
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
File: Rm8RJELF0C5g8kaZGTriFRlbO6k.mft (raw, json)
Hash identifier: +LxEwfCSkY9idSb99M9EFR5m3e9c53BYl+TQe4OIDu8=
Subject key identifier: B9:33:CD:71:A9:AA:B3:62:71:8E:1A:B0:00:6E:77:D3:B1:A0:BF:75
Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
Certificate issuer: /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Certificate serial: 0E51
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
Manifest number: 0E29
Signing time: Mon 20 Apr 2026 14:22:48 +0000
Manifest this update: Mon 20 Apr 2026 14:22:47 +0000
Manifest next update: Mon 27 Apr 2026 14:22:47 +0000
Files and hashes: 1: Rm8RJELF0C5g8kaZGTriFRlbO6k.crl (hash: aosm1TdAY7CqLgh+BBki1e/K6Q+VPUEjkhSCIKL/3fw=)
2: 91CA6CBC740111EFB5E97021C4F9AE02.roa (hash: VUZOzVeu3Rmihqe+9bsoHbZ1D9W7VkSJow2zZcM/4pU=)
3: 266ABA161E5811EF89038F3BC4F9AE02.roa (hash: 2mykxIxiqsMsDnD5UHQtUMKZScZ9tuzk0LE2MZEIafE=)
4: 1D3D0DC21E5811EFAC23683BC4F9AE02.roa (hash: FYg1sztOimGkD/LIpHQVCG8NcB8eonAdaVTsth0VmSw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 14:22:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3665 (0xe51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Validity
Not Before: Apr 20 14:22:47 2026 GMT
Not After : Apr 27 14:22:47 2026 GMT
Subject: CN=69e636b7-fab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:88:dc:98:56:65:6f:5a:03:21:80:16:2d:
6f:fd:61:42:d3:17:7f:98:da:a4:a8:8a:ad:c0:7a:
80:f8:d4:d5:f9:19:5d:28:e9:6a:92:33:4c:2b:f9:
6d:79:d3:fa:8f:35:72:28:b2:c0:6f:45:fe:86:13:
25:5f:50:ee:95:c0:9b:17:21:9c:0c:34:5c:2a:54:
63:9c:d6:57:6e:a6:3d:26:1a:7d:b0:83:41:99:de:
44:c7:4c:ec:af:a1:0d:25:ae:10:ae:5b:85:f5:16:
91:87:b9:57:8c:5b:2e:44:58:bc:cf:4b:18:bc:77:
b3:30:9e:b5:37:9b:58:a3:58:98:de:1f:81:06:e7:
da:eb:7a:8c:b2:6a:b4:11:38:c7:ea:d5:b3:47:5b:
bc:b2:3e:70:a8:b9:37:97:29:65:20:b8:51:de:11:
ea:a6:25:21:a1:6a:3b:b3:ba:47:11:0d:09:b3:48:
f0:46:91:a2:3b:33:ce:0c:71:07:fa:87:31:2a:dc:
1f:a4:c6:74:9f:99:ee:e3:0a:7a:3f:30:2f:cd:a4:
7e:64:75:82:a5:bf:d9:2c:60:ab:5e:99:4c:4f:eb:
16:a5:78:1b:07:57:3e:b5:18:26:ef:7d:7c:3e:48:
0f:fd:4e:c6:fe:61:88:90:32:0c:31:f4:0d:48:b8:
34:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:33:CD:71:A9:AA:B3:62:71:8E:1A:B0:00:6E:77:D3:B1:A0:BF:75
X509v3 Authority Key Identifier:
keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:a7:ef:91:cb:5e:f5:fe:c2:7c:7f:55:cd:4c:32:a3:c8:98:
36:36:30:b2:27:90:65:48:c3:2d:69:b7:99:1d:8c:43:eb:5c:
d1:d1:77:6f:1d:64:f8:e4:7f:39:fd:ff:66:33:c0:85:db:30:
51:7d:21:1a:1e:cf:aa:f2:48:a7:e8:a2:d2:62:90:64:21:ee:
57:19:5a:d2:c5:1e:04:7a:82:6f:41:46:6b:a6:87:53:8b:54:
49:e0:a7:6b:e2:93:09:40:15:b0:2a:2b:de:4e:2c:ef:40:8c:
9d:ce:af:ba:ed:6b:ce:7e:9b:97:5f:92:18:aa:22:c1:54:a5:
11:70:d9:01:f2:c1:87:8c:9c:e1:8a:8e:b5:18:73:bc:e0:5f:
29:d1:0d:af:d8:84:e9:87:2a:bb:5d:f6:53:eb:d4:32:ef:c2:
bd:ef:b2:e8:3d:05:0e:e0:01:46:92:96:e4:fa:b0:d7:89:e2:
85:d9:19:a1:70:65:f7:c5:8c:f0:07:0b:eb:0b:e2:62:f5:39:
b9:1c:82:cc:0e:19:96:03:58:e7:80:36:fc:1c:0d:83:a3:2a:
cc:79:79:53:2f:ed:85:29:15:1b:11:4c:40:64:f2:18:6c:4e:
1f:87:53:25:e0:55:4b:1c:9e:f1:d5:ad:8b:1a:ac:34:7b:c7:
cb:11:0b:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY4OUMxMTAvBgNVBAUTKDQ2NkYxMTI0NDJDNUQwMkU2MEYyNDY5OTE5M0FFMjE1
MTk1QjNCQTkwHhcNMjYwNDIwMTQyMjQ3WhcNMjYwNDI3MTQyMjQ3WjAYMRYwFAYD
VQQDEw02OWU2MzZiNy1mYWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvCOI3JhWZW9aAyGAFi1v/WFC0xd/mNqkqIqtwHqA+NTV+RldKOlqkjNMK/lt
edP6jzVyKLLAb0X+hhMlX1DulcCbFyGcDDRcKlRjnNZXbqY9Jhp9sINBmd5Ex0zs
r6ENJa4QrluF9RaRh7lXjFsuRFi8z0sYvHezMJ61N5tYo1iY3h+BBufa63qMsmq0
ETjH6tWzR1u8sj5wqLk3lyllILhR3hHqpiUhoWo7s7pHEQ0Js0jwRpGiOzPODHEH
+ocxKtwfpMZ0n5nu4wp6PzAvzaR+ZHWCpb/ZLGCrXplMT+sWpXgbB1c+tRgm7318
PkgP/U7G/mGIkDIMMfQNSLg0jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLkzzXGp
qrNicY4asABud9OxoL91MB8GA1UdIwQYMBaAFEZvESRCxdAuYPJGmRk64hUZWzup
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy8wMUIwNjlGNkNF
QkIxMUU5OUIxRjdEM0VDNEY5QUUwMi9SbThSSkVMRjBDNWc4a2FaR1RyaUZSbGJP
NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1JtOFJKRUxGMEM1ZzhrYVpHVHJpRlJsYk82ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Rjg5Qy8wMUIwNjlGNkNFQkIxMUU5OUIxRjdEM0VDNEY5QUUwMi9SbThSSkVMRjBD
NWc4a2FaR1RyaUZSbGJPNmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZafvkcte9f7CfH9VzUwyo8iYNjYwsieQZUjDLWm3mR2MQ+tc0dF3bx1k+OR/
Of3/ZjPAhdswUX0hGh7PqvJIp+ii0mKQZCHuVxla0sUeBHqCb0FGa6aHU4tUSeCn
a+KTCUAVsCor3k4s70CMnc6vuu1rzn6bl1+SGKoiwVSlEXDZAfLBh4yc4YqOtRhz
vOBfKdENr9iE6Ycqu132U+vUMu/Cve+y6D0FDuABRpKW5Pqw14nihdkZoXBl98WM
8AcL6wviYvU5uRyCzA4ZlgNY54A2/BwNg6MqzHl5Uy/thSkVGxFMQGTyGGxOH4dT
JeBVSxye8dWtixqsNHvHyxELLQ==
-----END CERTIFICATE-----
Generated at Tue Apr 21 21:34:39 2026 by rpki-client