
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
File: PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft (raw, json)
Hash identifier: DLFhwFg2zxDgvCW2b7Ie0cB0Ip0RVK5KPJ9QHJBFtO4=
Subject key identifier: AB:64:66:42:8B:5D:D9:D4:AF:44:14:4D:8B:43:03:FA:79:53:DE:79
Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19
Certificate issuer: /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519
Certificate serial: 0561
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
Manifest number: 055A
Signing time: Wed 29 Jul 2026 00:03:21 +0000
Manifest this update: Wed 29 Jul 2026 00:03:20 +0000
Manifest next update: Wed 05 Aug 2026 00:03:20 +0000
Files and hashes: 1: PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl (hash: alrjqEeFc1JrJU3Cs05H9/FK/e2ySTiSRlUKfbMcue4=)
2: 47A72A7441ED11EC9B02377AC4F9AE02.roa (hash: T0ns+7x4iK0WmW0k/dhc+1Ohg2P5NWnpBDqsr9+P9R0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl
rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1377 (0x561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A39E, serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519
Validity
Not Before: Jul 29 00:03:20 2026 GMT
Not After : Aug 5 00:03:20 2026 GMT
Subject: CN=6a694349-c927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:74:0f:ca:ab:dc:5a:75:99:f4:4e:38:ad:8c:
a9:f9:f7:6e:28:c6:92:a7:a5:2a:ca:fd:d2:27:9a:
32:73:f4:a6:55:20:c1:b5:70:fe:a8:1b:b6:c5:b9:
b3:76:a2:93:44:e9:18:ab:71:f9:88:6d:27:5a:ae:
87:5b:32:f9:d6:38:48:a1:10:4e:22:29:9a:9a:73:
0b:a6:33:8e:ee:76:1f:36:09:15:d8:77:96:d3:6c:
23:f0:93:03:70:d5:3a:c0:3a:06:0a:f4:94:e7:bc:
6a:bf:a3:82:94:e8:9b:23:d9:36:1f:58:91:ba:17:
b1:db:0e:5f:0d:86:82:23:5d:7f:a4:f8:1f:83:c5:
da:c6:62:95:7b:8b:a4:dc:03:67:a4:0c:19:87:96:
57:28:88:e9:76:1c:f0:5a:8d:b4:ba:8f:79:cc:aa:
ed:9b:a3:d9:76:96:15:36:81:33:cc:71:77:24:f8:
c8:c5:35:eb:ed:8c:12:d8:7c:16:82:fe:52:18:5b:
e5:0c:03:e3:71:42:56:c2:f2:54:e6:d8:70:29:c8:
c6:e5:10:89:86:b8:b7:c3:7a:e4:6f:ae:2b:64:d5:
3f:c6:0d:1a:aa:a8:ef:57:be:06:c2:46:dc:d5:39:
90:fb:19:5b:88:d0:cc:01:a3:7c:12:95:7a:fa:dc:
d6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:64:66:42:8B:5D:D9:D4:AF:44:14:4D:8B:43:03:FA:79:53:DE:79
X509v3 Authority Key Identifier:
keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:f6:d6:c7:ce:6e:7b:ec:ba:2a:a1:39:26:0f:13:ac:86:8c:
05:47:67:d8:85:21:4e:9a:68:e1:14:3a:23:45:2d:bc:fd:ba:
a6:b2:c6:b7:46:cb:4a:40:61:27:47:6b:21:bf:ea:1d:a6:27:
ff:b5:2b:61:b0:74:53:86:e7:6b:d8:ca:88:85:95:e5:67:3d:
a5:0a:35:e3:e9:e2:8a:8b:c9:52:3d:4e:6d:f7:82:ea:4f:dd:
e4:51:c7:8b:db:e1:3f:55:79:34:54:96:3d:3e:a3:0f:2d:84:
57:ca:0a:01:d6:42:d4:37:16:ac:ee:ea:df:f9:bc:92:75:d7:
1b:7c:16:20:a4:f1:a4:c3:cc:3d:4e:ab:60:b2:b5:81:a2:e7:
1a:93:63:bc:16:87:81:e4:74:10:72:40:24:8b:e1:bf:b0:23:
97:8c:09:df:fa:17:ce:41:8b:ae:f7:58:b3:55:36:58:1f:b6:
fe:28:fc:dc:8d:c7:6d:59:2a:03:8f:52:9b:5f:fc:8a:71:4c:
da:7f:3b:84:26:6f:f0:7b:f4:b5:09:d9:e4:70:f3:39:24:78:
18:4a:69:4c:51:09:4d:8a:b4:4d:6c:e9:94:5f:e3:08:c0:c5:
61:08:c5:ff:0f:e4:e2:72:a5:e0:f8:f2:cf:3c:f1:93:4f:6a:
3e:52:47:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEzOUUxMTAvBgNVBAUTKDNFNDJEMzMzNEExQ0UxODg5REZDNjdFNDJERjYyODU4
MjE4NTI1MTkwHhcNMjYwNzI5MDAwMzIwWhcNMjYwODA1MDAwMzIwWjAYMRYwFAYD
VQQDEw02YTY5NDM0OS1jOTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3nQPyqvcWnWZ9E44rYyp+fduKMaSp6Uqyv3SJ5oyc/SmVSDBtXD+qBu2xbmz
dqKTROkYq3H5iG0nWq6HWzL51jhIoRBOIimamnMLpjOO7nYfNgkV2HeW02wj8JMD
cNU6wDoGCvSU57xqv6OClOibI9k2H1iRuhex2w5fDYaCI11/pPgfg8XaxmKVe4uk
3ANnpAwZh5ZXKIjpdhzwWo20uo95zKrtm6PZdpYVNoEzzHF3JPjIxTXr7YwS2HwW
gv5SGFvlDAPjcUJWwvJU5thwKcjG5RCJhri3w3rkb64rZNU/xg0aqqjvV74Gwkbc
1TmQ+xlbiNDMAaN8EpV6+tzWpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKtkZkKL
XdnUr0QUTYtDA/p5U955MB8GA1UdIwQYMBaAFD5C0zNKHOGInfxn5C32KFghhSUZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTM5RS9DQTMxNjg5NjQx
RTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZaWRfR2ZrTGZZb1dDR0ZK
UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BrTFRNMG9jNFlpZF9HZmtMZllvV0NHRkpSay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTM5RS9DQTMxNjg5NjQxRTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZ
aWRfR2ZrTGZZb1dDR0ZKUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA0vbWx85ue+y6KqE5Jg8TrIaMBUdn2IUhTppo4RQ6I0UtvP26prLGt0bLSkBh
J0drIb/qHaYn/7UrYbB0U4bna9jKiIWV5Wc9pQo14+niiovJUj1ObfeC6k/d5FHH
i9vhP1V5NFSWPT6jDy2EV8oKAdZC1DcWrO7q3/m8knXXG3wWIKTxpMPMPU6rYLK1
gaLnGpNjvBaHgeR0EHJAJIvhv7Ajl4wJ3/oXzkGLrvdYs1U2WB+2/ij83I3HbVkq
A49Sm1/8inFM2n87hCZv8Hv0tQnZ5HDzOSR4GEppTFEJTYq0TWzplF/jCMDFYQjF
/w/k4nKl4Pjyzzzxk09qPlJHuw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:47:59 2026 by rpki-client