
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
File: 5DyCH7uc7qZ-unouUFzF3X92YFU.mft (raw, json)
Hash identifier: vANKiDXyuuBqn0u47Gnh1rHxPrnkoEC6cA5cYFLA52I=
Subject key identifier: 72:10:1D:EA:13:5C:D1:48:71:0F:AC:34:04:77:D6:F2:93:9C:98:30
Authority key identifier: E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55
Certificate issuer: /CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055
Certificate serial: 0B73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
Manifest number: 0B5F
Signing time: Tue 24 Mar 2026 18:59:53 +0000
Manifest this update: Tue 24 Mar 2026 18:59:52 +0000
Manifest next update: Tue 31 Mar 2026 18:59:52 +0000
Files and hashes: 1: 5DyCH7uc7qZ-unouUFzF3X92YFU.crl (hash: zQ0rajWnUAsodYI6z/JqVwBUEepU/TUMmmFpmu7ZzEc=)
2: 8ABED0585F0911ECA629B815C4F9AE02.roa (hash: qJFLmW+cXJRTYpRYhxmf/kfGb1OFH5gs6tcdRPh5wTs=)
3: 823433125F0C11EC8C2C2820C4F9AE02.roa (hash: I2M9w6e7F+kF8zoqR1zOccQi0KP2UgvXuI5yq77m7wM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl
rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2931 (0xb73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114D2E, serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055
Validity
Not Before: Mar 24 18:59:52 2026 GMT
Not After : Mar 31 18:59:52 2026 GMT
Subject: CN=69c2df29-3238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:34:6d:d9:8c:3f:f3:58:fa:b4:49:ae:52:5f:
6d:87:6e:28:33:b2:56:77:c3:54:41:ac:13:32:ba:
a7:98:4e:be:ea:70:d2:06:c7:3e:f4:30:69:d4:dd:
2c:a9:2d:ad:30:89:6a:6e:ee:ed:07:6a:75:23:38:
29:ad:1b:f3:f9:c0:4a:86:38:d2:7b:ad:d7:55:24:
78:4d:59:e4:db:cc:9f:3a:e8:fc:4d:a8:85:4f:6f:
e9:d6:90:1f:d6:d1:b6:5a:b4:b4:d8:5c:e4:24:68:
f7:45:cd:1d:f6:9d:ad:72:7c:e7:be:5a:6d:06:b8:
34:ef:95:e9:3b:a9:64:23:0e:fc:b9:0e:d4:57:47:
71:85:18:6b:f0:93:46:b1:48:e6:8f:c7:c4:3f:7f:
44:e7:1d:e5:a5:48:32:38:c6:9d:56:f4:02:28:46:
ad:c0:20:dd:52:6a:3a:16:af:5f:e3:a9:5d:12:f5:
5d:6b:35:91:f0:64:0d:3e:6d:47:dc:3f:e2:9c:76:
3a:a1:b6:e3:c1:d8:19:fe:2c:f3:4f:3d:70:37:d6:
76:f9:1a:0f:e9:c4:d4:ba:f9:68:ef:7a:73:ec:42:
dc:bd:66:9e:95:49:34:3e:aa:42:3e:a1:23:13:9f:
61:39:04:d8:3c:fa:cf:71:b7:96:84:c1:33:3f:69:
09:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:10:1D:EA:13:5C:D1:48:71:0F:AC:34:04:77:D6:F2:93:9C:98:30
X509v3 Authority Key Identifier:
keyid:E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:10:c5:05:4d:c7:91:ca:5c:01:e8:2a:18:99:a9:6f:5f:71:
cf:de:96:fe:d5:01:39:c2:7f:96:cb:d1:c5:56:ab:65:51:50:
1c:0a:d8:b6:d8:52:fb:38:07:30:11:92:57:ba:db:8b:73:74:
5a:a0:17:4c:2a:22:67:9d:b5:df:d1:81:ac:40:6b:92:bb:bd:
26:b7:f4:f1:e8:ef:4d:46:ae:e8:6d:49:8b:a7:9e:51:13:93:
7d:10:d1:8d:c2:47:8e:32:d3:3c:85:80:30:9f:0d:55:b1:ac:
ee:24:31:8b:b3:1f:f8:06:a6:d1:eb:2c:15:44:b6:71:63:6e:
be:2c:57:1a:dd:ce:95:d7:b2:ec:b0:46:87:18:31:e8:fd:4d:
87:37:9c:b3:21:49:b9:27:59:0e:52:e4:a0:dd:c2:b9:57:6f:
77:e3:ec:fa:74:86:8e:8f:3a:c1:a5:5e:dd:e0:ad:20:8e:6e:
fa:7f:90:44:99:cc:00:be:81:ae:dc:03:ee:4e:77:fe:68:22:
cc:4f:66:3e:7a:d8:69:5b:00:2a:dc:12:3b:84:4c:f2:ea:2b:
06:00:58:85:f0:7c:fe:6c:8d:3e:78:64:8e:4c:a2:7f:4b:24:
15:34:a5:33:80:91:61:7c:97:18:0e:72:96:a5:38:9f:fd:67:
98:de:3e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:47:05 2026 by rpki-client