
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
File: s47RYTLcuXiWdncaiwnkUJue1Pk.mft (raw, json)
Hash identifier: i2JNohqZIFFgR9RxTIxn6DU0fvxe2nqvWTaQCN+r+2o=
Subject key identifier: 77:D1:DB:BF:D7:03:87:35:C4:47:49:1F:BA:91:EE:FB:80:62:8C:E2
Authority key identifier: B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9
Certificate issuer: /CN=A915E1F9/serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9
Certificate serial: D9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
Manifest number: D3
Signing time: Tue 13 Oct 2026 07:24:30 +0000
Manifest this update: Tue 13 Oct 2026 07:24:30 +0000
Manifest next update: Tue 20 Oct 2026 07:24:30 +0000
Files and hashes: 1: s47RYTLcuXiWdncaiwnkUJue1Pk.crl (hash: 1l5OM8KrflMGwm5CssI1/wAhZ4QfxQpI0PUNyqc0WiE=)
2: BEB06ADA944211F08A761970C4F9AE02.roa (hash: kk5sjyLutQjUsbYJim6fXXwfLma+mT+CCDWR+53e7jc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.crl
rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 07:24:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E1F9, serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9
Validity
Not Before: Oct 13 07:24:30 2026 GMT
Not After : Oct 20 07:24:30 2026 GMT
Subject: CN=6acddcae-73f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:d3:40:69:d1:45:53:13:15:a7:6f:50:bc:
f8:4f:25:db:3e:5c:60:6f:fb:48:00:a1:27:2e:7a:
5d:63:75:57:a4:10:af:de:35:98:61:2e:3f:40:44:
20:41:b8:3d:81:22:01:89:b1:3b:21:36:88:ac:a0:
94:15:b2:07:6c:bd:38:fe:06:e8:f5:d1:8b:7c:01:
92:c7:5b:98:9c:37:ae:76:aa:73:62:4f:3e:39:cb:
16:f0:3e:0f:3b:9c:13:be:d0:09:31:1c:f0:29:a7:
d0:dd:ea:1d:71:af:08:96:c5:83:53:35:a8:29:38:
0c:06:22:bb:c9:b2:12:38:09:e1:6c:ae:76:e6:9e:
57:8a:45:ff:5e:ba:6e:2c:2c:24:f2:e1:0e:b7:aa:
33:3b:20:c8:c8:47:a0:f1:a5:62:40:0e:35:03:cf:
53:6c:04:e5:97:e6:75:f1:94:3e:46:55:83:d6:18:
10:d6:d5:cc:d6:e1:9c:dd:fb:08:58:f0:56:84:a0:
f0:38:78:84:f8:4c:b2:e0:c4:28:23:cb:66:04:96:
44:13:52:b4:8c:ef:f0:8d:37:c9:d3:65:e3:dc:cf:
0c:a8:27:f1:ab:0a:87:b7:87:c2:cc:c1:0b:80:c3:
c1:23:0d:3b:77:9b:ad:8e:73:84:d7:64:3e:cd:46:
15:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D1:DB:BF:D7:03:87:35:C4:47:49:1F:BA:91:EE:FB:80:62:8C:E2
X509v3 Authority Key Identifier:
keyid:B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:14:cf:92:84:d4:67:ef:34:0d:ac:84:da:2b:59:9d:a6:9f:
7c:89:ef:a0:35:9d:89:5e:7f:7a:4f:d6:ac:8a:81:14:e2:59:
04:5e:9b:5b:33:9e:82:9a:3d:b3:1e:ec:5c:41:f8:ae:3c:87:
a7:0f:6c:e9:ea:38:c0:cc:6c:db:92:23:8a:1f:27:a3:5b:a8:
1e:4b:4c:84:69:ca:f6:d0:cb:6a:16:c0:d5:8e:ce:a3:a3:44:
0a:34:ee:31:d1:e9:2f:a2:c0:f4:01:dd:8c:b8:f4:e9:6f:7a:
9e:57:da:45:93:cb:d8:d3:cb:a5:05:67:34:0d:d5:f4:12:87:
fa:c7:d7:5b:d8:67:56:b6:8e:e7:d1:2a:1e:38:b2:5c:14:f3:
0d:4b:ab:bd:54:76:8f:6a:49:40:1b:33:d7:82:7c:81:cc:80:
f1:48:10:35:f6:bc:ca:aa:24:f8:13:33:5a:35:61:b7:da:e8:
b0:e7:ee:d2:17:12:e4:a4:61:8a:48:da:fc:17:ef:46:73:ff:
dc:8f:8e:20:17:c2:9c:e7:f0:ee:64:dc:e4:b2:41:16:4e:2a:
6b:61:61:d4:c4:a7:2c:dc:b4:51:79:89:8a:af:e7:63:d9:11:
26:15:f5:97:2d:31:11:3b:ee:fb:48:2f:8c:42:f1:c1:75:fe:
37:2e:f5:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUUxRjkxMTAvBgNVBAUTKEIzOEVEMTYxMzJEQ0I5Nzg5Njc2NzcxQThCMDlFNDUw
OUI5RUQ0RjkwHhcNMjYxMDEzMDcyNDMwWhcNMjYxMDIwMDcyNDMwWjAYMRYwFAYD
VQQDEw02YWNkZGNhZS03M2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArgHTQGnRRVMTFadvULz4TyXbPlxgb/tIAKEnLnpdY3VXpBCv3jWYYS4/QEQg
Qbg9gSIBibE7ITaIrKCUFbIHbL04/gbo9dGLfAGSx1uYnDeudqpzYk8+OcsW8D4P
O5wTvtAJMRzwKafQ3eodca8IlsWDUzWoKTgMBiK7ybISOAnhbK525p5XikX/Xrpu
LCwk8uEOt6ozOyDIyEeg8aViQA41A89TbATll+Z18ZQ+RlWD1hgQ1tXM1uGc3fsI
WPBWhKDwOHiE+Eyy4MQoI8tmBJZEE1K0jO/wjTfJ02Xj3M8MqCfxqwqHt4fCzMEL
gMPBIw07d5utjnOE12Q+zUYV+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHfR27/X
A4c1xEdJH7qR7vuAYoziMB8GA1UdIwQYMBaAFLOO0WEy3Ll4lnZ3GosJ5FCbntT5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTFGOS9BNkJBNkM4RThE
RTIxMUYwQTMwOEFDN0NDNEY5QUUwMi9zNDdSWVRMY3VYaVdkbmNhaXdua1VKdWUx
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3M0N1JZVExjdVhpV2RuY2Fpd25rVUp1ZTFQay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RTFGOS9BNkJBNkM4RThERTIxMUYwQTMwOEFDN0NDNEY5QUUwMi9zNDdSWVRMY3VY
aVdkbmNhaXdua1VKdWUxUGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFBTPkoTUZ+80DayE2itZnaaffInvoDWdiV5/ek/WrIqBFOJZBF6bWzOegpo9
sx7sXEH4rjyHpw9s6eo4wMxs25Ijih8no1uoHktMhGnK9tDLahbA1Y7Oo6NECjTu
MdHpL6LA9AHdjLj06W96nlfaRZPL2NPLpQVnNA3V9BKH+sfXW9hnVraO59EqHjiy
XBTzDUurvVR2j2pJQBsz14J8gcyA8UgQNfa8yqok+BMzWjVht9rosOfu0hcS5KRh
ikja/BfvRnP/3I+OIBfCnOfw7mTc5LJBFk4qa2Fh1MSnLNy0UXmJiq/nY9kRJhX1
ly0xETvu+0gvjELxwXX+Ny71PA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 16:02:38 2026 by rpki-client