
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
File: b09GjkMIsA0N9f6shChm1U539dM.mft (raw, json)
Hash identifier: +PZTh7LM8xGLWGN5l5sga1uej8GHVZN80OqdUrZcN8o=
Subject key identifier: 05:21:63:53:DE:B7:30:DB:B2:DC:84:3D:D8:A6:69:7A:BC:15:AA:17
Authority key identifier: 6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3
Certificate issuer: /CN=A915D1A2/serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3
Certificate serial: 0D22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
Manifest number: 0D03
Signing time: Thu 16 Apr 2026 18:12:26 +0000
Manifest this update: Thu 16 Apr 2026 18:12:26 +0000
Manifest next update: Thu 23 Apr 2026 18:12:26 +0000
Files and hashes: 1: b09GjkMIsA0N9f6shChm1U539dM.crl (hash: N8d4hrLdzqh7rwe6sYR8IL3CnJOGVnpBxUWUGZS1Qhs=)
2: 199C4122356411F199EC77DFBA833773.roa (hash: JhY9Gylrwf6imONEZB/excsXAHceemOqJE8FFpSCvWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl
rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:12:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3362 (0xd22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D1A2, serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3
Validity
Not Before: Apr 16 18:12:26 2026 GMT
Not After : Apr 23 18:12:26 2026 GMT
Subject: CN=69e1268a-002f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0c:40:d2:60:97:b8:9e:7c:08:b6:13:56:3c:
d5:4e:2d:8c:32:f9:47:99:34:83:15:8f:94:f1:3e:
5a:2a:58:db:ef:73:0d:1d:1f:11:e6:bb:76:e4:98:
4a:98:30:89:2b:fc:a4:38:0d:6d:11:48:cf:89:d7:
50:2c:65:44:62:6f:83:c3:fd:b5:92:74:ed:14:c2:
27:d6:8a:19:c4:1d:6b:c6:5b:60:1d:13:59:45:ba:
ff:da:70:dd:c4:ba:dd:62:45:ab:27:d7:31:25:b6:
a7:f9:01:c5:2c:8c:fa:01:4a:5e:83:ee:c4:dc:ff:
73:f7:93:8a:a9:34:3b:1f:dc:ec:5f:83:e8:c3:9b:
11:e5:4a:89:13:a6:f1:41:cc:aa:18:e2:b1:41:65:
d0:52:9c:cf:86:85:68:3c:dc:a4:ad:a4:b3:2f:3a:
ce:fd:a7:70:10:ad:87:c8:25:10:17:a1:f9:d6:01:
95:b8:ec:e6:e8:99:74:56:a9:96:c6:ba:13:f5:a7:
69:94:b6:b4:0c:e3:6d:f3:a4:62:f5:dc:d2:3a:e2:
57:0c:5b:d6:fd:f3:9b:ec:cb:19:7a:45:0e:54:05:
09:94:81:e4:02:00:c6:84:d4:e8:8e:1c:de:62:30:
6f:09:e0:d3:74:15:d1:a1:d2:b6:8d:d5:c3:ce:86:
65:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:21:63:53:DE:B7:30:DB:B2:DC:84:3D:D8:A6:69:7A:BC:15:AA:17
X509v3 Authority Key Identifier:
keyid:6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:1b:71:8d:e0:c8:3f:f8:11:29:7a:86:e3:8b:56:02:89:85:
a7:05:03:6f:fd:cb:50:9c:2c:00:e2:e9:4b:63:7e:9f:06:60:
97:e1:80:db:e5:ed:04:5c:97:d5:b2:70:b3:85:73:20:13:dc:
d1:b5:62:61:34:61:1e:cb:21:c9:cb:e8:67:37:f2:2b:7c:98:
eb:d9:45:04:80:c5:c8:cc:53:81:70:9e:8e:7d:f9:12:ed:78:
25:98:72:e2:64:24:54:97:a8:b9:80:a0:b0:6e:aa:de:55:74:
29:e6:5d:9b:37:79:b2:40:86:91:da:ea:89:25:d6:1b:6c:f2:
34:db:ce:d7:46:9b:89:d4:6d:8b:cc:4a:53:6f:22:33:18:bd:
83:4a:9a:17:db:fd:fe:04:36:73:fd:95:7e:5f:f8:a8:d9:57:
7a:ef:da:f8:1a:55:20:b2:23:27:40:22:a3:1f:8d:62:7a:78:
b3:b8:52:aa:ab:c4:5d:f8:47:90:d6:c3:b2:02:d7:8a:4a:d5:
0e:e2:90:b9:27:8f:07:2c:a9:42:c4:3b:59:e1:0a:59:b1:7c:
fd:38:4a:91:f9:cb:ea:6a:38:b1:71:6a:41:92:b9:05:39:43:
b8:fa:65:86:6e:e1:16:ff:d0:ff:d8:b0:6e:f2:98:4f:cc:19:
f0:8e:46:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:59 2026 by rpki-client