
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft
File: 15qMdwXiQZ6rQpU7a8ilcga6xiY.mft (raw, json)
Hash identifier: TZp2DPMhBr5HjrZ9sehMF5l8FSbXeiKox45Qudh7DGU=
Subject key identifier: D1:34:89:5A:3A:40:CE:56:9C:9E:7B:77:7C:D3:17:09:2B:70:5A:E9
Authority key identifier: D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26
Certificate issuer: /CN=A91BADCE/serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626
Certificate serial: 0551
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft
Manifest number: 0541
Signing time: Thu 16 Apr 2026 23:24:50 +0000
Manifest this update: Thu 16 Apr 2026 23:24:50 +0000
Manifest next update: Thu 23 Apr 2026 23:24:50 +0000
Files and hashes: 1: 15qMdwXiQZ6rQpU7a8ilcga6xiY.crl (hash: eEjjHLz/W8FFjs8GXzli4ssGLkFk5fKhgs/GycEyfoE=)
2: 4BD423FE3AF911EC918C643AC4F9AE02.roa (hash: lYuc7KAwDmnwAL+8k2Ka5IK1fQ2BuQOjBbbuBba3h5c=)
3: 56C4925E3B0711EC9715501EC4F9AE02.roa (hash: t3chBruHTyyhjmWGr7PACIhRpSOcddPnItF52cMQU50=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl
rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1361 (0x551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BADCE, serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626
Validity
Not Before: Apr 16 23:24:50 2026 GMT
Not After : Apr 23 23:24:50 2026 GMT
Subject: CN=69e16fc2-f753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:83:55:8a:4a:0b:e0:b8:e7:94:cb:22:28:bd:
8b:94:71:9a:f5:6f:3f:0d:b4:83:b0:5e:dc:0d:93:
60:d4:13:1e:3a:34:cf:79:7d:ca:37:47:ab:a1:4a:
f9:a5:a7:f7:7e:f8:be:b2:f0:be:03:5c:13:01:83:
de:b2:4c:cb:c5:a6:2a:c6:a8:e1:ae:a2:ee:b2:1c:
2b:d0:29:2a:17:d6:30:f7:92:30:81:f7:11:3a:8b:
7b:b5:2a:be:a5:5f:84:c1:5a:d5:be:75:43:ef:e3:
1b:a0:13:f9:4d:f5:de:19:85:e7:a9:44:57:ab:f8:
58:d8:1b:01:b7:1c:14:9c:45:1d:4a:2d:d8:67:99:
c2:d9:68:b3:95:4d:72:46:38:dc:25:0b:d8:86:38:
d8:dc:fb:1f:b9:e4:0e:f5:da:35:8b:12:53:36:e1:
8e:a8:94:00:a6:fb:59:07:8f:5d:e2:da:02:53:f5:
90:12:33:30:f4:07:51:a4:7c:e9:df:bd:bd:49:02:
1b:00:72:00:92:74:38:d4:dd:5d:11:e8:17:40:7a:
2d:1e:9a:c4:a2:06:1d:08:b9:fc:9d:02:7f:9a:2a:
3e:28:57:4f:9f:df:27:fc:ed:bd:27:41:e5:09:86:
ca:22:13:a8:02:d0:de:2e:38:04:3e:86:72:00:c5:
79:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:34:89:5A:3A:40:CE:56:9C:9E:7B:77:7C:D3:17:09:2B:70:5A:E9
X509v3 Authority Key Identifier:
keyid:D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:88:5d:58:ae:91:9d:00:25:f7:6d:df:54:fb:85:b2:b8:2d:
ed:39:ba:a7:79:60:3b:d8:81:f4:e6:0c:7f:eb:b4:ae:50:a6:
0d:3b:13:73:b0:a4:39:7d:7b:da:bb:b2:8e:ec:05:6b:15:ad:
4e:89:65:e5:fd:89:ab:19:b3:5a:15:cc:1c:c2:df:51:53:b1:
28:01:e1:a9:46:a1:20:13:83:46:11:c6:f1:e2:b6:6b:b4:11:
97:50:c7:d1:bb:fa:e7:86:f0:2d:fd:17:fe:59:41:0d:d8:88:
11:1a:ae:9e:de:29:b8:c2:56:35:4b:96:2e:05:e6:8c:91:f4:
9c:81:4b:17:b2:2d:4d:c1:7c:42:e0:65:9c:14:eb:3f:96:56:
0d:e7:95:67:89:45:40:22:f4:72:66:08:95:d3:4c:eb:5f:8b:
fd:33:f0:fd:48:4d:35:da:8e:22:5f:8d:54:cd:2e:14:f6:ed:
60:b7:a3:89:a5:71:c9:f1:40:fb:b4:dc:ed:ea:17:ba:1b:fb:
fc:a1:77:a4:3f:ae:8c:c9:e0:ab:96:e5:e8:c8:c6:12:e0:4e:
72:c9:cf:e5:90:17:cd:2e:6b:a6:f5:f0:c9:ef:b4:3c:b0:80:
c1:30:83:98:6a:01:b7:3a:12:49:b3:40:be:f0:37:fc:38:6d:
a1:32:9f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:46 2026 by rpki-client