
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
File: 0X13ywyJuZTN2suidScKHnTcqic.mft (raw, json)
Hash identifier: icqf1KRET+K9hjLCgHL1xJsX9HPMq5M9I9RrXq/rAlA=
Subject key identifier: A5:76:DA:B7:73:A5:F6:8A:EA:3A:EF:8E:B1:7F:34:15:A4:4D:E0:64
Authority key identifier: D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27
Certificate issuer: /CN=A915D99A/serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
Certificate serial: 359D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
Manifest number: 3566
Signing time: Wed 20 May 2026 14:25:22 +0000
Manifest this update: Wed 20 May 2026 14:25:22 +0000
Manifest next update: Wed 27 May 2026 14:25:22 +0000
Files and hashes: 1: 0X13ywyJuZTN2suidScKHnTcqic.crl (hash: vMBc7wj7PBvKxgglAILTblgZ6W53jDq5kUBXSer0Vvg=)
2: 11D961427C0311EBB2F8C86CC4F9AE02.roa (hash: bVSImGbzCmPdx5Fe/89OTQxr25ztle7G04JYBbFG6dg=)
3: 76B90530747811EDA48E0D52C4F9AE02.roa (hash: prjzJ/kw7tRxzDOItt9cUFw+O9ghSpnIB3ybGSXw9cg=)
4: 75AB676E747811EDA48E0D52C4F9AE02.roa (hash: 0ZX7onnHeath/X0shPjw6NE2rJxaKKkRVT87NS18/xg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl
rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 14:25:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13725 (0x359d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D99A, serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
Validity
Not Before: May 20 14:25:22 2026 GMT
Not After : May 27 14:25:22 2026 GMT
Subject: CN=6a0dc452-d83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:06:07:2c:41:5f:3b:27:f6:da:ce:e4:fe:db:
46:95:ea:b7:8b:e5:75:42:39:13:4e:ef:b6:f1:03:
a1:c8:58:db:8e:50:b5:18:b7:a2:8d:65:02:0e:fe:
fc:56:57:d0:a9:1d:3e:84:b4:83:1a:23:ba:c4:5e:
a0:80:79:c9:44:a3:96:9e:79:e6:01:aa:85:d3:2a:
c9:59:56:53:ac:8b:b4:93:89:b8:4b:25:05:55:9c:
e0:8f:1e:11:d5:d1:46:e5:7b:ca:49:99:59:7d:5a:
9b:10:87:fc:5b:3f:c9:2e:c2:0b:e6:6e:e2:a8:3c:
90:4a:d9:24:0a:05:d5:2a:4a:5a:6a:be:18:25:7b:
6d:a9:3e:9b:9b:0c:f9:f0:04:e4:d2:84:9e:76:3e:
2f:a8:31:3e:4f:7e:4c:39:ec:95:e2:63:63:75:ea:
04:1e:88:42:74:c7:45:0c:7a:86:83:e4:cd:01:53:
06:60:29:5c:4a:40:cc:4f:23:0a:cc:da:71:ab:ba:
cd:eb:54:3b:8f:c2:61:0f:32:d6:8a:ae:83:5a:5a:
97:5e:cc:17:38:14:51:43:95:98:b6:4d:37:51:66:
2e:41:f7:91:42:a7:d4:23:92:a8:b1:3c:37:e2:15:
9f:4d:17:40:92:4a:33:e0:2b:9f:0f:12:53:46:28:
51:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:76:DA:B7:73:A5:F6:8A:EA:3A:EF:8E:B1:7F:34:15:A4:4D:E0:64
X509v3 Authority Key Identifier:
keyid:D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:01:25:27:8b:d5:58:c8:91:5c:04:6d:2a:60:cf:98:34:98:
eb:e5:0e:9d:2a:7d:f7:04:c4:23:07:75:44:12:05:57:83:d8:
b7:76:95:d3:af:69:08:bb:0c:08:7c:75:40:ed:09:19:99:96:
d9:94:10:72:b4:43:a5:32:2f:32:9b:ec:12:f2:85:23:29:6f:
e2:dc:55:7f:5d:e5:86:cf:20:a0:aa:a6:2a:98:25:a4:b9:bc:
b5:3b:58:86:43:44:6b:b5:29:48:37:8b:9c:c6:46:e9:0c:3c:
c7:df:42:07:60:ef:67:9e:9e:3c:75:88:fa:f5:5f:10:62:88:
34:00:a7:4d:b2:3d:14:0f:3e:0c:33:df:69:d3:40:93:09:3c:
8c:ea:b9:f3:0f:6a:68:b5:c6:3e:99:c4:7b:32:c5:0a:9a:05:
76:c4:51:ef:21:b8:0a:c4:e1:58:16:ea:b1:fe:9e:d2:d0:7e:
a6:dc:f5:73:24:10:53:69:31:5e:38:13:6c:51:df:58:62:24:
0b:a2:8d:01:bd:a0:3e:d5:93:4c:a4:60:c1:0d:a4:2d:b2:38:
d9:64:6f:95:db:b8:be:9f:4c:79:3b:40:e5:94:0d:71:76:b8:
dc:6e:2a:9a:68:51:77:d5:4d:92:58:57:df:96:ad:aa:3a:27:
58:5b:f9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:06 2026 by rpki-client