
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft
File: -KpwkWtspYPANj63qaX38mJ9c2A.mft (raw, json)
Hash identifier: 1Yla6sjLtG1kW5Mzr2u+JI2GqgNHfD+5hy33GlQd0/0=
Subject key identifier: AF:76:E2:9F:C0:44:DF:2B:4A:FE:8E:45:2E:01:77:10:FA:61:24:36
Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60
Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360
Certificate serial: 273B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft
Manifest number: 2605
Signing time: Fri 12 Jun 2026 15:43:37 +0000
Manifest this update: Fri 12 Jun 2026 15:43:36 +0000
Manifest next update: Fri 19 Jun 2026 15:43:36 +0000
Files and hashes: 1: -KpwkWtspYPANj63qaX38mJ9c2A.crl (hash: +nKSw8j/tZhxwvkcw1gczvphi1IXeevJNkp6ZMyXC9s=)
2: CFF5A20078E011EC8357FA15C4F9AE02.roa (hash: Dg/YVoaAbQDeMOZ225L2eC6YXpKJAjiybrKz9YFG+0w=)
3: 86D13B7E571C11EC81276481C4F9AE02.roa (hash: EsFL7ZLG4qzCWyTx81VJ4FIJ+vovxCZrLT1BVweKgqc=)
4: 9DBB8670790211EC9EE24885C4F9AE02.roa (hash: 8YUEuPh3TxbLBkrRsi2o2BfYfS5T4DERKvY1wpAF8Lg=)
5: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (hash: uifIApbHfV42HS+k8rHXkfR4eC5owLbdOciccVTBlF8=)
6: 63C97CBAC49E11EBAC936D7AC4F9AE02.roa (hash: AHfY7AUJpWe7BNWUNT/uLmoUme06v0hAUNHbmnBADSc=)
7: 15812F82C4A111EBAE6C7F49C4F9AE02.roa (hash: 1rZWgbUmjxQN06CeOuGX07QdWjTq8x0pS2P/AZOZPKA=)
8: 6E042EFCABF011EC92152E22C4F9AE02.roa (hash: Spot7p9zSNAAsEMFmZpLPx1zmvfxVQZv9xfzDFvYL6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl
rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10043 (0x273b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360
Validity
Not Before: Jun 12 15:43:36 2026 GMT
Not After : Jun 19 15:43:36 2026 GMT
Subject: CN=6a2c2928-98ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:0b:54:f8:d7:8b:03:65:af:78:7b:ea:b1:
fe:cf:45:c3:60:52:a0:f9:1f:8f:34:9c:84:e2:4b:
a1:9c:29:f4:eb:40:a0:16:d9:79:69:17:40:15:b4:
62:c0:6a:f4:3d:01:c2:28:ed:0c:1c:27:46:9e:18:
2d:9f:33:2b:b9:02:34:4f:72:f6:4f:d6:30:55:7b:
ad:d6:4c:5a:4c:3b:de:c9:3e:e6:61:d6:d9:af:5f:
0e:85:e2:b1:94:8f:d5:03:34:eb:56:de:2e:4a:f9:
30:4f:b0:d4:70:a5:4d:c5:17:8b:f0:4f:0a:78:7e:
86:6f:f8:33:cc:d8:24:b2:da:12:5d:13:16:15:41:
67:6b:00:65:0b:ab:51:9f:53:6b:07:2f:e6:e3:69:
2c:eb:ef:72:b0:70:d3:d1:84:bb:c6:82:78:09:22:
90:b1:a5:01:11:ef:59:cc:a2:7e:e2:7c:c8:d6:73:
54:f3:b4:53:4f:f6:c7:53:bf:8c:4c:35:7a:3b:1f:
45:ac:c5:01:a2:3e:94:95:b1:72:47:27:f1:d1:e5:
c6:fc:a5:f3:40:67:b5:a8:b9:dd:37:b6:61:a4:52:
9e:44:52:c5:3c:13:7d:a5:f0:d0:7f:23:76:5a:37:
56:bb:27:65:7b:22:d4:1f:82:7c:5e:8b:9b:9c:1c:
4f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:76:E2:9F:C0:44:DF:2B:4A:FE:8E:45:2E:01:77:10:FA:61:24:36
X509v3 Authority Key Identifier:
keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:54:f0:7f:02:28:fc:b0:7b:49:09:17:32:b2:8e:d2:aa:84:
0a:26:82:b7:3d:9c:a3:b5:b0:14:ff:00:d0:e1:a0:ba:a2:b4:
b1:fb:ad:ed:79:44:7a:61:a1:51:67:24:14:05:f8:a6:a0:68:
35:9f:1b:da:6c:c4:c3:19:24:51:db:61:60:61:67:6d:80:8e:
d3:e0:ad:ff:39:a4:36:c4:64:62:88:21:43:11:22:e3:7c:19:
a6:bd:47:0c:28:b6:99:4e:62:ee:bb:66:58:aa:96:35:ed:75:
4c:ef:ef:9a:b8:9a:2a:9f:1e:03:f2:9d:df:5b:a8:80:36:38:
a3:5d:c5:2c:f2:3b:a4:24:b4:99:29:ef:bf:12:65:f5:9b:d4:
07:5f:6c:b7:58:d0:7f:f1:3b:ee:58:03:d3:23:3e:61:4f:dc:
83:b3:b7:d9:9d:59:de:43:bb:d5:07:22:18:e9:56:93:4d:5b:
71:ab:d9:15:2f:24:6f:a8:ab:22:ce:b9:7e:aa:e7:70:4e:7b:
93:17:e8:ef:7f:93:a5:16:ca:89:6b:10:97:e1:4f:0c:e0:d1:
0c:74:68:f4:ba:a5:77:0c:eb:c7:b3:cf:30:39:a8:9f:bf:fd:
f3:64:d6:c0:6b:46:77:52:cd:a9:c8:00:9a:a3:71:cc:52:81:
9b:2e:32:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:19:41 2026 by rpki-client