0x272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D10D, serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065
Validity
Not Before: Jun 23 02:20:06 2026 GMT
Not After : Jun 30 02:20:06 2026 GMT
Subject: CN=6a39ed56-978e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8f:10:59:71:25:1b:0a:d2:cf:7a:e4:69:1b:
0f:ad:66:32:d9:2d:59:bf:e4:0e:a9:d9:f5:1c:0c:
ce:98:b0:73:ad:45:49:a1:0c:e4:ca:85:cc:2e:b0:
5b:dc:8d:33:43:0d:a9:26:16:da:59:84:0c:0a:e6:
f7:9e:68:12:a9:9f:2e:f6:a7:2c:22:cd:e3:79:53:
4a:4e:6d:2a:92:f7:17:c0:a1:40:4c:e0:58:39:d1:
3a:e8:f6:72:0e:d6:7f:54:72:85:d9:e6:16:4a:31:
dd:4c:65:1d:5b:f6:61:fc:aa:a5:bd:62:89:cf:b4:
e5:75:42:8d:2f:bf:d6:46:89:9f:39:21:15:98:e1:
2b:d9:ca:7c:24:79:b9:ec:b4:0d:ea:64:de:b7:28:
85:8f:e2:df:fb:f5:35:e6:9d:58:72:a9:ee:67:d8:
56:20:f7:ab:37:b5:e8:27:1d:5c:96:0e:e0:0c:85:
f4:ba:85:6d:64:09:72:6e:91:ae:e0:cf:1c:52:50:
1a:cd:d7:bb:e9:f4:88:a8:00:3b:77:bb:05:84:c4:
c6:cf:ae:81:33:e3:ab:6c:a1:75:f0:21:ae:cf:ad:
3c:95:ef:15:69:cb:a3:3b:e9:0c:a8:cf:bd:56:1a:
5a:79:46:29:9a:fd:ee:96:a1:85:a6:05:35:62:53:
81:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0C:6D:B9:CF:5D:9F:1A:0D:1B:5C:81:BD:A8:D8:54:21:A7:0A:DA
X509v3 Authority Key Identifier:
keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:da:c7:39:34:89:5d:a7:84:f7:01:14:4e:97:cb:25:d4:e3:
51:55:9a:9b:ff:26:90:41:de:31:bc:1f:a5:3a:62:8a:08:0e:
f5:38:72:15:f2:a4:6d:9c:98:1a:1b:60:14:33:d5:16:f0:6b:
5e:31:e8:a8:a7:58:1d:94:a1:08:98:e1:a5:87:1b:ba:07:ec:
e1:c8:94:0d:39:19:32:87:de:c9:e6:92:4a:58:01:a4:80:a6:
34:e7:4a:51:27:28:3b:ca:8b:b6:69:44:58:e8:37:bf:27:29:
bd:8a:66:3f:10:44:41:3a:c9:b7:6d:de:83:1d:9c:62:51:62:
41:94:92:60:4f:b4:6e:b9:29:f8:45:46:fe:b9:3f:04:02:21:
4a:80:95:0b:8a:70:ab:99:8f:21:52:11:1a:e6:ad:07:e9:9d:
de:23:1b:10:cf:0b:39:79:48:24:4d:24:14:15:fa:d4:33:4d:
91:22:91:c0:5c:32:28:49:da:e2:8e:76:6e:04:f1:dc:41:ee:
38:d0:59:a3:61:ca:eb:4c:c8:3d:8e:57:1d:fc:59:b8:84:31:
37:1a:46:d0:d9:d6:75:38:9b:d4:7c:2c:cf:15:93:59:d4:84:
cd:f9:df:a5:d6:2a:41:03:7e:41:1a:fa:e0:23:f9:6a:d0:ca:
70:76:f7:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQxMEQxMTAvBgNVBAUTKDcwQzhCREEyREU3ODk1OTUwNTM2NTk0QkFFQkYyNjI5
MEQ5QkEwNjUwHhcNMjYwNjIzMDIyMDA2WhcNMjYwNjMwMDIyMDA2WjAYMRYwFAYD
VQQDEw02YTM5ZWQ1Ni05NzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmI8QWXElGwrSz3rkaRsPrWYy2S1Zv+QOqdn1HAzOmLBzrUVJoQzkyoXMLrBb
3I0zQw2pJhbaWYQMCub3nmgSqZ8u9qcsIs3jeVNKTm0qkvcXwKFATOBYOdE66PZy
DtZ/VHKF2eYWSjHdTGUdW/Zh/KqlvWKJz7TldUKNL7/WRomfOSEVmOEr2cp8JHm5
7LQN6mTetyiFj+Lf+/U15p1YcqnuZ9hWIPerN7XoJx1clg7gDIX0uoVtZAlybpGu
4M8cUlAazde76fSIqAA7d7sFhMTGz66BM+OrbKF18CGuz608le8VacujO+kMqM+9
VhpaeUYpmv3ulqGFpgU1YlOBKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKEMbbnP
XZ8aDRtcgb2o2FQhpwraMB8GA1UdIwQYMBaAFHDIvaLeeJWVBTZZS66/JikNm6Bl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDEwRC85RjcxMjYxNENE
QjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxaVUZObGxMcnI4bUtRMmJv
R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NNaTlvdDU0bFpVRk5sbExycjhtS1EyYm9HVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDEwRC85RjcxMjYxNENEQjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxa
VUZObGxMcnI4bUtRMmJvR1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEtrHOTSJXaeE9wEUTpfLJdTjUVWam/8mkEHeMbwfpTpiiggO9ThyFfKkbZyY
GhtgFDPVFvBrXjHoqKdYHZShCJjhpYcbugfs4ciUDTkZMofeyeaSSlgBpICmNOdK
UScoO8qLtmlEWOg3vycpvYpmPxBEQTrJt23egx2cYlFiQZSSYE+0brkp+EVG/rk/
BAIhSoCVC4pwq5mPIVIRGuatB+md3iMbEM8LOXlIJE0kFBX61DNNkSKRwFwyKEna
4o52bgTx3EHuONBZo2HK60zIPY5XHfxZuIQxNxpG0NnWdTib1HwszxWTWdSEzfnf
pdYqQQN+QRr64CP5atDKcHb3/w==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:12 2026 by rpki-client