
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
File: 52j8yLln1vHIgeDUmgxCCN8H-zc.mft (raw, json)
Hash identifier: Ro7hsv/ZrUrexxQ3MzTLTzII1qLXgIQUA9KLuA6HW+w=
Subject key identifier: 40:53:A6:2E:49:75:82:31:41:68:87:11:29:67:E3:74:36:ED:AE:50
Authority key identifier: E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37
Certificate issuer: /CN=A914C1AE/serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37
Certificate serial: 0413
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
Manifest number: 040B
Signing time: Wed 13 May 2026 00:32:25 +0000
Manifest this update: Wed 13 May 2026 00:32:25 +0000
Manifest next update: Wed 20 May 2026 00:32:25 +0000
Files and hashes: 1: 52j8yLln1vHIgeDUmgxCCN8H-zc.crl (hash: gwyHSYFmlXRy1yeqWcx1CFOPZ+XIcGCJ5LdjW55Q1wU=)
2: 1D3CD16AB67A11ECB02F1D5FC4F9AE02.roa (hash: dHW1Qook3wZ5zh5JBvm9IKVQr+R+p5FVYsj7ayk0Xrs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl
rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1043 (0x413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C1AE, serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37
Validity
Not Before: May 13 00:32:25 2026 GMT
Not After : May 20 00:32:25 2026 GMT
Subject: CN=6a03c699-d528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3d:2a:ba:b1:bd:60:9b:25:f2:0f:cf:12:a9:
45:8c:b3:39:25:bd:0e:6e:5e:fd:90:38:be:18:11:
82:9a:d3:64:c1:60:70:dc:f5:80:cc:f0:7c:2f:e2:
18:c7:5b:b3:bf:12:fa:e0:14:55:97:a4:25:9f:3a:
2d:f4:0c:f8:e2:12:3e:98:c6:83:23:16:0a:69:af:
8c:39:40:af:28:89:c6:c1:40:cc:c8:65:a6:3c:be:
01:02:78:74:02:bd:1a:0c:02:f5:49:4d:1f:2e:e4:
1e:80:55:7b:c5:43:bf:20:67:a1:7a:3e:55:39:7e:
35:28:71:5e:4e:8e:c7:4a:a7:3f:ad:91:ca:35:a6:
b6:db:de:99:f5:86:fd:f6:8e:84:7b:03:2c:15:3a:
33:4b:a2:db:c2:b6:1b:8f:02:f1:ab:78:93:71:a7:
e0:61:bd:3b:d8:0a:21:44:52:10:5d:ef:2a:56:80:
9c:36:b0:30:5a:94:33:17:9d:d5:74:b5:73:87:52:
57:ec:84:81:09:a6:89:b4:22:bb:8a:ed:44:1f:8b:
1f:c2:6e:b3:86:aa:92:98:17:9b:35:47:f0:a4:4a:
e3:4b:99:92:64:e3:c7:5f:14:c4:cc:5b:f2:55:00:
4b:10:2b:cb:38:cf:d9:fb:81:bb:ca:eb:04:c2:8a:
72:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:53:A6:2E:49:75:82:31:41:68:87:11:29:67:E3:74:36:ED:AE:50
X509v3 Authority Key Identifier:
keyid:E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:22:ab:cd:cb:db:bf:8e:78:af:4b:70:78:1c:54:a5:44:80:
41:01:cf:33:5f:6a:27:6f:e2:23:cf:eb:29:65:6a:44:63:f3:
46:1b:1d:71:3f:87:2a:86:ad:b6:9d:cf:31:6c:b0:c8:df:c1:
30:98:96:33:de:d5:76:f8:9d:3f:c7:a0:35:c2:6c:82:53:22:
25:56:b7:27:b6:77:70:69:2b:63:40:0b:dd:13:85:5e:a4:17:
e5:11:b9:73:9b:03:73:ed:d3:ef:0b:dd:01:a2:69:3a:f5:62:
91:a5:b7:92:5f:a6:09:32:a9:f8:e8:1d:9e:72:73:dd:81:76:
4c:a1:c8:fa:84:0b:66:22:31:64:e9:11:12:3e:9c:00:02:18:
7d:89:59:14:43:24:72:92:4c:eb:e0:11:61:5e:ee:05:de:6a:
fa:1d:ce:5b:58:bc:09:2a:a9:0b:90:51:41:2a:44:df:77:66:
be:bd:9e:47:53:29:b5:c0:e3:73:f8:cd:24:ed:37:48:9b:dd:
5b:75:19:96:82:13:b4:26:ef:26:d9:ef:5a:55:1b:d3:5f:f4:
52:f8:b5:40:b2:e0:31:04:56:fb:37:11:dd:59:8e:d0:37:45:
f4:ee:eb:be:1f:73:f6:a8:dc:da:99:f0:b9:35:0d:38:39:33:
f0:ab:6a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:29:16 2026 by rpki-client