
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
File: _pB9p6f5k3mm_UY90X0ltNUB3-g.mft (raw, json)
Hash identifier: vqEr1dQGCjoIpgNoXwVqrJ277/yeo5JLQD9+OAk6yAU=
Subject key identifier: 95:F5:38:CE:11:5B:55:D5:84:11:83:B6:14:16:DE:EB:0F:A0:7C:2F
Authority key identifier: FE:90:7D:A7:A7:F9:93:79:A6:FD:46:3D:D1:7D:25:B4:D5:01:DF:E8
Certificate issuer: /CN=A918D7D0/serialNumber=FE907DA7A7F99379A6FD463DD17D25B4D501DFE8
Certificate serial: 08C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
Manifest number: 15BD
Signing time: Wed 20 May 2026 18:09:22 +0000
Manifest this update: Wed 20 May 2026 18:09:21 +0000
Manifest next update: Wed 27 May 2026 18:09:21 +0000
Files and hashes: 1: _pB9p6f5k3mm_UY90X0ltNUB3-g.crl (hash: 9c3CZYNbP/fNvJ4l8JjKqKrlEV8s4xMvVWK766xggFY=)
2: 57B4ADB0066A11ECA8CBA567C4F9AE02.roa (hash: 6gLJKKnFmF5qfkWNfg9pr+7n4q/rwaIKzFasCvK2odM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.crl
rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 18:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2245 (0x8c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D7D0, serialNumber=FE907DA7A7F99379A6FD463DD17D25B4D501DFE8
Validity
Not Before: May 20 18:09:21 2026 GMT
Not After : May 27 18:09:21 2026 GMT
Subject: CN=6a0df8d2-ca2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4c:60:f1:a1:4a:63:01:fc:a8:d4:d2:d0:c6:
82:7f:1e:89:6e:84:24:dc:c4:c1:bd:10:be:33:97:
fc:e8:5a:50:86:84:e9:45:95:58:bb:f7:69:d4:12:
a6:b0:b8:e6:08:70:22:ce:b0:8d:a8:91:70:c9:b2:
5e:5a:48:3b:40:8b:22:5c:6a:8e:42:be:83:ce:db:
de:89:cb:03:ac:c2:cc:70:54:02:ab:a9:20:62:3f:
28:33:f0:87:4f:90:d9:17:da:2f:6e:ad:71:e1:f7:
7e:53:fc:2f:97:a0:62:f3:96:af:d2:f5:29:db:a3:
cf:e2:79:6f:41:a9:cf:a8:fe:71:0f:a0:6d:8c:4d:
5f:90:36:e2:73:da:92:b1:07:cd:f7:9d:72:76:db:
8d:9e:47:37:a7:76:f9:53:d6:4c:10:f6:47:19:f2:
27:e0:06:af:fb:9f:c2:1d:0b:96:18:7d:2d:0f:67:
89:42:aa:33:88:91:9b:2d:44:05:18:5e:90:b1:15:
a7:de:b5:e0:e5:dc:02:c4:00:fe:c1:b0:94:3c:82:
f5:5b:47:85:43:0b:61:ca:d0:24:6d:0c:0b:26:21:
9c:8b:3a:c9:83:c5:92:52:1b:26:2c:4b:88:24:b9:
a5:ec:46:0b:93:48:03:65:0c:f7:59:5d:9b:b4:fe:
cd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F5:38:CE:11:5B:55:D5:84:11:83:B6:14:16:DE:EB:0F:A0:7C:2F
X509v3 Authority Key Identifier:
keyid:FE:90:7D:A7:A7:F9:93:79:A6:FD:46:3D:D1:7D:25:B4:D5:01:DF:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2b:ab:58:aa:91:d1:72:bf:80:3b:42:a6:80:87:44:1e:cc:
b3:f8:5e:ae:4c:dc:da:2f:15:b3:74:99:70:d7:31:e2:5b:4d:
36:87:75:aa:d3:9a:71:91:c6:bd:2a:96:9f:c0:f3:c1:d8:59:
9b:c1:6e:d4:fe:72:ad:31:97:fb:bd:95:55:57:3a:5c:e9:cd:
22:74:ad:2e:a0:2c:f8:22:76:44:1a:ae:0b:88:e6:56:73:46:
e7:a6:96:21:b3:8a:83:33:aa:5d:5e:d9:0a:5b:b2:c5:5a:62:
c3:9f:7f:9b:f0:bb:53:66:a2:1e:14:56:e1:02:c1:78:c1:be:
65:a6:d4:6e:0f:7e:c7:1a:98:c9:b3:14:ee:09:02:cf:d1:7c:
df:5d:6c:47:4b:b3:0e:33:5a:90:52:e3:ce:9f:b6:0c:5a:28:
39:cc:5b:14:5d:d9:f5:46:72:9a:7b:af:8d:28:4d:3b:79:1a:
4b:0e:b7:07:85:f9:25:a9:cd:cf:1f:83:25:07:7a:61:25:47:
53:0f:06:64:1c:d8:d5:4c:5f:0a:23:9c:a0:bb:99:5d:86:f2:
41:9b:0e:4d:2e:50:23:01:6a:e6:a5:fd:da:be:ca:a7:9c:a4:
47:5d:6d:c8:1d:88:50:94:aa:e0:f4:35:8b:ad:85:b8:b4:95:
73:06:eb:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ3RDAxMTAvBgNVBAUTKEZFOTA3REE3QTdGOTkzNzlBNkZENDYzREQxN0QyNUI0
RDUwMURGRTgwHhcNMjYwNTIwMTgwOTIxWhcNMjYwNTI3MTgwOTIxWjAYMRYwFAYD
VQQDEw02YTBkZjhkMi1jYTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1kxg8aFKYwH8qNTS0MaCfx6JboQk3MTBvRC+M5f86FpQhoTpRZVYu/dp1BKm
sLjmCHAizrCNqJFwybJeWkg7QIsiXGqOQr6DztveicsDrMLMcFQCq6kgYj8oM/CH
T5DZF9ovbq1x4fd+U/wvl6Bi85av0vUp26PP4nlvQanPqP5xD6BtjE1fkDbic9qS
sQfN951ydtuNnkc3p3b5U9ZMEPZHGfIn4Aav+5/CHQuWGH0tD2eJQqoziJGbLUQF
GF6QsRWn3rXg5dwCxAD+wbCUPIL1W0eFQwthytAkbQwLJiGcizrJg8WSUhsmLEuI
JLml7EYLk0gDZQz3WV2btP7N1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJX1OM4R
W1XVhBGDthQW3usPoHwvMB8GA1UdIwQYMBaAFP6Qfaen+ZN5pv1GPdF9JbTVAd/o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDdEMC85ODJCMkQ1QTAw
ODIxMUVBQjcxRjRBMkJDNEY5QUUwMi9fcEI5cDZmNWszbW1fVVk5MFgwbHROVUIz
LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19wQjlwNmY1azNtbV9VWTkwWDBsdE5VQjMtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDdEMC85ODJCMkQ1QTAwODIxMUVBQjcxRjRBMkJDNEY5QUUwMi9fcEI5cDZmNWsz
bW1fVVk5MFgwbHROVUIzLWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjCurWKqR0XK/gDtCpoCHRB7Ms/herkzc2i8Vs3SZcNcx4ltNNod1qtOacZHG
vSqWn8DzwdhZm8Fu1P5yrTGX+72VVVc6XOnNInStLqAs+CJ2RBquC4jmVnNG56aW
IbOKgzOqXV7ZCluyxVpiw59/m/C7U2aiHhRW4QLBeMG+ZabUbg9+xxqYybMU7gkC
z9F8311sR0uzDjNakFLjzp+2DFooOcxbFF3Z9UZymnuvjShNO3kaSw63B4X5JanN
zx+DJQd6YSVHUw8GZBzY1UxfCiOcoLuZXYbyQZsOTS5QIwFq5qX92r7Kp5ykR11t
yB2IUJSq4PQ1i62FuLSVcwbr8A==
-----END CERTIFICATE-----
Generated at Thu May 21 10:19:47 2026 by rpki-client