
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft
File: 15qMdwXiQZ6rQpU7a8ilcga6xiY.mft (raw, json)
Hash identifier: xih/Nq1JyYeFxuaqrbZ6GqsUhoM5Gc5hmTWiLbH1KoY=
Subject key identifier: CB:DB:59:F3:50:26:B3:2D:CE:24:B4:41:33:24:3F:2C:FD:1B:BA:B5
Authority key identifier: D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26
Certificate issuer: /CN=A91BADCE/serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626
Certificate serial: 0535
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft
Manifest number: 0527
Signing time: Mon 02 Mar 2026 00:22:01 +0000
Manifest this update: Mon 02 Mar 2026 00:22:00 +0000
Manifest next update: Mon 09 Mar 2026 00:22:00 +0000
Files and hashes: 1: 15qMdwXiQZ6rQpU7a8ilcga6xiY.crl (hash: cVW6C7nnKvOPoGeL3iEAJaCNOl88hhPaeWbo4zDmmUU=)
2: 4BD423FE3AF911EC918C643AC4F9AE02.roa (hash: OWs47VxIEQ1QhlgbrlxvKW4VXn5SiZ0ruC9D8eNOYWY=)
3: 56C4925E3B0711EC9715501EC4F9AE02.roa (hash: 3/W6rA2EZQ9LTmSbpHpq8E02n0iBtefklJIZbF4CvQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl
rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1333 (0x535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BADCE, serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626
Validity
Not Before: Mar 2 00:22:00 2026 GMT
Not After : Mar 9 00:22:00 2026 GMT
Subject: CN=69a4d829-9136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d9:21:60:53:10:d4:2b:64:ea:08:9e:0d:ad:
b0:8e:7d:4d:b6:7d:06:3f:52:33:02:4c:b7:9c:97:
37:a1:b9:94:cc:92:9e:06:a0:ba:fa:5b:a5:7d:60:
a6:69:5e:03:ff:f0:07:53:9c:30:fa:04:f8:e6:ac:
66:99:66:16:5d:8c:53:c0:0c:30:b7:19:e5:01:d5:
eb:2e:03:b7:3d:ee:c3:b4:3a:28:39:04:ea:57:dc:
91:d5:a9:c1:fb:13:ca:8e:70:3b:86:32:b2:59:fb:
a2:c1:7c:a9:26:7b:52:cc:f2:08:e8:51:cc:c5:08:
45:3d:c1:01:ff:7f:d0:b4:8c:ed:b9:2e:5e:3b:81:
c3:b8:47:d0:eb:b0:91:6c:9a:b2:ac:29:da:7c:bb:
12:70:d6:65:db:ec:6d:81:0f:f7:64:c5:40:a5:8a:
a4:ba:97:d6:96:c8:95:f3:05:47:3f:97:f8:4e:2b:
50:eb:f6:0b:d2:0b:ce:d3:bf:71:6b:3b:03:1c:5f:
16:da:0d:63:31:19:e8:e7:0c:49:5d:a7:1a:45:32:
37:06:b6:52:b3:ac:26:bd:e3:80:41:76:ea:df:a1:
39:a1:5b:00:21:bb:87:b1:50:85:a3:2c:df:a2:4d:
ad:1c:92:d6:6b:11:2b:69:92:5b:9c:84:16:4b:80:
e4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DB:59:F3:50:26:B3:2D:CE:24:B4:41:33:24:3F:2C:FD:1B:BA:B5
X509v3 Authority Key Identifier:
keyid:D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2f:63:0d:68:39:6b:cd:f2:1e:27:8b:0c:c5:be:bb:cd:7e:
bd:03:ab:04:ef:e8:d3:85:55:9b:5e:f2:49:eb:b4:23:f1:b6:
b1:8c:8e:78:7d:20:7d:26:ab:40:c1:c2:98:83:41:d2:2d:b5:
cd:9d:56:fd:46:18:41:fb:79:6c:99:1d:2b:1c:95:db:f1:1b:
c0:03:f3:b2:cc:04:eb:9d:6c:3a:e0:be:14:03:d2:26:5a:b4:
17:58:d3:a8:d4:fe:87:ef:cd:48:cb:e2:31:26:a3:dc:f2:b7:
cf:41:82:8e:9f:13:49:f8:0d:42:04:a1:81:e4:a3:13:85:e4:
f4:7f:5d:fd:be:e9:8a:83:1b:3b:0e:8f:cf:9e:f6:06:bc:2c:
f1:e9:ba:07:0f:e4:16:61:9f:03:2d:bf:38:d4:2f:51:79:40:
d3:bb:3b:0b:55:fb:b1:18:6c:60:2e:3d:e3:91:77:3f:58:e7:
30:64:83:fe:30:29:3d:54:ba:61:f5:87:85:72:74:61:c6:f4:
fe:04:3d:4d:a9:13:b5:6a:f9:94:f9:d3:3a:6d:2d:f3:a2:41:
6b:8d:a9:c5:f5:d3:c6:b4:d0:a1:20:47:27:25:64:b4:4b:34:
a5:01:56:3b:31:d0:06:11:91:c2:65:8a:a7:1d:65:d7:43:40:
96:cc:ed:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:48 2026 by rpki-client