
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft
File: 5tdlUVTja2lxFXTiB5a2gCxDtxU.mft (raw, json)
Hash identifier: 0+AMtuQdwdbrle3zePtJab7If7aYD/njUz4exsdUIlE=
Subject key identifier: 89:57:D6:E2:D7:C9:9A:15:91:CC:E4:39:5D:DE:36:C5:D7:BB:A7:B2
Authority key identifier: E6:D7:65:51:54:E3:6B:69:71:15:74:E2:07:96:B6:80:2C:43:B7:15
Certificate issuer: /CN=A9118EDB/serialNumber=E6D7655154E36B69711574E20796B6802C43B715
Certificate serial: 0583
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft
Manifest number: 057A
Signing time: Thu 26 Mar 2026 23:05:35 +0000
Manifest this update: Thu 26 Mar 2026 23:05:34 +0000
Manifest next update: Thu 02 Apr 2026 23:05:34 +0000
Files and hashes: 1: 5tdlUVTja2lxFXTiB5a2gCxDtxU.crl (hash: mjsrb6fyddBliM6930Jyj8ZenM4Hq3y0u8p307xj1sM=)
2: BA4D01561DE011ECB872BC27C4F9AE02.roa (hash: 71obYwe/YEkiahFOzFQwlgwbuMnmtNJkaInTJQf/rg8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.crl
rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 23:05:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1411 (0x583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118EDB, serialNumber=E6D7655154E36B69711574E20796B6802C43B715
Validity
Not Before: Mar 26 23:05:34 2026 GMT
Not After : Apr 2 23:05:34 2026 GMT
Subject: CN=69c5bbbf-3890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:eb:e5:3d:87:c2:f9:38:84:8a:4e:d6:cf:38:
8d:bb:f8:af:10:04:76:c0:39:f2:c9:dc:af:95:8c:
b6:ee:fb:99:38:4b:c9:a5:72:bf:94:1f:63:9c:d4:
86:f1:7f:49:9d:6b:29:25:4e:37:68:45:7c:ae:69:
f0:64:78:e7:a1:6f:4f:5b:73:3f:37:31:0a:36:0e:
d1:46:11:c6:19:9f:36:96:f1:d1:ce:11:04:b5:fc:
43:8e:b7:6c:e3:62:88:2a:97:f6:a4:97:ef:14:86:
c7:4e:4c:ea:7c:ab:a5:d4:8d:17:8f:54:53:a7:c6:
de:43:81:81:b5:5f:ed:4c:09:71:7c:6a:a4:db:b4:
87:f7:a1:7a:d8:d6:2f:9e:9d:72:2c:50:be:13:b7:
ab:0e:40:e7:f7:95:76:f1:0c:58:4f:8e:17:90:74:
90:cd:2b:c3:a6:d6:7f:0e:af:f8:de:84:2c:b6:02:
94:10:61:82:8d:30:90:ed:85:85:4f:85:30:8d:17:
05:df:3a:cd:c7:8d:fd:e0:67:ea:b2:19:ee:78:05:
5e:75:ac:73:5a:fe:50:dd:ed:a8:03:94:65:42:74:
d8:4a:d7:be:64:3c:3f:fd:d8:11:c6:9c:ab:90:e5:
ae:7b:8b:d9:cf:bd:1d:f0:39:38:21:9a:8f:6a:eb:
f5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:57:D6:E2:D7:C9:9A:15:91:CC:E4:39:5D:DE:36:C5:D7:BB:A7:B2
X509v3 Authority Key Identifier:
keyid:E6:D7:65:51:54:E3:6B:69:71:15:74:E2:07:96:B6:80:2C:43:B7:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a3:72:f4:25:90:2e:55:1e:05:a4:e4:6a:d4:58:32:b7:21:
81:a4:1b:cc:6c:99:3a:96:b5:31:dc:d9:2a:0e:3d:dc:17:58:
1e:90:98:84:55:d9:c5:c0:52:ba:29:ed:ea:38:09:7f:96:e4:
b1:5d:51:5a:2b:7f:43:9d:c3:df:82:50:0b:30:72:7f:04:43:
96:e2:c0:ef:f2:47:d1:79:07:e0:44:03:c5:cc:65:79:8e:d1:
8b:6c:71:88:90:ee:45:14:47:df:fb:36:eb:9f:f5:81:e0:7b:
ac:94:a9:c1:ba:f7:ff:94:37:da:18:cc:19:d7:b9:7b:2b:8c:
cc:84:f0:c2:89:4a:83:39:76:51:19:ab:42:51:f7:03:20:3c:
12:a7:da:c7:d7:00:e8:e7:b9:24:56:71:80:63:c9:9a:e7:e9:
36:5c:d9:76:e0:76:ab:4c:f9:80:f8:d1:6c:3a:23:c9:0d:2b:
d7:44:97:d5:2f:38:20:b7:22:77:81:ba:b6:ad:8b:93:40:71:
87:b5:03:cc:01:21:51:fe:20:56:53:d1:f2:1c:c9:76:2b:69:
a7:76:0f:d5:14:f8:7e:21:55:1e:a5:7f:cb:23:e1:dd:ed:41:
10:69:93:b4:06:e3:b6:a8:26:62:63:8d:a0:35:96:54:92:7f:
df:0c:5d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:33 2026 by rpki-client