
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
File: 5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft (raw, json)
Hash identifier: CLSuCdA8nkJF9sLBiouPa5ZYCJVYumqkIqzSPeOpdi0=
Subject key identifier: D8:CF:29:F9:0B:04:DA:05:57:F3:60:C8:F3:BA:6D:D2:2D:46:DF:5B
Authority key identifier: E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8
Certificate issuer: /CN=A9115122/serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8
Certificate serial: 0222
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
Manifest number: 021D
Signing time: Wed 25 Mar 2026 02:10:34 +0000
Manifest this update: Wed 25 Mar 2026 02:10:33 +0000
Manifest next update: Wed 01 Apr 2026 02:10:33 +0000
Files and hashes: 1: 5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl (hash: u0MnpknfDiHkhGR7+T0EptPwXYkVJuXbuwsX8jZuh8c=)
2: D4B97082EF2211EDB7EFE882C4F9AE02.roa (hash: QTvbuosrX5jsBzMxv5G1as9+EkdAYiScKyomhZlaqBU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl
rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:10:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 546 (0x222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115122, serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8
Validity
Not Before: Mar 25 02:10:33 2026 GMT
Not After : Apr 1 02:10:33 2026 GMT
Subject: CN=69c3441a-25ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ca:d3:de:b2:8c:d4:81:54:c4:6d:c1:7b:93:
63:61:77:f0:07:b3:18:74:b4:ef:e4:4d:16:e1:71:
df:0c:7d:f2:e4:d8:3c:9d:c2:3b:e7:b1:a5:ca:e0:
cf:ca:4e:b6:f5:91:78:6d:f4:fd:e3:6c:d6:8f:35:
11:fd:90:31:68:3c:15:dd:ee:78:7a:79:b6:2c:b4:
91:15:d0:04:e2:d8:41:3a:65:a9:94:96:c7:df:ed:
0d:7e:65:df:70:99:e2:48:a8:1b:a2:28:ad:99:9e:
c7:55:bb:f8:26:7c:28:d5:07:f9:8d:96:b3:11:09:
58:43:0e:ae:a3:d4:15:c7:f1:45:3f:69:aa:8f:8f:
78:a4:ea:fc:c8:f5:f8:07:38:8a:26:4f:46:6c:7b:
a5:dc:ec:2e:a3:83:d5:6a:e1:ae:19:76:22:e2:8d:
06:e8:60:cf:ba:de:2d:d1:e5:07:36:3f:eb:26:ae:
f2:87:83:55:e3:4a:4f:b5:b1:17:44:0b:d9:d8:45:
e5:de:21:6c:f0:12:99:04:f5:1d:b7:71:98:6f:43:
cb:bc:9b:a7:e1:39:20:f8:01:50:03:48:41:6a:58:
51:26:67:0a:cd:97:13:be:89:e0:e6:0f:7e:cb:53:
d6:d3:bc:c9:0b:c3:4e:38:41:ee:77:fd:78:ba:c3:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CF:29:F9:0B:04:DA:05:57:F3:60:C8:F3:BA:6D:D2:2D:46:DF:5B
X509v3 Authority Key Identifier:
keyid:E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:22:94:5d:28:06:14:f9:54:2c:f4:b3:b8:48:ba:04:a3:83:
cc:48:db:71:28:00:71:d3:c0:c9:4b:6d:f0:3f:32:51:de:dc:
55:b8:8b:c9:93:71:b8:bb:54:3f:b9:80:ed:1f:3e:05:47:f3:
8e:37:49:c6:e8:fe:47:87:eb:ab:87:f7:9b:54:a3:4b:c2:f5:
96:8b:7d:71:00:a9:5a:e7:ba:9d:03:3c:10:b8:58:0f:d8:22:
fa:e8:7e:4f:81:ba:be:6e:6f:b1:91:7b:43:34:c5:e4:23:3d:
cf:b7:4c:c5:58:90:3b:db:29:be:52:2f:1b:0e:db:57:89:2a:
10:1d:06:86:1c:5d:69:55:d5:4c:dc:68:00:03:6f:45:3a:bc:
be:bc:3f:b4:ad:2d:a7:82:a5:a9:02:06:27:57:a5:3c:8f:55:
dd:e7:98:82:2a:93:1e:de:06:e4:ba:37:81:14:7e:72:d7:40:
12:7f:19:d0:76:58:52:53:0d:bf:89:fc:ae:4b:82:b4:08:ed:
9a:ec:7b:5d:5e:95:77:13:02:a3:ce:4c:94:e9:c0:57:60:d0:
9f:bd:4e:5a:03:ce:26:88:d1:39:33:66:61:57:8a:c9:0a:e0:
4e:12:e9:65:33:58:88:07:e6:90:80:fc:7d:68:f8:2b:2b:5c:
73:9b:dd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:12 2026 by rpki-client