
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
File: 5DyCH7uc7qZ-unouUFzF3X92YFU.mft (raw, json)
Hash identifier: GpC5mDN6jnxt8G/JO2hvpZdTaWJHY3ErIpF/z5av3EY=
Subject key identifier: 5E:D2:38:D8:17:11:34:18:D0:84:B5:E8:61:E2:FB:36:27:53:11:4E
Authority key identifier: E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55
Certificate issuer: /CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055
Certificate serial: 0B8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
Manifest number: 0B78
Signing time: Tue 12 May 2026 19:12:08 +0000
Manifest this update: Tue 12 May 2026 19:12:08 +0000
Manifest next update: Tue 19 May 2026 19:12:08 +0000
Files and hashes: 1: 5DyCH7uc7qZ-unouUFzF3X92YFU.crl (hash: muJp1HVCdywAoL6E1DF+bNsVy6bcizxNlDjV3ebTOyk=)
2: 823433125F0C11EC8C2C2820C4F9AE02.roa (hash: I2M9w6e7F+kF8zoqR1zOccQi0KP2UgvXuI5yq77m7wM=)
3: 8ABED0585F0911ECA629B815C4F9AE02.roa (hash: qJFLmW+cXJRTYpRYhxmf/kfGb1OFH5gs6tcdRPh5wTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl
rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:12:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2956 (0xb8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114D2E, serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055
Validity
Not Before: May 12 19:12:08 2026 GMT
Not After : May 19 19:12:08 2026 GMT
Subject: CN=6a037b88-117b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:34:f6:4a:b9:34:16:15:53:e6:8a:d4:f1:ca:
4c:be:a2:18:74:bb:7d:9b:93:9f:cd:8d:c8:c2:b6:
d7:81:74:48:9b:e1:2e:55:12:18:69:94:24:ec:b1:
46:84:e0:14:50:29:60:56:9d:3e:97:64:6e:1c:c0:
3c:0e:ee:d2:52:81:ba:5e:3b:a9:ba:b7:19:05:6a:
43:0c:17:ae:55:8f:1c:2d:e8:53:b8:28:74:5d:d5:
ca:0b:2d:e9:97:df:d7:5e:cb:f6:c5:e2:7c:e8:b2:
cc:04:1c:f3:6f:57:db:64:cf:c7:05:43:7c:3b:76:
7b:61:e2:c8:30:6c:ab:79:7f:0b:ee:0d:20:36:47:
b7:b2:e4:40:84:25:d8:83:3f:bd:66:42:d9:c7:02:
fc:92:3c:23:71:ed:5a:11:83:81:1a:86:84:2c:5c:
35:b4:00:cc:f8:ff:c1:2d:77:e1:bb:42:f6:1b:ae:
ae:c1:52:b9:ad:a0:5b:21:00:e0:93:fd:df:64:0a:
5d:05:b1:f3:37:d4:49:69:5c:f3:6f:58:09:3b:5a:
0e:70:c9:1a:50:fd:2d:6c:dc:9a:fb:76:c5:cf:80:
c9:64:e1:e4:99:6d:fd:a9:bc:b4:80:35:52:97:93:
7c:cb:07:09:80:8e:39:63:77:5a:e3:cd:f0:5b:92:
48:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D2:38:D8:17:11:34:18:D0:84:B5:E8:61:E2:FB:36:27:53:11:4E
X509v3 Authority Key Identifier:
keyid:E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:ae:66:b5:4b:f7:bb:ab:14:da:9b:ed:98:fa:65:20:8c:d6:
a1:7b:d3:83:af:7b:61:40:39:ca:83:d1:00:71:58:08:15:a4:
47:20:03:41:c6:ae:c4:cb:b2:43:d1:cb:14:4b:24:19:17:ec:
3f:5c:a3:04:b2:74:2f:81:aa:bb:5c:2e:aa:43:9d:5b:ed:94:
83:6f:db:81:0b:4e:d7:ce:e6:e2:4b:b9:e5:fa:53:99:7c:17:
9b:69:bc:79:cf:75:45:08:d3:c3:ca:47:a8:f7:35:63:2d:bc:
95:f9:b5:39:e4:2a:c7:88:59:67:34:cb:f0:ca:1d:1f:db:0c:
2f:7a:4d:d7:35:43:1b:74:98:a1:27:45:09:7f:c2:24:31:3c:
b6:ad:36:5d:fb:6f:6e:08:84:94:0b:82:c8:05:a2:3b:f5:ad:
9a:0c:69:ed:02:bd:e8:b3:63:ec:c7:36:18:27:47:b2:e1:96:
b3:a5:2a:3b:52:0a:dd:d6:23:e9:2a:ae:b9:17:d1:12:d0:66:
20:cd:bc:2b:58:4b:b2:4d:1e:4c:57:07:ac:b8:26:f5:b6:34:
63:17:9e:1e:d7:42:46:8c:f7:1f:1b:81:d4:4b:dd:b7:98:bf:
71:57:ee:8f:60:88:44:4d:e5:89:13:08:86:b6:be:e8:d1:b7:
6b:e9:bc:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTREMkUxMTAvBgNVBAUTKEU0M0M4MjFGQkI5Q0VFQTY3RUJBN0EyRTUwNUNDNURE
N0Y3NjYwNTUwHhcNMjYwNTEyMTkxMjA4WhcNMjYwNTE5MTkxMjA4WjAYMRYwFAYD
VQQDEw02YTAzN2I4OC0xMTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9DT2Srk0FhVT5orU8cpMvqIYdLt9m5OfzY3IwrbXgXRIm+EuVRIYaZQk7LFG
hOAUUClgVp0+l2RuHMA8Du7SUoG6XjupurcZBWpDDBeuVY8cLehTuCh0XdXKCy3p
l9/XXsv2xeJ86LLMBBzzb1fbZM/HBUN8O3Z7YeLIMGyreX8L7g0gNke3suRAhCXY
gz+9ZkLZxwL8kjwjce1aEYOBGoaELFw1tADM+P/BLXfhu0L2G66uwVK5raBbIQDg
k/3fZApdBbHzN9RJaVzzb1gJO1oOcMkaUP0tbNya+3bFz4DJZOHkmW39qby0gDVS
l5N8ywcJgI45Y3da483wW5JIKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF7SONgX
ETQY0IS16GHi+zYnUxFOMB8GA1UdIwQYMBaAFOQ8gh+7nO6mfrp6LlBcxd1/dmBV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyRS8wRkUxOUM2QzUx
MUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1YzdxWi11bm91VUZ6RjNYOTJZ
RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVEeUNIN3VjN3FaLXVub3VVRnpGM1g5MllGVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NEQyRS8wRkUxOUM2QzUxMUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1Yzdx
Wi11bm91VUZ6RjNYOTJZRlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAca5mtUv3u6sU2pvtmPplIIzWoXvTg697YUA5yoPRAHFYCBWkRyADQcauxMuy
Q9HLFEskGRfsP1yjBLJ0L4Gqu1wuqkOdW+2Ug2/bgQtO187m4ku55fpTmXwXm2m8
ec91RQjTw8pHqPc1Yy28lfm1OeQqx4hZZzTL8ModH9sML3pN1zVDG3SYoSdFCX/C
JDE8tq02XftvbgiElAuCyAWiO/Wtmgxp7QK96LNj7Mc2GCdHsuGWs6UqO1IK3dYj
6SquuRfREtBmIM28K1hLsk0eTFcHrLgm9bY0YxeeHtdCRoz3HxuB1Evdt5i/cVfu
j2CIRE3liRMIhra+6NG3a+m8Uw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:07:22 2026 by rpki-client