
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
File: -bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft (raw, json)
Hash identifier: 4UMUPKpNyc/9+riVRXeEsZ1oXyNdEJx24K89lzijCbE=
Subject key identifier: 4A:27:2D:EB:82:BB:AC:29:3C:B0:A1:BC:10:7F:4B:57:D0:63:95:65
Authority key identifier: F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4
Certificate issuer: /CN=A915E012/serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4
Certificate serial: CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
Manifest number: C3
Signing time: Fri 17 Apr 2026 06:38:49 +0000
Manifest this update: Fri 17 Apr 2026 06:38:49 +0000
Manifest next update: Fri 24 Apr 2026 06:38:49 +0000
Files and hashes: 1: -bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl (hash: K0Yo7vvxbsYEC1XVse9N/pbmFf+NjP8ScUsYoWDNZIg=)
2: 2857C712141411F08D862A74C4F9AE02.roa (hash: fCwPLnnKHeCfga4EZBzIKSNWWA3Do3Z4t/zNIL+OprI=)
3: 28BBA728141411F08D862A74C4F9AE02.roa (hash: P446GhZxMIH5ntaxf5uODP8HpX8PKKRVRtpeogmimzc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl
rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E012, serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4
Validity
Not Before: Apr 17 06:38:49 2026 GMT
Not After : Apr 24 06:38:49 2026 GMT
Subject: CN=69e1d579-2ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:46:af:d3:41:e4:6c:b7:62:70:43:b0:84:1c:
59:dd:71:3c:97:c3:3d:77:86:9c:78:3f:63:69:0d:
3a:02:0d:1f:c2:34:f1:b5:d5:8c:fe:80:05:f1:4c:
a1:ab:00:70:b7:7d:5c:a2:30:b6:2a:00:69:ac:39:
6e:23:fb:4d:ba:91:cc:b6:01:0a:f1:dc:5b:28:09:
fc:70:46:0d:d6:39:72:15:04:ef:9a:dc:b0:2e:04:
79:aa:a1:55:a1:6d:ad:c7:9a:10:b5:59:de:c6:e8:
3e:ed:a4:78:cc:4a:7e:8d:93:76:3b:55:0a:c6:06:
62:fa:3b:e0:ca:95:0f:ab:54:ab:53:ea:50:59:89:
64:a8:31:06:4d:3b:6d:c1:7b:ba:8a:dc:49:b3:1f:
99:bf:2d:95:fb:c4:9c:5e:08:40:e0:ab:3a:50:98:
65:fa:db:c3:1c:a3:a3:79:33:a6:6a:2a:a9:28:50:
7e:5e:3b:0e:36:d5:85:65:07:9e:24:10:73:ca:24:
21:e1:70:45:1c:c5:e1:37:07:9e:77:d2:56:e9:ce:
fa:2b:2d:3e:14:82:f3:fe:f8:6c:3e:04:b9:c2:cb:
d4:15:55:4a:b5:59:80:82:66:6f:99:03:18:91:4f:
59:d7:0b:69:e5:13:d6:68:28:0e:48:27:56:82:d7:
52:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:27:2D:EB:82:BB:AC:29:3C:B0:A1:BC:10:7F:4B:57:D0:63:95:65
X509v3 Authority Key Identifier:
keyid:F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:77:de:96:d5:c3:28:86:73:74:5f:25:37:50:06:bf:4d:9f:
f7:ef:51:c0:6b:3e:57:f7:f0:64:17:20:8d:b6:6d:ee:ce:ee:
8a:05:4e:da:d2:50:92:2f:52:5a:50:44:93:1a:9d:b5:67:4f:
31:c2:dc:8c:67:9e:a1:a0:d8:f9:34:e9:0e:03:e1:92:67:02:
97:4a:a0:2a:0e:e2:6a:71:8e:bf:d1:18:53:cb:14:e1:91:2d:
cd:b7:ea:4c:8a:fb:c8:81:6e:05:17:74:8f:3c:71:ce:62:e9:
8c:08:5a:09:db:fc:2a:69:9e:49:e3:8f:67:31:d1:48:7d:b6:
46:93:95:4f:1b:bf:50:ef:07:80:96:e2:97:41:0a:b7:8a:bd:
db:66:34:96:6a:38:8a:cf:aa:c9:ee:fb:bc:17:a4:de:28:f5:
b7:98:44:a4:06:0e:5c:10:a7:5f:7c:0b:06:e4:3b:17:27:0d:
fd:36:9a:87:cd:e8:00:26:67:9f:6b:ec:4e:e5:6c:cb:11:03:
1e:c9:24:18:8c:19:35:14:44:a0:87:40:ed:28:45:2f:92:36:
95:45:6a:5e:2f:d7:b3:06:75:e6:e3:bf:75:a2:18:ff:0f:b5:
23:80:47:c6:94:99:c3:90:2c:7c:e6:bf:10:b3:bd:87:c9:3f:
33:2c:ba:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:14:52 2026 by rpki-client