
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
File: 5pLFtgs-8cIERDn8OQrVbcPLzWM.mft (raw, json)
Hash identifier: tLSYLOMQ8Sy2mDWsIdJMeTGqEQWpijhCmAsG9mmf7xo=
Subject key identifier: 6C:05:39:DA:66:50:79:7C:06:E7:07:56:2D:E1:C4:D3:51:9C:48:16
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 0986
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
Manifest number: 08DF
Signing time: Wed 13 May 2026 00:45:27 +0000
Manifest this update: Wed 13 May 2026 00:45:26 +0000
Manifest next update: Wed 20 May 2026 00:45:26 +0000
Files and hashes: 1: 5pLFtgs-8cIERDn8OQrVbcPLzWM.crl (hash: Nz5mCxQGXwgt5stP81bRT/uoYdjJ0pqc/DyMambFpfw=)
2: 79986EE8FE3D11EFB763F62EC4F9AE02.roa (hash: b0d7KFkivg+pSQhSopB2OC7InpEaaI034fHeKJQ1XME=)
3: 9765FB988A5D11EE9E6AA223C4F9AE02.roa (hash: EEYzCbyeqxDaeKgknxCRHT1rePeuinavgu4aD0/oSEk=)
4: 311C494286CC11F09348D16BC4F9AE02.roa (hash: c5z8GmrR8gTadfODZE+aXaQsjeSugCDsmlzjHXLsAp4=)
5: F3643AD6089C11F09BB44535C4F9AE02.roa (hash: h+M8yWQJoBkACzAfTIpQdErBAlAmwZgxPQ+K7UT/ZJ8=)
6: 244B9D1874CB11EEB3C0267DC4F9AE02.roa (hash: NgHinJNOa5WD0lzlF+pCDsZCucZ3Hfmi2lX8TWyz05k=)
7: 95348E36452511F1967953B89A833773.roa (hash: E41yGFHb49hfpp6fDTgF/iaLt4YgdcwSMAc8N/0HCUU=)
8: 215A8FDE4B9E11EEBF766C7FC4F9AE02.roa (hash: n6tcvXpr4IAe1S5u61Xx4m/84oyxH16o7/TxMhPSnE4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2438 (0x986)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Validity
Not Before: May 13 00:45:26 2026 GMT
Not After : May 20 00:45:26 2026 GMT
Subject: CN=6a03c9a6-13bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:84:16:7b:b1:00:5e:d5:2d:16:41:ef:65:f6:
c6:13:cb:65:72:ff:ca:f6:9a:ae:e4:81:8c:84:68:
62:73:0e:77:42:f4:fa:41:2f:82:c9:01:85:d4:85:
27:c5:4b:ae:4c:84:13:60:7d:02:10:9a:ce:71:f2:
d0:e1:f8:e5:12:86:61:99:02:ca:d7:dc:fa:29:79:
76:f5:a6:df:77:ed:e3:32:02:be:e4:a6:5b:31:76:
84:55:6f:00:d8:c6:c1:cd:27:c0:b8:3d:ea:47:b8:
b7:8d:a0:d5:fb:f7:45:fa:97:e4:a4:ab:7f:4a:e0:
da:6a:6c:0b:02:2a:95:f0:ce:91:ad:fd:76:f3:90:
e6:59:9e:30:e4:d3:87:40:bf:29:a2:dc:69:4a:7d:
b1:af:ef:34:19:5c:ba:b4:7f:7f:53:37:1a:75:62:
f6:05:87:e1:8e:b9:88:2c:5e:8c:63:62:1a:fb:5a:
85:c2:32:9f:07:f7:32:3b:a7:a1:c0:b7:27:b7:fb:
a0:a5:2b:17:fc:93:ca:85:41:f9:f1:1f:e9:4b:cc:
8a:60:77:d9:a6:63:4e:28:b4:0d:36:06:b0:da:3c:
78:7b:75:4c:c5:84:0d:8c:b3:02:a0:55:7b:e6:6a:
26:4c:61:9b:64:0b:c7:cf:82:7f:33:18:48:7e:c6:
54:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:05:39:DA:66:50:79:7C:06:E7:07:56:2D:E1:C4:D3:51:9C:48:16
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:63:28:93:d9:f4:c5:45:66:89:b1:ec:21:79:9d:53:f8:b9:
1a:11:04:c8:3f:fe:ee:e2:5f:3f:6c:88:79:c8:c2:27:d9:ca:
7a:2d:33:be:a2:ca:d7:9f:38:53:6d:09:42:52:dd:c2:87:ba:
3c:04:0d:7b:b0:08:6d:bf:e8:8e:51:54:85:25:b0:2d:16:49:
bc:07:29:62:cc:df:f7:ca:82:54:43:9e:f9:40:92:3b:b4:7a:
0e:7d:9d:9b:0e:98:35:63:91:a0:a1:cb:4f:9e:6f:83:b7:ac:
ac:4c:00:71:c8:14:8f:04:42:bd:d7:8c:cb:09:e6:6c:a6:bf:
5c:3d:f9:52:1f:7a:70:57:ee:c8:73:b0:f6:99:be:3d:65:37:
b0:c8:fb:59:be:79:ec:7d:a0:0b:19:34:4f:aa:cc:de:0a:fc:
8f:3e:bd:c2:ff:13:40:72:0c:3e:81:69:cb:1c:0a:46:cd:45:
bd:4f:79:71:92:56:b5:56:b7:16:00:68:9b:0c:e6:b6:24:b1:
e6:cd:59:7a:79:b1:5c:d0:7c:61:d6:75:bf:c4:d3:c0:66:e1:
59:46:a7:4a:d7:c1:51:18:8f:0f:6d:8a:30:44:eb:13:06:bb:
b4:41:a5:d3:a6:a1:54:20:db:e2:00:f4:92:33:a5:2b:61:e7:
fe:1d:a4:74
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QxRUExMTAvBgNVBAUTKEU2OTJDNUI2MEIzRUYxQzIwNDQ0MzlGQzM5MEFENTZE
QzNDQkNENjMwHhcNMjYwNTEzMDA0NTI2WhcNMjYwNTIwMDA0NTI2WjAYMRYwFAYD
VQQDEw02YTAzYzlhNi0xM2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6IQWe7EAXtUtFkHvZfbGE8tlcv/K9pqu5IGMhGhicw53QvT6QS+CyQGF1IUn
xUuuTIQTYH0CEJrOcfLQ4fjlEoZhmQLK19z6KXl29abfd+3jMgK+5KZbMXaEVW8A
2MbBzSfAuD3qR7i3jaDV+/dF+pfkpKt/SuDaamwLAiqV8M6Rrf1285DmWZ4w5NOH
QL8potxpSn2xr+80GVy6tH9/UzcadWL2BYfhjrmILF6MY2Ia+1qFwjKfB/cyO6eh
wLcnt/ugpSsX/JPKhUH58R/pS8yKYHfZpmNOKLQNNgaw2jx4e3VMxYQNjLMCoFV7
5momTGGbZAvHz4J/MxhIfsZUAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGwFOdpm
UHl8BucHVi3hxNNRnEgWMB8GA1UdIwQYMBaAFOaSxbYLPvHCBEQ5/DkK1W3Dy81j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDFFQS85QzkzMkI0ODE3
M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThjSUVSRG44T1FyVmJjUEx6
V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVwTEZ0Z3MtOGNJRVJEbjhPUXJWYmNQTHpXTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDFFQS85QzkzMkI0ODE3M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThj
SUVSRG44T1FyVmJjUEx6V00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARGMok9n0xUVmibHsIXmdU/i5GhEEyD/+7uJfP2yIecjCJ9nKei0zvqLK1584
U20JQlLdwoe6PAQNe7AIbb/ojlFUhSWwLRZJvAcpYszf98qCVEOe+UCSO7R6Dn2d
mw6YNWORoKHLT55vg7esrEwAccgUjwRCvdeMywnmbKa/XD35Uh96cFfuyHOw9pm+
PWU3sMj7Wb557H2gCxk0T6rM3gr8jz69wv8TQHIMPoFpyxwKRs1FvU95cZJWtVa3
FgBomwzmtiSx5s1ZenmxXNB8YdZ1v8TTwGbhWUanStfBURiPD22KMETrEwa7tEGl
06ahVCDb4gD0kjOlK2Hn/h2kdA==
-----END CERTIFICATE-----
Generated at Wed May 13 04:18:08 2026 by rpki-client