
$ rpki-client -vvf rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft
File: 5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft (raw, json)
Hash identifier: BTFin0ZwEv8LjN2g1UjXvYk7QG/Fk7Vz4iZv+loSFOc=
Subject key identifier: F6:CE:7B:EA:A2:97:A3:38:7D:C3:51:A7:62:61:2E:FA:06:DA:67:DD
Authority key identifier: E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73
Certificate issuer: /CN=A913ABFE/serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73
Certificate serial: 0255
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft
Manifest number: 0245
Signing time: Thu 23 Jul 2026 03:47:59 +0000
Manifest this update: Thu 23 Jul 2026 03:47:58 +0000
Manifest next update: Thu 30 Jul 2026 03:47:58 +0000
Files and hashes: 1: 5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl (hash: b46VdtOu98lgQaL/HHWelqAVW5c07I0E8E9UMcCteLo=)
2: F4C13F18066811F0B521BF2FC4F9AE02.roa (hash: vikoVGSeuK7o+QN57vEWLxUrr4D0Lg0WytucvEu92c0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl
rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913ABFE, serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73
Validity
Not Before: Jul 23 03:47:58 2026 GMT
Not After : Jul 30 03:47:58 2026 GMT
Subject: CN=6a618eef-0144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dd:15:b8:b7:f2:b8:8b:70:a8:5f:ff:7d:b0:
b7:38:56:a9:7b:45:17:13:e6:ca:ae:4c:bd:a1:1e:
8f:65:fe:08:f8:dd:f2:d4:e6:0c:94:fe:2b:4e:b0:
77:69:f0:cc:c7:1f:e4:cb:2a:16:8d:17:96:15:5d:
47:91:f0:4f:a3:18:1c:33:3c:77:52:b6:b3:ed:68:
64:6c:92:a8:5b:a2:c4:d8:4d:c6:18:d8:54:24:46:
f0:5e:a9:0e:2d:be:fa:b0:7a:67:d2:a8:83:45:20:
70:83:da:7e:9d:9f:64:fd:c8:1c:db:e2:e4:cd:d2:
3f:ed:71:41:11:c1:74:06:d1:d7:00:6a:07:61:45:
10:50:46:9e:fe:58:9d:e9:3b:20:d3:34:a0:20:40:
36:f1:8a:ad:7c:dd:a8:c8:db:3e:dc:44:d9:64:46:
63:8a:f3:8f:b4:07:81:41:43:8b:21:38:12:4a:a5:
f4:11:f5:b2:77:51:18:4f:76:ce:d0:52:45:5d:46:
c6:b8:73:11:45:56:0e:78:80:c6:87:6d:a2:9d:34:
d8:d3:e2:c8:24:a6:9c:22:ab:d5:45:b9:04:f2:e3:
ea:94:b1:f4:f9:ff:d7:ee:15:22:6c:46:31:e0:20:
55:2c:42:d8:3e:c4:4f:2a:f6:85:1f:bd:49:7d:bc:
74:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CE:7B:EA:A2:97:A3:38:7D:C3:51:A7:62:61:2E:FA:06:DA:67:DD
X509v3 Authority Key Identifier:
keyid:E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:20:04:94:b3:60:27:76:7b:59:08:43:bb:a7:48:5f:12:a4:
5c:1e:5f:f7:ab:72:8a:a4:41:36:21:94:85:90:8e:98:20:40:
f6:0c:1a:21:9b:2b:a1:04:d6:29:25:e1:d7:fc:42:77:da:d3:
79:d5:a9:76:72:d6:05:73:42:e1:ad:d6:cf:c2:8b:cf:6c:ae:
6a:6d:bd:5e:c6:76:11:04:ca:c4:e9:1a:b8:0d:3f:bf:d3:0b:
d9:1a:7b:85:00:2e:1f:7e:e5:c5:b9:77:2e:f2:76:68:50:2e:
09:3a:27:e8:ac:14:a1:cd:bd:0a:d9:c6:d6:6a:06:64:83:57:
28:bb:3d:9b:6d:c2:2d:26:ae:90:82:02:ee:5f:74:9e:0e:16:
d6:c4:41:2d:83:61:5e:86:bd:87:39:cc:2b:b9:d4:0d:f9:3e:
aa:ec:f8:10:1d:3d:de:92:fb:fc:07:ed:cd:69:82:55:fa:5a:
07:c1:f7:db:7c:57:b3:f4:33:b2:40:44:3b:29:9a:b9:79:69:
eb:52:fa:c7:d4:57:2a:00:ec:cd:b2:48:f3:6b:3d:11:44:18:
5e:19:99:a6:8d:d3:96:db:ac:a6:bf:b6:91:65:ad:e4:88:5c:
be:f6:97:4c:cf:7d:2a:ee:e6:61:42:3d:86:38:eb:d1:f8:b4:
9e:81:f8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:33:24 2026 by rpki-client