
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
File: dF_08GOrXRceBSUbMeKUpLx5c7E.mft (raw, json)
Hash identifier: H3ldkXdIopykeU7/INHbf5xp9xCy/nS+iZ/yylm3whk=
Subject key identifier: 89:6D:51:9B:2C:0D:99:C6:C4:73:47:67:51:A2:D8:4E:8B:4A:27:8E
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial: 0B2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
Manifest number: 0A1F
Signing time: Thu 21 May 2026 01:25:03 +0000
Manifest this update: Thu 21 May 2026 01:25:03 +0000
Manifest next update: Thu 28 May 2026 01:25:03 +0000
Files and hashes: 1: dF_08GOrXRceBSUbMeKUpLx5c7E.crl (hash: KTKOhJ4J7u2r7yd1minc5sMt/Ze7hqUVmabdSEqjFEg=)
2: B80A9FF60B4111EF919B0B7DC4F9AE02.roa (hash: gsB9c0U2DntNM1+v6I/9WXimUYgEdXTJXViqGyC2AQ0=)
3: 315D1630DDD911EFBAA4D977C4F9AE02.roa (hash: IDTH0cAlA2j29Quymic14S26EVLhL7W0jgxsTtfpz7w=)
4: 61C70D36088411F1B1AFA7640E3D8C67.roa (hash: LsTu2EE8tXGrMV0x3dwipCE/045hl/Ddh4nbspN9zxk=)
5: 4020FFBCF80111ECAC7ADB0CC4F9AE02.roa (hash: OrZ9Ea1QZaI1VDtqb0gOsdHCM2dKMi5dNl6ij8Rdp0E=)
6: E94D73BE291D11EF86792873C4F9AE02.roa (hash: 9cwwImpG0kuALXJSvuXgLEJYlcBpiuJBifGtYofo6Aw=)
7: 4E6E940C612211EB8166284BC4F9AE02.roa (hash: QW6uZWXeGB+Eizq4SwIGwFff/Y27AeGTfhmNqMCDG9M=)
8: 7C9D0D66546811EBBF7C8469C4F9AE02.roa (hash: WmHfkDZFO7wJF5fVRRjhSZ2MtLW2NAgEZ/oXceI0GSk=)
9: E0039822DDDD11EF84C13A22C4F9AE02.roa (hash: lWUMp9J9+EEIyFVfamv9b+gDZejel22GgkvYFOZ8pJs=)
10: 20AF7940433811EFA525DA49C4F9AE02.roa (hash: 3jwm3MhqEfHhfN91jF6LuuUMLkdpp4+mtNlcLdp031I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:25:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2863 (0xb2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E475, serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Validity
Not Before: May 21 01:25:03 2026 GMT
Not After : May 28 01:25:03 2026 GMT
Subject: CN=6a0e5eef-f7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:aa:c7:1b:03:6e:55:ce:60:0e:87:e7:fa:
3b:ff:66:13:22:7d:16:d6:33:25:0d:cb:0c:fe:f4:
5e:0a:10:b5:c4:e6:4d:e9:f7:18:ae:68:ae:a9:aa:
67:c1:36:d1:32:dc:ee:91:ad:79:4e:1b:64:eb:4a:
22:f0:6d:4f:08:74:c4:9a:c3:ef:25:e9:dd:78:58:
2b:70:55:0b:17:f1:8c:ec:db:3d:d0:c1:82:35:42:
b3:f3:0e:fd:f9:33:f3:a1:70:a3:f5:64:95:0d:2a:
00:33:20:2e:f3:de:d7:b4:de:9a:a3:e4:55:39:08:
84:2f:e1:2c:2a:8c:d5:37:ff:c7:b0:3a:42:ca:9c:
16:f1:d6:1a:d1:07:f9:81:c8:fe:6f:82:8a:ee:27:
12:4b:92:c5:79:83:12:d1:c0:5e:27:c1:72:c4:20:
54:c3:4c:4f:74:0a:bd:27:45:0a:3d:d1:d9:0d:ad:
3c:1b:3d:6f:63:54:c1:3c:0d:ec:b4:c7:e7:61:a5:
be:d5:31:60:49:5b:0f:96:ac:a9:a2:5a:62:a1:d3:
50:53:01:91:ea:43:87:30:a2:aa:84:27:d4:20:45:
a4:28:86:a1:1e:72:91:63:10:db:d6:29:11:b0:a8:
86:c4:38:9f:76:4e:35:ff:5f:2b:82:00:ec:6f:7e:
e2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6D:51:9B:2C:0D:99:C6:C4:73:47:67:51:A2:D8:4E:8B:4A:27:8E
X509v3 Authority Key Identifier:
keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e0:a4:b1:86:91:ad:83:ba:f2:ce:9c:b1:73:ad:00:f3:a7:
e9:b0:62:e6:dd:74:35:5a:96:e2:5a:ba:41:c9:a4:97:f5:24:
9d:3b:cc:7c:23:89:44:04:92:cb:0d:8f:14:fe:62:1c:0c:fd:
6c:50:3d:67:02:0b:f0:32:ad:40:0b:f8:f4:fb:17:03:2a:72:
c8:ab:85:6f:d0:86:67:2c:ac:22:c7:3f:02:4f:2e:99:df:1d:
cc:18:51:91:35:14:d7:92:ea:8a:b0:1d:59:3c:63:14:4d:99:
ee:1a:cf:ea:26:b3:a7:cd:67:8b:38:99:1a:98:82:7a:63:74:
12:3e:0b:8d:60:bd:7d:42:2e:cd:c0:88:1b:d4:4e:f0:af:ce:
f3:04:93:03:12:7c:6f:74:55:02:78:37:8f:92:e5:80:13:13:
36:9a:f4:38:36:ce:fe:6c:1b:1a:26:33:0f:0f:28:7b:38:2a:
2a:3b:94:60:4e:3c:00:e1:33:2d:3d:38:5a:9c:0f:f7:ac:6f:
9a:64:04:f4:b0:1d:26:e5:92:ed:51:cc:28:aa:1c:b3:5d:48:
ea:7f:d1:3f:91:29:7d:6a:fa:a4:69:03:39:66:44:d7:31:ee:
f2:44:69:4b:2c:09:0a:1f:0b:c0:9a:4c:98:95:b8:65:a0:fb:
10:04:62:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:34 2026 by rpki-client