
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
File: L904BNZFjq8cs5F7XjMvulxxX5E.mft (raw, json)
Hash identifier: t+YpQN3uIjw/RGhptwgaYay6b4PEpjLaCa2A43+RhYg=
Subject key identifier: 54:57:C2:C6:A0:41:E0:67:E8:41:90:DF:7F:E2:E5:D1:8E:0E:4D:2F
Authority key identifier: 2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91
Certificate issuer: /CN=A915B551/serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91
Certificate serial: A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
Manifest number: A5
Signing time: Sun 01 Mar 2026 08:32:00 +0000
Manifest this update: Sun 01 Mar 2026 08:32:00 +0000
Manifest next update: Sun 08 Mar 2026 08:32:00 +0000
Files and hashes: 1: L904BNZFjq8cs5F7XjMvulxxX5E.crl (hash: t6qCAbuz+2A4jdOi7H4ErIsW25spGoVjVUWbNQTeUM4=)
2: DE917E7016C511F085B4FF6FC4F9AE02.roa (hash: 92OvboQnu0AfbGHnNVWc8k1x0nqYtBas1dH8qeWSNlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl
rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B551, serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91
Validity
Not Before: Mar 1 08:32:00 2026 GMT
Not After : Mar 8 08:32:00 2026 GMT
Subject: CN=69a3f980-0025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6c:59:3b:4a:45:78:55:c0:03:91:83:1c:44:
4b:ea:a8:85:71:24:f7:da:87:1a:f0:94:d7:ef:cb:
cc:a9:69:ed:6e:f3:d1:53:01:6e:c3:9c:f5:b6:4f:
3d:40:11:3a:0d:fd:13:af:11:b3:e5:cc:28:cc:b7:
4f:a6:d2:24:7f:54:65:2c:65:26:14:ae:7e:7e:9a:
b9:a3:7d:c6:de:dd:51:54:f4:22:e8:66:42:3c:74:
ca:e4:84:30:11:bc:e0:3a:9e:a9:96:07:c5:61:c0:
99:d5:ae:66:69:6f:17:36:bf:4c:3b:a0:04:5b:b9:
92:12:fb:73:ce:f2:e8:30:e8:17:3a:e5:0c:70:01:
c1:2e:1a:34:e2:27:8f:5e:31:9e:ea:82:8d:6e:d6:
00:01:d1:0e:31:29:33:cf:50:97:66:65:94:9f:d0:
b5:da:a3:05:b3:da:f9:b0:60:1e:80:a8:49:2a:d7:
68:62:81:bc:c2:3e:05:f8:3b:25:44:57:0d:30:bf:
f4:4b:ac:2e:95:81:cc:5b:3f:72:48:38:4d:3c:3f:
c7:6b:4c:44:ac:25:50:4f:66:75:fe:d0:9e:be:f9:
3f:8b:bd:a4:5f:fc:37:85:35:35:6a:d2:ec:f7:66:
e7:4a:9e:77:4f:dc:9e:d0:be:f0:a2:bc:7e:fe:2f:
7d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:57:C2:C6:A0:41:E0:67:E8:41:90:DF:7F:E2:E5:D1:8E:0E:4D:2F
X509v3 Authority Key Identifier:
keyid:2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:1e:e2:10:17:68:89:47:fe:e9:01:72:d2:e4:f7:25:25:7f:
bb:6b:b3:ea:d7:dc:74:55:c6:03:f1:77:29:c1:30:ab:fc:f3:
9d:2d:87:80:3f:5f:08:65:b0:66:ec:3f:8b:86:c0:5c:df:3e:
6a:07:0e:87:ea:df:c5:d4:cf:36:ca:69:6f:b6:ad:1c:df:4c:
82:4c:85:7f:87:b4:2d:f9:6b:ec:8b:c4:63:b5:4b:d6:f5:c4:
4a:93:55:17:9e:e2:ea:ac:da:7a:27:91:35:ac:ca:f7:d3:5f:
c8:e3:40:61:a3:b5:f2:32:0b:17:a6:d8:c5:c1:20:ee:f3:a7:
2a:c7:6c:e5:e6:1a:ca:1d:c2:a6:35:eb:54:ff:f6:ed:f1:20:
ee:86:c3:53:d9:7f:f2:49:07:f4:e9:60:cd:64:c6:9a:b9:27:
c7:cc:20:00:19:98:c4:06:5a:2d:87:e4:91:15:b1:04:5a:19:
d3:ef:0b:88:02:1e:4d:df:fa:37:93:54:13:36:21:20:6d:46:
bb:ca:34:15:8b:ec:f5:32:f4:7d:ff:c7:51:13:17:5e:c3:11:
42:da:79:b6:63:50:11:06:5e:32:13:3b:a2:c0:c3:40:ad:dc:
85:43:85:ba:9b:f5:fe:36:a5:f3:c0:e9:15:ae:28:c4:06:86:
62:aa:9a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:51:47 2026 by rpki-client