
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
File: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft (raw, json)
Hash identifier: q5GNbyi4jgzODaNyb18cvk7D/2L+A3pljDvZKy0RT+w=
Subject key identifier: E4:20:6C:17:50:7F:E4:90:B3:72:1F:06:74:A4:73:A2:91:D6:DE:81
Authority key identifier: E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25
Certificate issuer: /CN=A914A47A/serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25
Certificate serial: 356A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
Manifest number: 3562
Signing time: Wed 22 Jul 2026 14:54:55 +0000
Manifest this update: Wed 22 Jul 2026 14:54:55 +0000
Manifest next update: Wed 29 Jul 2026 14:54:55 +0000
Files and hashes: 1: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl (hash: SbdirTPb6ZrqZgFb2b33Hha/ENvDMiXZvYW9vXfMfKg=)
2: A5C01D6ED15511EA904EF30BC4F9AE02.roa (hash: k52zzNPlnYvuAvYWIlxb4hsiHOOq9dzm/h/OPeTzfmw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl
rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13674 (0x356a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A47A, serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25
Validity
Not Before: Jul 22 14:54:55 2026 GMT
Not After : Jul 29 14:54:55 2026 GMT
Subject: CN=6a60d9bf-5162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:45:3f:57:9b:ec:b5:9c:cb:ef:10:c7:1d:
77:52:f4:ab:0b:cc:53:22:37:6c:b6:37:fe:f1:4e:
0c:1a:e7:4f:d5:7a:bf:41:bc:0d:ee:ef:06:9e:b9:
52:1c:4b:d0:2e:bc:53:a7:14:51:d6:74:13:21:ff:
04:3c:3c:46:8f:18:20:c2:4d:4c:5f:e8:0e:d6:12:
c6:55:3c:f8:c1:e4:c3:a5:6b:41:90:d2:52:74:2d:
4c:ee:07:2e:37:f2:5e:ef:0a:96:15:5f:21:36:2e:
47:8b:02:d8:4d:43:fe:de:24:bb:2c:1f:bd:f7:7f:
89:65:dd:7c:9e:2a:22:97:e6:be:07:68:ec:3b:65:
40:fd:ff:fb:34:65:55:4a:db:e5:ec:c7:9d:9a:74:
e5:42:95:37:ca:d0:c1:e1:f8:50:75:bc:c2:1a:02:
28:9e:25:f5:29:9e:a6:0a:93:c9:ac:75:b5:b6:3b:
74:fe:27:e1:5a:61:32:82:cf:7e:17:89:74:3d:54:
09:4a:6d:35:18:15:40:e3:10:b2:7d:cb:88:cc:11:
89:6e:f1:5e:3e:94:8c:45:40:f3:1c:18:72:c0:e5:
a2:4d:ef:33:fd:b9:e0:0d:3b:e6:9c:f5:95:b1:f3:
f0:29:7a:71:0d:b1:cd:36:f9:61:66:2e:b9:30:39:
02:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:20:6C:17:50:7F:E4:90:B3:72:1F:06:74:A4:73:A2:91:D6:DE:81
X509v3 Authority Key Identifier:
keyid:E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:af:c7:94:1d:be:1b:d0:a5:d7:7c:48:bc:11:1e:0c:54:e8:
a3:23:ba:98:b6:c8:ca:92:f1:57:19:53:0d:f5:10:b0:fb:55:
51:51:b8:ab:59:d6:a2:36:d5:bc:2c:41:26:00:74:f4:c7:be:
a8:49:ad:e8:49:23:e6:a0:47:9f:ac:a3:e9:53:44:25:91:78:
03:78:54:0f:78:c2:67:f7:b6:03:dc:0f:6c:e1:3d:12:6a:4d:
c3:1d:28:6f:e0:ab:bd:70:5d:5e:61:20:ec:45:6f:29:f3:7e:
04:d4:3c:0f:e3:eb:a2:c0:62:5a:14:2a:b4:6d:43:35:0c:b0:
7e:d0:21:54:46:9d:7e:10:17:45:d2:31:ae:bc:22:26:ef:d8:
21:5d:e8:b9:49:54:3c:39:40:92:d9:fa:bf:1b:5e:99:5d:11:
bd:ec:18:78:91:b6:1b:e3:ba:94:a7:a0:d6:76:8d:c6:30:de:
96:52:3e:5c:6a:80:86:e9:1c:8f:b7:ed:08:20:cc:9f:d1:ef:
4b:b4:44:34:9f:40:91:5d:6c:d4:2c:14:32:30:4d:4b:d5:20:
9e:bf:57:b3:e9:1e:2a:c1:96:db:bb:57:84:9e:d4:45:7b:49:
59:c1:d6:6f:f1:ea:46:dd:a3:97:c9:b8:7e:e8:8a:86:37:f3:
c2:58:90:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE0N0ExMTAvBgNVBAUTKEU1MkQ3RjdGQkFBQzFGNzVBRkZBNzYyRURCM0YyODE2
MEJDRkJEMjUwHhcNMjYwNzIyMTQ1NDU1WhcNMjYwNzI5MTQ1NDU1WjAYMRYwFAYD
VQQDEw02YTYwZDliZi01MTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt+RFP1eb7LWcy+8Qxx13UvSrC8xTIjdstjf+8U4MGudP1Xq/QbwN7u8GnrlS
HEvQLrxTpxRR1nQTIf8EPDxGjxggwk1MX+gO1hLGVTz4weTDpWtBkNJSdC1M7gcu
N/Je7wqWFV8hNi5HiwLYTUP+3iS7LB+993+JZd18nioil+a+B2jsO2VA/f/7NGVV
Stvl7MedmnTlQpU3ytDB4fhQdbzCGgIoniX1KZ6mCpPJrHW1tjt0/ifhWmEygs9+
F4l0PVQJSm01GBVA4xCyfcuIzBGJbvFePpSMRUDzHBhywOWiTe8z/bngDTvmnPWV
sfPwKXpxDbHNNvlhZi65MDkCZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOQgbBdQ
f+SQs3IfBnSkc6KR1t6BMB8GA1UdIwQYMBaAFOUtf3+6rB91r/p2Lts/KBYLz70l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTQ3QS80QUYyMjFEQTFE
OTgxMUUyQUQyQjM5ODIwOEIwMkNEMi81UzFfZjdxc0gzV3Ytbll1Mno4b0ZndlB2
U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVTMV9mN3FzSDNXdi1uWXUyejhvRmd2UHZTVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTQ3QS80QUYyMjFEQTFEOTgxMUUyQUQyQjM5ODIwOEIwMkNEMi81UzFfZjdxc0gz
V3Ytbll1Mno4b0ZndlB2U1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj6/HlB2+G9Cl13xIvBEeDFTooyO6mLbIypLxVxlTDfUQsPtVUVG4q1nWojbV
vCxBJgB09Me+qEmt6Ekj5qBHn6yj6VNEJZF4A3hUD3jCZ/e2A9wPbOE9EmpNwx0o
b+CrvXBdXmEg7EVvKfN+BNQ8D+ProsBiWhQqtG1DNQywftAhVEadfhAXRdIxrrwi
Ju/YIV3ouUlUPDlAktn6vxtemV0RvewYeJG2G+O6lKeg1naNxjDellI+XGqAhukc
j7ftCCDMn9HvS7RENJ9AkV1s1CwUMjBNS9Ugnr9Xs+keKsGW27tXhJ7URXtJWcHW
b/HqRt2jl8m4fuiKhjfzwliQVA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:32:09 2026 by rpki-client