
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft
File: 5nV74dIYmt6NdyyclIZDEL45LXA.mft (raw, json)
Hash identifier: feJ8ZTEcGvN7rTTbQ2hpIt91rUiptee5+XA1ESwWzHY=
Subject key identifier: 5A:E8:FE:46:61:1F:66:A6:84:93:27:A9:72:B2:B3:58:5D:2C:03:4A
Authority key identifier: E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70
Certificate issuer: /CN=A9111F9E/serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70
Certificate serial: 0504
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft
Manifest number: 04FB
Signing time: Tue 24 Mar 2026 23:23:03 +0000
Manifest this update: Tue 24 Mar 2026 23:23:02 +0000
Manifest next update: Tue 31 Mar 2026 23:23:02 +0000
Files and hashes: 1: 5nV74dIYmt6NdyyclIZDEL45LXA.crl (hash: NP1EZr178ZF6hu6W/ElZpPd/9iZNWfk4IjhDR3F7Pjk=)
2: 2B70BBE889E111EEB5E86A0EC4F9AE02.roa (hash: S8mSCYC1fazngOOlj1xK5GS7GQANV8XiC0agMaH8g+U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl
rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1284 (0x504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111F9E, serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70
Validity
Not Before: Mar 24 23:23:02 2026 GMT
Not After : Mar 31 23:23:02 2026 GMT
Subject: CN=69c31cd7-96cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7b:5d:7b:fe:89:86:87:96:63:38:c9:82:21:
89:21:1c:b2:ed:da:87:e6:68:b6:45:b2:3e:23:f5:
05:bf:46:e8:07:c1:6c:bc:c9:b4:2e:7c:eb:1a:dd:
d3:07:78:a6:db:a8:2b:2f:a8:43:c8:40:6e:8c:a1:
f8:bc:9f:ea:99:bf:a9:4d:ec:23:07:43:7b:4a:62:
19:e4:80:28:c4:d2:ac:72:6c:3a:e7:0a:2b:1c:e3:
0e:61:d7:1e:16:d5:2e:12:c1:33:c7:e4:e8:a9:88:
43:f3:a5:a7:08:cd:9f:c7:89:d8:be:f6:7c:93:44:
0d:10:87:56:c4:9b:13:22:55:c9:fe:4f:74:45:f8:
25:2e:c5:be:7b:0d:b3:61:11:ce:38:69:f3:be:f1:
5c:46:1a:9d:67:3c:d9:24:06:d8:cb:33:58:51:71:
a3:f0:14:6b:8c:dd:23:9d:ba:7f:3d:22:9d:a6:a9:
1b:45:c1:ae:ab:33:22:f0:9b:5b:87:d2:e3:27:b7:
4b:4e:5f:08:54:f3:8a:19:3e:a8:2e:73:e8:2d:dc:
b4:89:20:b4:78:9d:0b:e0:c6:5e:c9:81:da:22:9d:
bc:e7:59:73:02:b7:3e:fb:ea:53:94:17:b6:89:89:
26:15:e3:69:ad:0b:8d:ec:81:fc:69:e2:f9:ce:6e:
91:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E8:FE:46:61:1F:66:A6:84:93:27:A9:72:B2:B3:58:5D:2C:03:4A
X509v3 Authority Key Identifier:
keyid:E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:75:af:c1:0a:46:61:01:1d:3e:11:e0:15:aa:e6:f1:14:d2:
af:b6:88:5c:df:0d:04:28:3a:c7:72:e6:d0:53:8e:82:97:dc:
4e:b9:ae:88:b7:34:f8:5c:a0:54:0d:d5:69:53:95:76:fd:bb:
b3:3a:4c:42:1b:9d:0c:04:45:e6:53:f5:37:c8:a3:40:c8:b3:
20:0f:26:12:ca:ff:00:66:7c:54:8f:b9:12:99:9b:2e:1e:59:
ab:c6:de:c1:13:3d:f2:60:7c:79:d7:07:7f:f0:64:8e:90:ff:
b6:a9:62:37:5b:71:71:17:3b:94:ec:8d:f0:86:ee:4f:97:69:
e5:5f:ac:bf:4b:b6:c1:47:92:a4:98:e9:e4:cd:ae:2f:15:d2:
7c:22:a7:47:d6:d6:6a:0b:4e:1a:18:72:21:3c:f4:ad:19:09:
c1:86:09:66:c3:73:c9:17:1b:ab:24:26:02:a0:e9:f8:0c:7c:
78:ad:76:21:ad:fe:23:d2:88:a1:78:1c:07:ee:ed:b0:d1:d0:
95:f3:76:27:30:fc:29:e2:b2:6d:01:06:a9:73:88:5b:cf:a7:
2f:ba:87:3d:17:85:21:9c:63:22:65:76:17:68:32:e3:cf:b6:
74:c7:c1:ea:c5:4e:fb:7c:80:e5:b6:ba:7f:88:59:f8:f8:e5:
b5:e9:e0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:47 2026 by rpki-client