
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
File: 15aZWndnWcQmQxeAAofr7u-0umo.mft (raw, json)
Hash identifier: oz1/0XDHSh8OeqSle/G79IeylPRWA0WpVORnE4fxGrY=
Subject key identifier: 55:80:CE:D7:0F:FA:E7:B3:2B:E6:98:D0:EA:87:54:C9:E1:28:C6:14
Authority key identifier: D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A
Certificate issuer: /CN=A91C022C/serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
Manifest number: F5
Signing time: Fri 17 Apr 2026 06:41:22 +0000
Manifest this update: Fri 17 Apr 2026 06:41:21 +0000
Manifest next update: Fri 24 Apr 2026 06:41:21 +0000
Files and hashes: 1: 15aZWndnWcQmQxeAAofr7u-0umo.crl (hash: XBzyvqRZ4yihNWhoIu6cE1dGvVVQ6DNrHetqDhWzh84=)
2: B6CFF1B2D5F911EFB9B1055CC4F9AE02.roa (hash: 64GI0jvZyfRwaaUyqyoO9+bG/AmsXG/f9aCo9uCRhhE=)
3: 90405CE2D5DD11EF99075D78C4F9AE02.roa (hash: JQiJdIpN3R5SOAUVHjnNQhCnZmq0gQJLMPrdXEKGdyA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl
rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C022C, serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A
Validity
Not Before: Apr 17 06:41:21 2026 GMT
Not After : Apr 24 06:41:21 2026 GMT
Subject: CN=69e1d612-47b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f1:bc:b8:1f:36:36:7e:13:11:bb:91:03:f0:
86:ec:f2:ac:4b:31:45:ce:8c:68:7e:83:39:41:ae:
08:1d:43:7f:98:43:79:31:e2:66:f3:9c:21:1c:c6:
8d:28:14:c9:b9:1e:16:3e:51:fa:66:a5:f5:1a:66:
b1:97:d6:1b:cc:9f:bb:16:69:55:da:fa:11:95:b7:
f6:38:06:73:ee:26:ae:5d:a9:c1:15:4a:96:f2:9b:
fe:33:0e:99:70:2e:c7:fd:13:1d:45:fe:3f:72:c1:
73:d9:ab:d0:46:0c:bf:6d:1c:b9:6d:d2:a7:3b:8e:
ef:59:4f:e8:01:8d:62:13:9b:07:6d:8f:d1:de:50:
80:0f:83:a0:e0:70:93:fb:0b:22:f9:03:26:e3:d6:
dc:0f:bf:09:18:c3:88:99:37:10:f2:bb:9d:30:21:
a4:52:ec:7a:8b:3d:03:49:d2:6f:76:d1:d4:a9:5b:
fd:5a:6d:92:9f:dd:e1:0b:a0:a0:e0:ef:30:c8:d6:
c3:d6:38:f3:4c:f4:8e:92:d6:87:ea:35:d1:2d:85:
b2:0b:2c:2b:8d:0c:db:7b:7e:73:58:2e:bf:ef:7d:
b8:d6:2c:0e:03:a5:5e:1d:85:bb:6a:fc:74:25:23:
a2:58:17:29:3c:98:3c:ac:34:09:56:02:da:1e:77:
f7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:80:CE:D7:0F:FA:E7:B3:2B:E6:98:D0:EA:87:54:C9:E1:28:C6:14
X509v3 Authority Key Identifier:
keyid:D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:09:22:c7:4c:c5:fe:72:46:eb:0e:a3:d8:fa:9d:57:a5:ab:
03:be:da:e0:37:d8:50:1f:4e:f7:82:5f:a6:7f:b7:3d:74:ea:
33:d4:4a:cc:d8:89:60:d2:6e:a6:bc:1c:dc:b6:bc:f6:00:dc:
b9:1a:ab:e0:45:65:04:45:2c:9b:34:7a:90:7c:f6:c7:f2:cb:
3c:23:be:0e:54:37:57:c4:85:72:7d:19:24:cd:f3:f4:e2:66:
01:26:23:54:b0:25:3f:39:67:48:92:fc:07:fb:a8:43:c2:37:
b2:fb:df:54:55:7c:ad:94:a1:45:ee:04:a8:65:9c:27:7b:36:
cf:cb:e2:d0:c3:2a:dd:34:65:2d:db:d8:f0:67:e4:c8:8e:f4:
45:fa:e3:22:e0:51:27:76:e8:74:9e:7e:8f:b4:24:55:e8:e6:
bc:91:a8:f0:15:73:10:27:ff:18:1c:a7:75:6e:72:0f:a8:d5:
13:ae:1c:fe:e7:96:78:c6:b2:ea:81:af:c6:a4:e3:03:75:3e:
ac:9f:ef:f1:10:ca:f9:d3:2e:74:dd:78:e7:de:eb:93:6c:c2:
2e:a3:8e:52:91:42:41:92:31:dd:29:97:51:73:92:0f:8e:cc:
02:a9:9c:c5:2c:9b:0d:df:e8:29:25:66:6b:1f:4e:5a:72:89:
1a:73:74:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:48:05 2026 by rpki-client