
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
File: Sp1OqbVF6hBQTTa2X6owSfmezUY.mft (raw, json)
Hash identifier: 22gFbDuUKOqMScAyhxjsGqm20JnjAgIUfDR8wEruBGM=
Subject key identifier: 93:05:F8:5E:FF:3A:6A:73:99:BE:09:CA:57:4F:C6:62:59:66:FC:2D
Authority key identifier: 4A:9D:4E:A9:B5:45:EA:10:50:4D:36:B6:5F:AA:30:49:F9:9E:CD:46
Certificate issuer: /CN=A915FAD2/serialNumber=4A9D4EA9B545EA10504D36B65FAA3049F99ECD46
Certificate serial: 107C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sp1OqbVF6hBQTTa2X6owSfmezUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
Manifest number: 106D
Signing time: Wed 20 May 2026 17:23:59 +0000
Manifest this update: Wed 20 May 2026 17:23:58 +0000
Manifest next update: Wed 27 May 2026 17:23:58 +0000
Files and hashes: 1: Sp1OqbVF6hBQTTa2X6owSfmezUY.crl (hash: vHz2I6pMuPL+H9XkCaTMREHiA+lgwrSdoQyw4mRCTw8=)
2: D34588789F8A11ECB8E03812C4F9AE02.roa (hash: rasmIGbbkGyXUadctbc+VdY6lJu2lwrTgiDYqa6HQ3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.crl
rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sp1OqbVF6hBQTTa2X6owSfmezUY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4220 (0x107c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FAD2, serialNumber=4A9D4EA9B545EA10504D36B65FAA3049F99ECD46
Validity
Not Before: May 20 17:23:58 2026 GMT
Not After : May 27 17:23:58 2026 GMT
Subject: CN=6a0dee2e-7879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:59:98:a2:bf:21:5c:0a:91:64:e2:06:e1:
ac:83:f1:12:68:a1:e9:c5:b5:d8:0b:6c:24:ac:7c:
5d:ff:9b:ef:c0:bc:76:d9:bf:74:a6:f3:4e:f7:e2:
ee:80:58:a0:c9:d1:e8:6d:7d:d9:d4:e7:40:e2:96:
e7:25:48:df:69:ec:c5:85:64:7e:3f:ac:34:19:3c:
18:5f:32:78:5f:37:68:f2:3b:5d:d1:89:4f:38:9e:
78:d4:29:38:1e:e8:03:30:5e:59:eb:1c:71:7c:ef:
f5:83:cc:8f:d4:6f:eb:a9:db:7f:8e:23:92:7a:b4:
5b:ef:f8:e8:23:32:88:2d:77:2b:e4:9e:8a:ce:fc:
b8:3d:56:5f:c7:b0:c1:d9:7d:e3:53:33:17:42:7a:
a9:7c:81:26:5a:ad:fa:d5:23:39:40:a3:dd:42:9a:
5a:27:d8:4b:27:1d:ed:55:2e:ce:34:a2:6e:1a:18:
05:ba:9d:e2:31:71:79:6f:5a:63:96:9f:e3:d8:ac:
d3:f0:10:03:d7:1f:f8:50:8d:30:56:93:32:79:56:
59:6b:19:6e:b5:4d:07:77:02:60:17:51:04:3c:9e:
99:87:25:93:82:14:1b:13:09:c1:18:82:e2:c3:a9:
8c:79:1b:00:35:b4:03:31:0c:c0:34:d4:8b:ba:02:
4f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:05:F8:5E:FF:3A:6A:73:99:BE:09:CA:57:4F:C6:62:59:66:FC:2D
X509v3 Authority Key Identifier:
keyid:4A:9D:4E:A9:B5:45:EA:10:50:4D:36:B6:5F:AA:30:49:F9:9E:CD:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sp1OqbVF6hBQTTa2X6owSfmezUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:94:ae:0b:a6:2e:53:ba:17:49:79:87:5e:95:ee:b5:4d:11:
f8:3e:51:ad:75:d2:2e:17:63:94:a6:33:39:53:38:ba:07:41:
55:f8:85:2b:63:11:3e:1b:be:70:b3:1b:38:be:ca:03:da:3a:
ac:f0:5f:91:ca:4e:f5:51:42:4a:c2:fa:b9:d9:51:85:07:ca:
49:05:9a:1d:4a:cf:7c:ed:28:05:23:7a:3d:d1:6b:12:7c:b6:
d8:6a:c7:0d:ec:6a:d0:b7:6d:26:e6:37:63:4e:fd:6f:17:61:
a2:50:f5:1f:47:b3:bc:28:32:96:6d:d2:5f:12:b5:58:6a:b4:
4c:55:e8:78:77:b4:63:6b:00:cf:91:c6:17:53:f1:56:d6:ef:
74:4b:cf:0c:0c:b8:ba:49:4f:89:c1:97:33:38:35:fd:d4:2a:
78:49:75:2f:f7:12:bc:72:00:94:0b:3a:77:de:25:aa:21:ba:
62:55:74:e5:dc:c8:b2:dc:9c:20:64:9d:3d:26:77:39:86:f4:
62:ff:3e:f7:c9:06:3d:79:5a:2b:55:1f:a5:5f:76:1f:15:da:
e8:b7:9f:2e:02:e9:bc:b0:e5:38:a4:34:9c:b4:6e:fa:69:35:
40:a9:5b:6f:d9:7f:b7:6f:65:7d:89:a3:81:6d:48:11:34:1a:
30:1e:2d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:46 2026 by rpki-client