
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft
File: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft (raw, json)
Hash identifier: GtuOMrjlRpcqRNzDI4lOBW5Ye4EBidNnVSVZkXj4wbg=
Subject key identifier: 0C:D6:A5:FC:6A:AB:C8:02:57:AA:D1:C0:49:D6:25:B6:7E:D7:34:E2
Authority key identifier: FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B
Certificate issuer: /CN=A915A247/serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B
Certificate serial: 01DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft
Manifest number: 01D5
Signing time: Fri 17 Apr 2026 03:20:13 +0000
Manifest this update: Fri 17 Apr 2026 03:20:13 +0000
Manifest next update: Fri 24 Apr 2026 03:20:13 +0000
Files and hashes: 1: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl (hash: YVy8A5EyTRIbCwT6SkKt4CDCud4sTbYKe7Y2VnSZJDQ=)
2: B4350DCC6F4B11EEA062D464C4F9AE02.roa (hash: yaCD6IlFpNnlLI1rlXiBW7x7bvmFGdPJIOwJDR7gVRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl
rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A247, serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B
Validity
Not Before: Apr 17 03:20:13 2026 GMT
Not After : Apr 24 03:20:13 2026 GMT
Subject: CN=69e1a6ed-55f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:5a:a6:7e:9a:7a:ba:59:17:a9:cb:dd:35:
76:09:27:66:ca:30:2b:f2:2d:68:10:49:4d:9f:3d:
fb:37:ff:d6:4a:2c:f8:20:e5:48:dc:01:17:bf:59:
16:59:66:be:7f:46:c3:fa:aa:32:27:fc:dc:73:a7:
08:28:6e:01:cd:74:df:22:1e:a2:58:ac:4f:3e:89:
22:e4:d8:41:e6:c0:bb:46:5f:f6:33:fd:a7:ec:a9:
9a:88:bf:e1:13:0b:99:a5:05:4c:83:ec:c4:a8:92:
67:0a:35:aa:77:0b:5d:0a:5c:1f:bb:9d:93:99:d1:
7e:54:b9:b6:4f:72:57:ca:79:b4:d2:a8:2b:a6:1d:
d4:bc:e1:de:29:2a:33:8b:bf:08:b7:47:c0:c9:af:
95:19:d9:31:a4:2e:29:97:73:d4:11:d0:6c:89:26:
f4:b9:5e:2b:9d:cf:53:c3:04:4c:48:f2:f1:7d:d8:
a8:a6:84:43:92:87:d3:12:36:d6:3f:47:fc:eb:c1:
fd:f2:c8:22:04:52:ae:08:09:30:df:53:1b:b5:8a:
6d:aa:bf:58:04:bf:78:43:31:ec:51:0e:6c:58:80:
99:8d:28:62:8b:91:65:a7:b4:2d:d2:28:59:49:01:
d4:67:77:c2:c0:f8:28:be:dd:d9:39:9e:68:29:a0:
2f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D6:A5:FC:6A:AB:C8:02:57:AA:D1:C0:49:D6:25:B6:7E:D7:34:E2
X509v3 Authority Key Identifier:
keyid:FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:dc:2d:81:bb:03:67:11:6a:57:0c:26:84:87:8d:af:02:77:
fb:f2:4e:58:2a:d3:d0:60:c4:9f:2f:c9:3b:29:73:bd:37:bc:
ad:48:95:c3:c8:55:b3:9e:91:21:de:37:5a:4b:06:66:c2:8e:
7b:36:0c:01:e0:b4:53:37:0b:47:01:b1:fa:1d:a8:69:30:db:
26:0e:b9:5d:16:bf:bc:c1:09:65:0d:20:0d:cd:85:7c:f3:8a:
f8:fd:e1:19:66:7f:f7:27:18:63:2c:d3:9b:d0:8b:9d:da:0e:
89:0b:82:16:8f:3b:00:16:a6:b3:40:4a:fc:1e:ef:fc:b9:c0:
dc:b7:f4:ae:2b:89:50:69:7c:23:b8:37:a5:2f:5f:fa:91:e7:
37:b4:08:4c:e4:92:f9:37:ab:4d:fa:81:90:a1:af:a8:ad:de:
fc:a6:b1:5f:bc:fb:0d:de:cd:ad:cd:09:79:56:c6:70:ad:30:
b1:d8:11:30:90:80:4f:f9:5a:c8:7c:f0:5e:d6:8b:1f:21:10:
8c:60:5d:c8:96:1d:0d:b7:87:0c:22:b6:5d:f0:24:86:ff:7c:
df:cf:a7:72:47:d3:11:54:4a:bb:f8:d0:ce:e0:5c:00:17:a7:
08:e3:86:fd:9f:29:99:d7:e2:aa:db:a7:cf:5a:05:26:90:59:
3d:ad:68:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:25:58 2026 by rpki-client