
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
File: AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft (raw, json)
Hash identifier: 2anb0elICbWKNi4TswacuJejvxmLkq57GP6d5N5Do5c=
Subject key identifier: B4:32:81:F5:56:D1:CE:F9:B4:99:DC:C6:E0:E3:74:C9:65:4B:CA:05
Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91
Certificate issuer: /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
Certificate serial: 01F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
Manifest number: 01E5
Signing time: Thu 21 May 2026 03:32:29 +0000
Manifest this update: Thu 21 May 2026 03:32:29 +0000
Manifest next update: Thu 28 May 2026 03:32:29 +0000
Files and hashes: 1: AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl (hash: x+NtiKNfaL938T5dv7GkPsVFW28DgTetZg9HNFh5BDI=)
2: 5694D344791B11EEA64C016BC4F9AE02.roa (hash: oIvNDV0kKg8+q3urTzdMBjxhKk7FfiR/yZ0iZHzMy9A=)
3: D39B04847C4B11EEB4EA3632C4F9AE02.roa (hash: yzSO4tM9nUI6xnt7Kh6rwJxk9dfi0T3Au+GC85D5PJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl
rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499 (0x1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E678, serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
Validity
Not Before: May 21 03:32:29 2026 GMT
Not After : May 28 03:32:29 2026 GMT
Subject: CN=6a0e7ccd-7775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7d:6d:2a:aa:8c:70:92:da:a3:53:ea:bf:54:
dd:69:ce:91:1a:3f:25:46:0e:c3:7a:be:c9:5d:e1:
72:ed:15:0b:f9:1f:8e:4b:6e:4c:70:9e:d6:d5:d7:
b3:a3:28:fd:13:a1:2e:71:02:54:b9:04:ec:32:55:
2f:b5:28:59:9b:24:d3:0b:4f:32:67:85:fb:0a:ec:
6d:1c:42:ba:27:0b:ff:6a:4f:6e:cc:e8:8b:c8:cf:
bc:0d:6d:5d:45:a8:3e:cf:13:9b:26:e4:73:d7:0f:
1b:6c:f9:cb:e1:01:c9:87:46:61:ac:71:5f:7e:f7:
c3:ad:36:cc:84:ad:26:63:dd:22:fc:f0:12:5d:31:
67:d2:cf:12:5d:54:6f:05:5d:90:6d:85:09:b2:93:
05:e3:96:5f:82:87:35:26:c9:65:23:2f:b6:0d:75:
d3:8d:ce:a3:1c:fe:49:dd:b8:d8:32:64:b7:97:69:
30:87:c4:68:06:78:8b:6e:df:98:81:5c:bd:cc:77:
4a:12:5e:cd:bf:bf:ab:e7:e3:25:f0:94:ad:d2:43:
59:d3:8c:18:37:45:ac:8f:23:0a:1a:e2:af:c6:ac:
29:fe:69:22:82:b5:73:39:e1:e7:5f:f1:99:b6:7d:
08:5b:ed:0e:f8:45:ce:b0:5c:1f:2e:07:97:6b:e5:
cf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:32:81:F5:56:D1:CE:F9:B4:99:DC:C6:E0:E3:74:C9:65:4B:CA:05
X509v3 Authority Key Identifier:
keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:59:56:da:75:cf:f5:a1:c6:f0:da:33:ca:84:1e:c0:c7:bc:
1e:56:a3:5b:53:62:5d:ba:d2:3f:7d:09:be:96:fa:a7:e3:93:
a0:5e:ea:2b:07:7b:6c:ee:61:ef:7d:0b:4b:1c:d7:df:b3:89:
82:77:b7:ab:f9:2d:ab:90:c0:7a:54:a7:aa:d3:f6:0e:f0:0b:
95:57:d1:57:c6:70:b7:1a:75:e6:b7:dd:28:36:87:97:72:2c:
b3:60:25:f3:06:83:25:9d:5a:4d:1d:69:02:dc:a3:df:ac:77:
a6:5b:f4:c8:6b:77:5e:c7:a8:bf:fb:93:82:99:8c:a3:c2:b1:
a2:0b:3f:47:da:6f:8d:03:54:89:95:db:36:d5:f2:23:84:7f:
88:3b:e5:5d:82:c3:59:64:91:bd:99:be:6b:4e:d8:c3:ee:d1:
cd:0d:cd:65:08:54:62:54:32:ec:5a:9b:df:d0:ce:31:c2:b4:
65:a1:db:ea:da:11:fe:95:40:34:0c:70:72:d3:c4:e9:70:2b:
e0:c2:7f:1a:52:e1:71:79:cb:27:4c:9b:c6:57:55:2d:f5:5c:
54:e0:4a:5a:b7:d7:e7:b3:ac:1d:d2:79:65:57:d3:60:55:4f:
24:84:57:ec:97:c2:5b:e1:95:1d:f1:45:79:ea:e8:7f:b9:1e:
55:86:7c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:35:59 2026 by rpki-client