
$ rpki-client -vvf rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft
File: 5LMs8qYR9wLf0JE-PqULT9YexXU.mft (raw, json)
Hash identifier: JyrDTIQzn0VSEPk7UyVF4Nv7NZIB07QII6woVnybsvQ=
Subject key identifier: F5:83:49:38:76:64:42:6F:9D:DB:31:93:AA:41:13:02:1D:18:0E:02
Authority key identifier: E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75
Certificate issuer: /CN=A914450B/serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575
Certificate serial: 0820
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft
Manifest number: 0817
Signing time: Tue 24 Mar 2026 20:48:43 +0000
Manifest this update: Tue 24 Mar 2026 20:48:42 +0000
Manifest next update: Tue 31 Mar 2026 20:48:42 +0000
Files and hashes: 1: 5LMs8qYR9wLf0JE-PqULT9YexXU.crl (hash: cYZn5WSxR/9qJ4VFPORTldOBP9J61uJW2p1ZapfxgEw=)
2: 5B9B8A1213F311EBA7343351C4F9AE02.roa (hash: XjgKRLBaZq02D/Cp43Aj+NT1Qh0TEvZMzuVtJSm3G00=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl
rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2080 (0x820)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914450B, serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575
Validity
Not Before: Mar 24 20:48:42 2026 GMT
Not After : Mar 31 20:48:42 2026 GMT
Subject: CN=69c2f8ab-409b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:8b:1d:b1:e3:b2:39:3e:f0:7a:bc:7a:4c:
32:95:f9:99:6d:20:36:ab:12:af:e3:6c:ec:76:bc:
de:0f:2f:8c:1a:97:5f:cd:01:eb:53:2b:da:1e:2e:
51:c6:60:45:c7:d4:60:f8:f0:5f:61:7d:37:20:9f:
6f:80:f2:e4:d7:d2:65:62:fe:ec:da:2f:9f:95:27:
d1:16:8c:50:c8:56:0e:e7:a9:16:fd:04:76:47:8b:
c4:d1:0e:9a:8f:1e:97:76:17:ac:31:ab:db:0e:a4:
f4:29:80:cd:eb:c0:bb:10:62:78:da:d6:49:d0:e1:
30:1d:78:bb:9a:4d:c5:b3:f8:86:5b:44:a5:1c:92:
4f:fa:8c:46:71:aa:fa:b3:a2:58:93:98:e6:27:cc:
ba:e4:d5:c1:b9:61:f3:18:f1:4a:6e:f7:6b:be:a8:
7f:3e:9a:e1:44:5e:13:61:45:d0:f0:ad:2c:1d:a0:
a4:a5:23:60:8d:7b:b6:df:bf:bb:06:57:09:03:7d:
92:b4:0c:ca:f5:2d:40:c9:4c:64:24:04:03:55:82:
cf:23:0d:12:f1:60:d9:1d:aa:34:46:80:d0:5d:36:
5d:a1:b3:49:e4:94:99:8f:2d:f6:9c:ce:14:25:87:
8e:31:35:5d:2f:0f:a2:b7:8a:2f:a0:8e:b9:b6:64:
b9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:83:49:38:76:64:42:6F:9D:DB:31:93:AA:41:13:02:1D:18:0E:02
X509v3 Authority Key Identifier:
keyid:E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:8a:98:7a:9b:b1:a7:fa:53:3f:e3:55:c9:89:66:84:5b:09:
2f:17:f7:41:8c:77:09:92:72:6b:04:2d:84:f2:08:e8:a3:5e:
d7:cd:6a:82:97:70:85:b9:4e:9b:89:79:5e:bd:b9:c5:b7:7b:
86:72:7a:54:81:b6:88:18:24:2b:ec:8b:cc:75:7a:19:de:9e:
2c:28:e8:cf:bd:db:96:5d:3b:5b:a0:5f:a3:a6:46:ef:4d:c2:
c6:03:79:78:06:e0:c7:6c:49:e5:09:32:40:ae:1e:87:7d:9a:
f3:00:22:bc:1b:a3:bd:76:15:21:26:89:f6:0c:5e:ed:c5:a7:
38:f5:c0:c3:17:4d:a3:7f:02:7a:0c:46:81:e3:b3:02:31:88:
2e:59:df:5c:6b:fe:53:83:1a:c7:83:4d:01:e0:91:95:6f:d1:
16:b6:9d:3f:79:97:75:fc:1a:a8:d3:c6:99:19:74:2a:03:a3:
4a:3b:8f:57:16:c5:ac:f2:72:23:fc:ae:01:f0:4e:ef:ad:d0:
81:ad:21:62:dd:d4:7c:71:68:a4:ca:ef:b1:fa:dd:28:9a:90:
c7:ff:26:e2:66:ef:50:30:ed:6a:65:ad:18:fd:0a:07:4b:93:
64:cc:8f:d5:93:88:e1:97:75:20:17:b8:fd:0a:53:e5:93:38:
f1:66:45:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:14:15 2026 by rpki-client