
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft
File: 15qMdwXiQZ6rQpU7a8ilcga6xiY.mft (raw, json)
Hash identifier: s4CbLBialZN8xU0gigzs0mnYah13Z2sAJ0AvlcFL8Cw=
Subject key identifier: CE:33:6F:0A:53:A4:3F:92:39:F9:75:30:80:0B:87:FB:69:B3:BC:11
Authority key identifier: D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26
Certificate issuer: /CN=A91BADCE/serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626
Certificate serial: 053A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft
Manifest number: 052C
Signing time: Tue 10 Mar 2026 23:04:46 +0000
Manifest this update: Tue 10 Mar 2026 23:04:45 +0000
Manifest next update: Tue 17 Mar 2026 23:04:45 +0000
Files and hashes: 1: 15qMdwXiQZ6rQpU7a8ilcga6xiY.crl (hash: DjeUwGZj+5fUZHXbMe24aSpQ8XX1gND8juq5mbufTAw=)
2: 56C4925E3B0711EC9715501EC4F9AE02.roa (hash: 3/W6rA2EZQ9LTmSbpHpq8E02n0iBtefklJIZbF4CvQI=)
3: 4BD423FE3AF911EC918C643AC4F9AE02.roa (hash: OWs47VxIEQ1QhlgbrlxvKW4VXn5SiZ0ruC9D8eNOYWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl
rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 23:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1338 (0x53a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BADCE, serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626
Validity
Not Before: Mar 10 23:04:45 2026 GMT
Not After : Mar 17 23:04:45 2026 GMT
Subject: CN=69b0a38e-5ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:bf:1b:59:7c:38:fb:bb:41:76:a4:03:55:
99:93:85:19:1f:0a:3d:18:c8:08:b9:fe:d1:48:6c:
05:6c:44:e0:f3:bc:9e:37:c2:86:c4:19:89:d6:cd:
a8:20:15:a1:9f:74:db:95:23:b4:4a:9a:e7:21:e1:
31:ac:79:0c:07:21:26:1c:62:11:8a:d2:d7:d0:f2:
62:6d:60:f0:e7:97:bd:7b:8d:4d:89:09:0a:05:5b:
85:d2:65:0f:86:e2:7c:a1:58:6c:f9:2c:d0:52:57:
80:1b:b9:35:92:9f:1e:cf:db:75:75:b0:ab:87:4a:
09:91:36:05:f0:94:e9:d6:31:e3:d9:42:18:7a:69:
59:7f:fe:8c:7a:7d:47:a4:63:37:ac:1d:a6:41:f2:
c0:84:7a:d4:86:66:67:bd:22:bf:e1:c5:71:fc:55:
40:c4:d3:45:cb:a8:86:bf:e9:65:e6:99:63:f8:7b:
72:9b:d1:53:56:cb:f0:aa:ca:71:0f:69:62:93:73:
d6:a1:ae:db:02:79:f1:cf:5c:d4:9b:b8:7f:8a:32:
dc:a0:48:01:00:fc:28:6d:d3:4e:65:e3:e0:7b:30:
d3:4a:1a:a7:5a:9b:f3:98:b2:ff:31:38:6e:f5:88:
cf:82:b4:93:28:52:21:7c:3b:ef:4e:50:06:a5:d3:
88:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:33:6F:0A:53:A4:3F:92:39:F9:75:30:80:0B:87:FB:69:B3:BC:11
X509v3 Authority Key Identifier:
keyid:D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6f:21:12:57:96:af:90:85:48:d6:64:9d:52:2e:95:e5:be:
db:19:36:1a:ec:d9:e3:ee:e7:5f:bc:b8:78:fc:12:20:da:0f:
cf:e4:fc:02:e7:be:49:90:e7:36:3f:a7:fd:6f:8d:1e:f2:63:
93:b4:8c:9b:46:5d:ce:9f:b4:8e:23:e9:53:63:58:c0:40:8e:
50:29:65:cc:1a:19:2d:9e:c2:e8:9f:50:2b:9e:80:33:42:be:
6a:6b:7b:d7:0e:4e:4c:94:2c:15:f3:94:a2:f7:fa:8d:d4:7b:
3c:70:be:06:ad:3a:0e:81:d4:5f:0d:bf:63:d3:a7:97:5e:3a:
46:e3:04:50:81:72:02:8d:90:47:ed:a7:bd:fd:1b:83:06:73:
8f:82:2e:90:fe:79:c7:9f:07:44:9b:2e:97:6d:78:39:c4:0f:
5c:ee:a8:38:74:3d:38:1c:96:36:5f:26:be:24:43:50:66:46:
3d:a7:14:41:c8:c4:48:b7:a6:29:58:b0:6b:60:78:c5:46:af:
77:92:f7:be:1a:c4:0c:08:10:89:a1:20:17:e9:93:cf:d8:b2:
65:7a:e8:0a:53:da:2e:10:f7:82:1e:21:2e:98:b4:8b:a2:4f:
e9:d9:d2:50:f3:f7:d6:94:b6:d7:60:62:56:50:ad:3d:ee:21:
48:c8:17:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:14:37 2026 by rpki-client