
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
File: L904BNZFjq8cs5F7XjMvulxxX5E.mft (raw, json)
Hash identifier: /Xjv3uYQwRy+++/3hcyOK4sWqvdYfA8aetuMIkATpzo=
Subject key identifier: 3C:87:5F:CD:F9:FB:EA:D7:A6:59:08:EB:2E:6D:BB:6C:11:A3:60:51
Authority key identifier: 2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91
Certificate issuer: /CN=A915B551/serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91
Certificate serial: C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
Manifest number: BE
Signing time: Wed 15 Apr 2026 06:33:19 +0000
Manifest this update: Wed 15 Apr 2026 06:33:19 +0000
Manifest next update: Wed 22 Apr 2026 06:33:19 +0000
Files and hashes: 1: L904BNZFjq8cs5F7XjMvulxxX5E.crl (hash: vsh2hdyR34TrhHxNHj1pnuR1oOLpxG8Zzg3bVsL53SQ=)
2: DE917E7016C511F085B4FF6FC4F9AE02.roa (hash: ETq/ueZ+moHz6omb3XVGSrkGJeYMxT06+9CG44Ybvps=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl
rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B551, serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91
Validity
Not Before: Apr 15 06:33:19 2026 GMT
Not After : Apr 22 06:33:19 2026 GMT
Subject: CN=69df312f-2ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4b:4f:9d:88:1f:54:8e:e3:90:9e:5f:1a:46:
35:cd:f3:5f:cf:55:96:dd:9c:12:a3:37:62:df:04:
3a:2e:57:89:02:fb:0d:75:22:ab:3f:98:ca:c0:df:
09:63:75:74:a1:ce:e4:35:27:fd:a6:89:f8:0b:83:
20:f2:8e:66:85:c3:f3:71:10:67:de:9a:da:7a:f7:
d3:ae:d5:d7:29:83:a7:d6:91:84:22:57:36:f4:d9:
3d:19:82:bd:c6:5e:f9:55:4e:82:01:6b:a2:0e:69:
3c:47:c7:8f:0a:dd:b9:d3:79:57:4a:9c:da:d0:b1:
da:de:90:d4:35:99:a4:d1:e0:2c:aa:d5:50:b2:49:
1b:fc:f6:23:14:39:c1:62:44:b0:5c:0c:69:e7:db:
f5:a7:7a:b2:c1:53:35:a0:30:1d:31:69:12:30:bb:
22:b7:c4:1a:f1:d8:39:ce:d3:02:e6:1a:e2:85:6e:
0a:de:1a:d4:1a:c6:4a:b0:5e:25:8e:d9:22:66:d5:
dd:f0:52:06:59:0d:de:79:4c:cf:de:e8:b3:7f:2f:
fb:df:39:22:13:d6:d0:50:5c:1c:03:15:f3:8c:9d:
0b:f0:cc:b0:e4:8a:00:c7:54:9e:73:ba:87:93:38:
3e:93:04:27:b6:aa:05:eb:3d:93:b7:da:2d:c6:05:
54:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:87:5F:CD:F9:FB:EA:D7:A6:59:08:EB:2E:6D:BB:6C:11:A3:60:51
X509v3 Authority Key Identifier:
keyid:2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:0f:f4:5f:15:49:46:94:3d:9b:8c:7d:d1:09:c8:46:c3:ae:
77:f4:fa:71:09:35:72:f7:d5:6d:16:f6:e6:c5:ab:ec:86:b1:
4c:a6:d2:40:49:83:51:ef:e8:7d:28:82:b2:b4:89:1a:00:cb:
fe:89:d2:58:71:57:7e:4d:32:1a:f6:1c:ed:36:fa:1d:56:2f:
60:ba:75:f5:17:93:22:cb:d6:b9:1f:42:f4:e5:da:08:14:a7:
e3:ab:56:54:a3:fd:67:22:8a:77:72:8c:6a:e7:a5:82:09:36:
38:d0:9b:ba:e5:97:2b:e9:91:22:ed:a1:96:8c:a8:c5:f8:75:
04:84:64:92:90:3a:f7:75:96:08:a2:20:79:7a:55:54:e3:47:
24:29:e7:4f:a3:9f:55:81:49:4b:87:10:00:7e:7c:11:28:19:
78:99:06:0a:25:ef:e3:6c:f1:0a:97:c1:6d:99:99:bb:28:4f:
32:e0:b7:5e:6f:c7:9c:ae:6f:36:17:21:4d:12:fa:e2:de:b9:
a9:e2:49:d1:53:c9:45:c6:4b:e5:c4:31:ab:74:ae:f9:38:b8:
3f:6d:c5:a1:06:af:46:fb:91:72:b5:de:c2:c1:fa:10:cf:8a:
47:b6:94:f9:97:54:0e:d5:05:7d:31:07:d0:47:17:6e:d0:69:
5d:0b:03:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:19 2026 by rpki-client