
$ rpki-client -vvf rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft
File: 5LMs8qYR9wLf0JE-PqULT9YexXU.mft (raw, json)
Hash identifier: KfnJCXdmO0/GBUrbQgEi9vnbjhQW9J4HjEr+92haFg4=
Subject key identifier: 55:CB:D7:D5:F3:F4:2E:A6:C9:99:8B:F2:59:5D:56:AA:E4:31:5C:61
Authority key identifier: E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75
Certificate issuer: /CN=A914450B/serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575
Certificate serial: 0839
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft
Manifest number: 0830
Signing time: Tue 12 May 2026 21:04:27 +0000
Manifest this update: Tue 12 May 2026 21:04:27 +0000
Manifest next update: Tue 19 May 2026 21:04:27 +0000
Files and hashes: 1: 5LMs8qYR9wLf0JE-PqULT9YexXU.crl (hash: 0PHInCjozQ9f25/2WltgoXk6gtIiSlMDTRjtU+2Ggnc=)
2: 5B9B8A1213F311EBA7343351C4F9AE02.roa (hash: XjgKRLBaZq02D/Cp43Aj+NT1Qh0TEvZMzuVtJSm3G00=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl
rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2105 (0x839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914450B, serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575
Validity
Not Before: May 12 21:04:27 2026 GMT
Not After : May 19 21:04:27 2026 GMT
Subject: CN=6a0395db-c24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:b4:7e:69:5d:92:36:44:23:84:42:77:6c:
92:4f:d3:f5:a0:4e:6f:da:e9:13:74:f9:ce:af:dd:
20:3c:7f:fc:89:2d:43:e6:06:bd:c0:ae:7d:71:8e:
b7:9e:7e:ac:da:40:31:b1:8f:0d:2b:14:ac:08:83:
c1:ef:08:a8:25:55:d9:1e:0c:13:cd:63:9e:2e:bc:
1d:52:ea:21:9a:86:26:af:fa:c0:e3:10:02:53:19:
20:33:9b:e2:e9:5f:f0:8c:0f:7f:07:68:96:3b:c6:
65:17:f6:62:a7:5a:9c:cf:7f:19:68:1e:f6:30:07:
8f:9c:46:5c:7e:ad:b1:3b:21:dd:b1:1d:e7:a2:eb:
52:5d:28:fa:75:c6:e1:b3:45:44:5a:ce:ca:26:33:
fb:53:73:68:46:2a:37:4f:cf:bd:9f:98:a6:9c:83:
97:99:fb:f1:86:5a:e5:67:c6:a5:71:80:e7:0c:4b:
dd:f7:71:86:e1:77:89:c9:96:75:cb:7e:18:94:29:
66:8e:07:6a:b2:51:ac:63:13:d9:ad:a8:b3:57:42:
e9:5e:ed:0e:ec:9e:21:2d:11:f7:41:f3:a5:6b:dc:
ce:aa:7c:e4:1e:79:94:5b:a1:52:15:b7:62:c1:4b:
c0:6e:6d:cd:df:24:a2:49:4d:f4:7b:13:46:21:f3:
b2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CB:D7:D5:F3:F4:2E:A6:C9:99:8B:F2:59:5D:56:AA:E4:31:5C:61
X509v3 Authority Key Identifier:
keyid:E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:02:1c:9b:cf:29:3e:57:c9:cd:41:11:03:e4:98:06:ab:0f:
00:92:51:cd:59:79:71:ea:36:74:e6:59:d6:81:99:b9:5a:53:
52:5d:e8:f9:3d:3f:a8:bd:97:f0:84:c8:95:47:fb:e5:b7:69:
4b:15:30:a1:48:fa:57:ba:4d:fa:f2:17:b9:ac:06:76:38:57:
a3:5f:41:18:6f:2d:33:60:ec:93:dd:3e:f0:a7:af:12:c1:a5:
98:e1:51:e4:25:9e:8f:2f:ea:fd:d4:89:d6:16:84:0d:22:8a:
82:9d:37:b9:c7:9f:47:ae:3b:34:d4:27:ab:79:c5:db:36:22:
12:9c:a9:0b:ff:c4:47:5a:5b:b8:75:8c:4c:9e:f0:41:2a:2c:
4d:f9:75:f0:ce:c6:c4:0b:fd:40:be:1a:e6:67:44:7d:39:8d:
7d:23:d0:58:63:1d:1e:91:bd:d4:7a:bc:b1:71:03:19:ac:07:
9d:a6:b6:d1:20:d6:aa:4a:36:88:5d:91:52:d5:62:d1:f0:78:
5e:9d:fe:ac:f6:cc:c3:e6:db:49:4a:29:86:9d:7b:c8:f4:0c:
5b:cc:9e:c5:16:37:25:1b:70:36:21:d6:9d:1a:16:6c:14:bc:
63:e4:57:80:f5:d6:7a:74:b3:ae:da:f5:c2:ac:0a:40:43:8b:
66:57:7a:59
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQ1MEIxMTAvBgNVBAUTKEU0QjMyQ0YyQTYxMUY3MDJERkQwOTEzRTNFQTUwQjRG
RDYxRUM1NzUwHhcNMjYwNTEyMjEwNDI3WhcNMjYwNTE5MjEwNDI3WjAYMRYwFAYD
VQQDEw02YTAzOTVkYi1jMjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAspi0fmldkjZEI4RCd2yST9P1oE5v2ukTdPnOr90gPH/8iS1D5ga9wK59cY63
nn6s2kAxsY8NKxSsCIPB7wioJVXZHgwTzWOeLrwdUuohmoYmr/rA4xACUxkgM5vi
6V/wjA9/B2iWO8ZlF/Zip1qcz38ZaB72MAePnEZcfq2xOyHdsR3noutSXSj6dcbh
s0VEWs7KJjP7U3NoRio3T8+9n5imnIOXmfvxhlrlZ8alcYDnDEvd93GG4XeJyZZ1
y34YlClmjgdqslGsYxPZraizV0LpXu0O7J4hLRH3QfOla9zOqnzkHnmUW6FSFbdi
wUvAbm3N3ySiSU30exNGIfOy6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFXL19Xz
9C6myZmL8lldVqrkMVxhMB8GA1UdIwQYMBaAFOSzLPKmEfcC39CRPj6lC0/WHsV1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDUwQi9GN0I5RTMwQTEz
RjExMUVCQjgxMjM5NTBDNEY5QUUwMi81TE1zOHFZUjl3TGYwSkUtUHFVTFQ5WWV4
WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVMTXM4cVlSOXdMZjBKRS1QcVVMVDlZZXhYVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDUwQi9GN0I5RTMwQTEzRjExMUVCQjgxMjM5NTBDNEY5QUUwMi81TE1zOHFZUjl3
TGYwSkUtUHFVTFQ5WWV4WFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFwIcm88pPlfJzUERA+SYBqsPAJJRzVl5ceo2dOZZ1oGZuVpTUl3o+T0/qL2X
8ITIlUf75bdpSxUwoUj6V7pN+vIXuawGdjhXo19BGG8tM2Dsk90+8KevEsGlmOFR
5CWejy/q/dSJ1haEDSKKgp03ucefR647NNQnq3nF2zYiEpypC//ER1pbuHWMTJ7w
QSosTfl18M7GxAv9QL4a5mdEfTmNfSPQWGMdHpG91Hq8sXEDGawHnaa20SDWqko2
iF2RUtVi0fB4Xp3+rPbMw+bbSUophp17yPQMW8yexRY3JRtwNiHWnRoWbBS8Y+RX
gPXWenSzrtr1wqwKQEOLZld6WQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:49:47 2026 by rpki-client