
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
File: PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft (raw, json)
Hash identifier: 8ScglDKB9xYs66Hd+5gcb7Cec7HgnUDpX9NXTOtiQkU=
Subject key identifier: 4A:8F:63:59:A9:2C:7A:92:C0:FE:02:58:7B:9A:F7:2A:78:94:C4:80
Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19
Certificate issuer: /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519
Certificate serial: 0511
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
Manifest number: 050C
Signing time: Sun 01 Mar 2026 00:14:42 +0000
Manifest this update: Sun 01 Mar 2026 00:14:42 +0000
Manifest next update: Sun 08 Mar 2026 00:14:42 +0000
Files and hashes: 1: PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl (hash: AwaDl9ogHqtZ73hIQBwXqTldUc7OkrslzYtpdUUnkTU=)
2: 47A72A7441ED11EC9B02377AC4F9AE02.roa (hash: QrLrf2+brQr8pET8HlSnm9rXz817aY8992jkS8DLh64=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl
rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1297 (0x511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A39E, serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519
Validity
Not Before: Mar 1 00:14:42 2026 GMT
Not After : Mar 8 00:14:42 2026 GMT
Subject: CN=69a384f2-f5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:a6:81:ae:26:5b:08:ac:aa:ba:37:97:dc:
d5:77:9a:78:ad:ad:d2:8c:44:60:0d:47:a9:c2:07:
1c:21:5f:92:1a:c5:06:2f:7a:2c:b1:23:28:0c:37:
7e:19:20:3b:ac:d2:c8:44:d0:ef:8b:a9:30:4f:b8:
7c:b1:3e:81:48:ae:56:54:26:2c:21:09:94:f2:47:
9d:81:d7:89:a7:ea:05:f4:7e:37:91:6f:7c:b4:05:
fc:5e:38:91:20:d4:4d:82:23:0d:c3:c0:a6:ea:69:
9d:bd:f7:04:d0:6f:c0:9d:5b:f8:01:2c:71:13:03:
e9:ff:56:93:60:20:53:33:30:d9:23:bf:0a:16:63:
35:57:5a:4d:ef:81:13:7b:67:4a:6c:80:b9:27:6c:
92:7f:56:b3:a3:bf:c6:a5:af:28:10:6d:6a:59:ca:
16:30:c8:03:46:18:e0:94:5a:f5:9d:96:3c:5a:27:
e1:b5:90:1d:51:94:ec:f8:f6:8f:8f:68:e6:fd:1a:
03:dc:34:72:0b:cc:f5:6c:ad:6e:b8:fa:64:7e:45:
b7:44:08:aa:1c:ab:fc:bc:0d:c0:db:d8:79:5e:69:
7c:f6:cd:19:5e:40:4e:c9:c8:87:b6:e3:8d:26:56:
f1:f0:a8:ad:8e:9f:0c:49:26:a6:43:8e:8f:1f:37:
a9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8F:63:59:A9:2C:7A:92:C0:FE:02:58:7B:9A:F7:2A:78:94:C4:80
X509v3 Authority Key Identifier:
keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f0:92:6c:b4:55:67:3d:8d:ae:a9:ea:38:a7:75:61:ef:59:
24:6a:a3:a2:21:8f:1f:e8:22:16:f5:00:2d:79:ac:2c:fe:62:
9e:89:69:e3:eb:a2:2f:04:a7:36:b5:7a:41:25:c2:3b:75:86:
30:0f:6b:fd:7a:00:e0:b5:49:2b:1c:e4:91:5b:27:08:1a:f0:
1e:1b:e3:46:ab:cc:83:d2:36:fc:af:74:74:af:58:d8:89:e1:
be:00:13:9e:74:c3:06:d1:bd:bf:37:23:c8:94:da:b3:5b:20:
28:67:3d:76:40:a9:63:be:b0:e1:17:63:15:e6:5d:2c:cf:a5:
b6:42:ff:11:ea:70:a8:36:8a:8d:96:c7:80:30:b4:3f:95:2f:
8e:16:47:ca:18:d0:e0:74:1a:20:48:53:ab:49:8a:5c:29:53:
98:ac:73:22:bb:01:54:3f:99:e8:49:ad:1f:71:f8:b0:be:56:
10:7b:4d:7a:0d:5b:30:52:ea:17:43:9b:2a:e8:83:06:1e:b9:
d4:ac:c2:e0:c5:dd:3f:0b:54:df:5b:33:21:57:fd:19:c2:c0:
8b:d3:a7:a1:9b:2c:74:a4:4e:ec:af:8b:52:79:ff:68:f1:94:
58:68:91:97:34:85:26:dd:78:98:04:00:b5:15:1e:f0:8a:40:
c7:b4:67:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEzOUUxMTAvBgNVBAUTKDNFNDJEMzMzNEExQ0UxODg5REZDNjdFNDJERjYyODU4
MjE4NTI1MTkwHhcNMjYwMzAxMDAxNDQyWhcNMjYwMzA4MDAxNDQyWjAYMRYwFAYD
VQQDDA02OWEzODRmMi1mNWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvnemga4mWwisqro3l9zVd5p4ra3SjERgDUepwgccIV+SGsUGL3ossSMoDDd+
GSA7rNLIRNDvi6kwT7h8sT6BSK5WVCYsIQmU8kedgdeJp+oF9H43kW98tAX8XjiR
INRNgiMNw8Cm6mmdvfcE0G/AnVv4ASxxEwPp/1aTYCBTMzDZI78KFmM1V1pN74ET
e2dKbIC5J2ySf1azo7/Gpa8oEG1qWcoWMMgDRhjglFr1nZY8WifhtZAdUZTs+PaP
j2jm/RoD3DRyC8z1bK1uuPpkfkW3RAiqHKv8vA3A29h5Xml89s0ZXkBOyciHtuON
Jlbx8Kitjp8MSSamQ46PHzep0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEqPY1mp
LHqSwP4CWHua9yp4lMSAMB8GA1UdIwQYMBaAFD5C0zNKHOGInfxn5C32KFghhSUZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTM5RS9DQTMxNjg5NjQx
RTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZaWRfR2ZrTGZZb1dDR0ZK
UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BrTFRNMG9jNFlpZF9HZmtMZllvV0NHRkpSay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTM5RS9DQTMxNjg5NjQxRTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZ
aWRfR2ZrTGZZb1dDR0ZKUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsvCSbLRVZz2NrqnqOKd1Ye9ZJGqjoiGPH+giFvUALXmsLP5inolp4+uiLwSn
NrV6QSXCO3WGMA9r/XoA4LVJKxzkkVsnCBrwHhvjRqvMg9I2/K90dK9Y2InhvgAT
nnTDBtG9vzcjyJTas1sgKGc9dkCpY76w4RdjFeZdLM+ltkL/EepwqDaKjZbHgDC0
P5UvjhZHyhjQ4HQaIEhTq0mKXClTmKxzIrsBVD+Z6EmtH3H4sL5WEHtNeg1bMFLq
F0ObKuiDBh651KzC4MXdPwtU31szIVf9GcLAi9OnoZssdKRO7K+LUnn/aPGUWGiR
lzSFJt14mAQAtRUe8IpAx7RnsQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:53 2026 by rpki-client