
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft
File: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft (raw, json)
Hash identifier: LSyjLMVNsa3B3i2pcbp7hY9HverTTn78a6hfaMak5jg=
Subject key identifier: 40:30:A5:A2:61:5C:98:49:C0:19:FA:16:60:3D:B9:73:CB:66:C9:F1
Authority key identifier: 07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D
Certificate issuer: /CN=A915D1F2/serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D
Certificate serial: 1231
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft
Manifest number: 1225
Signing time: Sat 18 Apr 2026 17:02:54 +0000
Manifest this update: Sat 18 Apr 2026 17:02:53 +0000
Manifest next update: Sat 25 Apr 2026 17:02:53 +0000
Files and hashes: 1: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl (hash: XDJm92eT+vtsd4Yef0EsjZWzd54uoFzh1U+7beFJhpE=)
2: 9467361CFEAA11E89E73E75BC4F9AE02.roa (hash: rSIn+ZNNC6xv6esvJccL4Qb3tpchRQqRJ3vtYusQf6M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl
rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 17:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4657 (0x1231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D1F2, serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D
Validity
Not Before: Apr 18 17:02:53 2026 GMT
Not After : Apr 25 17:02:53 2026 GMT
Subject: CN=69e3b93d-4429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a7:d9:1b:e2:04:1d:15:b6:68:ce:65:31:d6:
41:72:56:61:d0:46:0f:ca:86:2a:f4:b7:a7:f5:67:
a0:e2:44:ce:53:a0:46:b9:22:b2:17:a7:2c:3b:00:
25:16:bd:33:dc:9e:a1:2a:bb:3a:ee:e5:6f:fa:f7:
56:0f:05:49:46:e9:1f:a0:40:a7:a9:03:72:f7:08:
a4:c3:f5:ca:d9:51:07:4e:77:bb:33:db:07:e3:37:
a6:21:8e:56:57:03:f5:8a:e5:25:7a:08:bc:c3:0a:
ac:99:94:dd:df:91:73:c2:af:be:b2:4c:d3:93:b6:
45:91:f8:3c:a1:69:6e:92:76:49:92:fd:57:5b:a2:
d2:65:91:42:4e:ba:72:70:73:09:99:56:e0:dc:51:
7e:14:47:f1:42:ca:39:0e:cb:41:cc:6a:fe:cf:76:
e8:e6:27:9d:e9:9d:de:25:aa:5b:24:39:75:ad:d3:
75:fd:22:48:42:fa:e9:9c:ee:35:b2:fd:0d:11:12:
84:5f:2e:ff:e4:e0:61:a4:31:25:83:79:3a:73:14:
2d:37:c5:14:ad:c6:5a:a5:f4:c4:90:26:df:c0:ae:
b9:d2:d0:a2:18:ee:91:d7:69:63:e0:40:85:d2:89:
9e:6b:32:a3:f1:a8:ea:62:58:46:a1:1a:7b:63:f7:
3a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:30:A5:A2:61:5C:98:49:C0:19:FA:16:60:3D:B9:73:CB:66:C9:F1
X509v3 Authority Key Identifier:
keyid:07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b3:3b:9d:0a:b1:4b:40:5b:9a:d6:95:c5:ba:53:4c:64:52:
f6:20:5a:f3:97:18:e9:8d:fd:85:0a:d5:8a:0c:fe:81:e2:5b:
bf:05:3a:1a:f7:c5:4c:77:b7:42:8d:46:eb:63:49:a4:25:97:
a2:ca:87:61:95:20:12:89:b6:e3:95:d0:56:a5:17:48:8b:76:
08:4a:99:03:56:e1:26:b4:63:19:02:08:28:74:86:ff:53:4b:
62:d9:4e:53:6f:12:02:f5:1d:1f:60:6f:5d:0f:97:fb:8f:fe:
97:fb:93:b9:1c:2a:6b:3a:35:f7:a6:3f:37:d1:23:3f:f9:1f:
0e:f0:c1:d6:56:bd:3e:98:f9:09:73:5f:96:09:63:b4:36:29:
4a:b9:04:de:f4:82:23:d1:62:cc:71:25:12:62:a9:d5:1e:48:
d3:17:40:20:d3:71:e9:37:4c:cb:ae:fc:6b:1e:be:76:1b:00:
0b:c5:bc:a2:aa:c1:8a:f9:80:8e:f7:26:09:0c:2a:45:ef:dc:
27:39:cd:ee:f1:42:23:13:27:52:b1:d5:80:27:58:3f:e1:b5:
0c:cf:3c:73:95:61:25:6b:7a:f9:09:43:48:f2:46:e2:12:fa:
f2:66:bd:cb:ad:92:f8:ec:41:00:54:6b:5c:9a:f4:eb:4c:fc:
18:3e:f9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:40:16 2026 by rpki-client