
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft
File: 5nG8sr6VpsiFJxIdiBXovPGKoeI.mft (raw, json)
Hash identifier: i0tV06nMN1fHIUoLZPTf0lFt0nH8fzUghhxHbfsq9E8=
Subject key identifier: C8:49:6D:A8:1C:59:E5:C1:BB:BA:3D:E9:44:CD:26:AB:50:B9:8C:93
Authority key identifier: E6:71:BC:B2:BE:95:A6:C8:85:27:12:1D:88:15:E8:BC:F1:8A:A1:E2
Certificate issuer: /CN=A9124926/serialNumber=E671BCB2BE95A6C88527121D8815E8BCF18AA1E2
Certificate serial: 0A6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft
Manifest number: 0A5E
Signing time: Tue 24 Mar 2026 19:25:52 +0000
Manifest this update: Tue 24 Mar 2026 19:25:51 +0000
Manifest next update: Tue 31 Mar 2026 19:25:51 +0000
Files and hashes: 1: 5nG8sr6VpsiFJxIdiBXovPGKoeI.crl (hash: zrFZm4Zk6uP8Ik3RzTskuuSLbYg60SaGUt8RUqewIyg=)
2: 209BA8B682DF11EAABBC5018C4F9AE02.roa (hash: 0tZfyO0qZHVtC7N4oqG/s4ZoFuinvHiT3ESC37ncsv0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.crl
rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:25:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2669 (0xa6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124926, serialNumber=E671BCB2BE95A6C88527121D8815E8BCF18AA1E2
Validity
Not Before: Mar 24 19:25:51 2026 GMT
Not After : Mar 31 19:25:51 2026 GMT
Subject: CN=69c2e53f-4de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:69:01:0a:42:a0:1e:b5:a4:ea:2a:d5:28:1c:
d0:61:46:5b:6b:0d:d8:36:b8:0f:b3:ad:f0:5b:c1:
a4:1a:a7:a2:ec:5d:69:2a:95:64:5b:70:8d:a3:21:
1f:74:f3:08:d2:14:e4:48:32:3d:4e:9d:f4:80:3c:
c9:ab:11:3d:3c:81:be:cf:b8:4d:15:13:ff:36:84:
32:ee:00:93:c9:9b:b1:c8:d5:8c:50:ff:b2:d9:91:
b5:2b:51:f5:71:83:ce:e0:37:5c:49:da:8d:33:1e:
04:6f:2c:6b:40:80:06:11:59:94:0c:c6:1f:05:a4:
fa:1b:ea:36:74:c0:68:9c:ac:53:51:48:9e:a3:35:
8b:20:03:07:3f:d1:b4:b9:fe:1f:01:7f:66:a3:9d:
e5:cc:10:3c:93:4c:85:7a:0b:14:1e:ba:27:01:ca:
a6:7f:3c:cd:8e:de:46:55:00:a9:0f:aa:38:b8:65:
46:fc:88:f0:1d:f0:1d:f3:e6:16:89:19:36:94:62:
63:d6:38:a2:8a:36:6a:ac:b1:91:b3:92:73:50:13:
3e:01:ec:3c:01:a2:4e:20:69:6c:f8:b2:a7:0a:e1:
ee:dd:8d:84:71:62:34:a9:09:68:bd:cb:4e:8b:b4:
d5:0b:ef:56:9f:3b:64:d0:64:e1:bd:50:09:0b:68:
c3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:49:6D:A8:1C:59:E5:C1:BB:BA:3D:E9:44:CD:26:AB:50:B9:8C:93
X509v3 Authority Key Identifier:
keyid:E6:71:BC:B2:BE:95:A6:C8:85:27:12:1D:88:15:E8:BC:F1:8A:A1:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:60:3a:10:c0:44:58:2d:0b:d0:f8:23:f7:5a:11:d6:6a:aa:
48:44:1d:e6:0c:93:f1:8b:25:99:a0:74:bb:56:11:43:f7:54:
12:fd:51:81:55:2d:8a:7a:8c:6c:e0:10:df:b2:6d:6a:7a:c1:
25:ce:1e:a3:53:57:48:31:68:cb:6c:ef:ea:79:28:d6:c0:9f:
78:55:a4:75:cd:53:6d:97:4d:c7:69:70:04:9d:0d:09:f5:16:
57:e6:4d:d9:5e:14:4d:91:86:c4:a3:6c:8b:ee:be:6f:12:34:
1c:67:96:14:99:ad:ce:6f:9c:fa:c6:b4:65:20:d2:63:71:e5:
43:b8:14:cc:53:36:ab:9a:85:80:cd:94:59:b8:ec:9c:c9:de:
be:9b:0d:82:cd:3d:76:c0:4f:88:6f:fd:5a:28:ec:2a:22:3d:
05:96:0b:8a:d9:7e:45:ac:e9:d8:d8:8e:13:9e:24:ce:c9:23:
84:68:fc:03:fd:b4:27:f7:ad:ac:1c:3a:04:9e:f4:ac:2a:a9:
7e:13:49:d0:80:39:71:6c:b6:cd:16:8a:36:f8:3e:22:d9:ba:
58:93:02:91:fb:39:94:6c:97:8f:47:33:fc:2c:ea:e6:01:53:
59:73:1b:12:d8:ee:ba:45:30:50:5c:a3:54:45:ba:4a:77:35:
a4:a0:e9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:11:56 2026 by rpki-client