
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft
File: 5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft (raw, json)
Hash identifier: cs8Ea9cnByxRGvvuJMsGiZySoc0tvqFBgpAv0Uo57AE=
Subject key identifier: 50:ED:E1:13:C9:1E:04:89:A1:66:10:14:CA:E3:F2:84:91:5E:37:CE
Authority key identifier: E4:62:3C:FD:44:3E:62:32:F2:6C:23:E8:1F:DF:97:58:B2:6F:3B:2C
Certificate issuer: /CN=A914F3BA/serialNumber=E4623CFD443E6232F26C23E81FDF9758B26F3B2C
Certificate serial: 0849
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft
Manifest number: 0844
Signing time: Tue 24 Mar 2026 20:34:00 +0000
Manifest this update: Tue 24 Mar 2026 20:33:59 +0000
Manifest next update: Tue 31 Mar 2026 20:33:59 +0000
Files and hashes: 1: 5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl (hash: xl8NXDm7ireywi78+WkkfIG+qDW7pw0L3PC5x437Hrg=)
2: D0D7EE48343211EFBF2C280DC4F9AE02.roa (hash: QBK2bfGdjPwo4v2ooL/I9Tsc0fhNTGv9YxWDlUwdQKI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl
rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2121 (0x849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F3BA, serialNumber=E4623CFD443E6232F26C23E81FDF9758B26F3B2C
Validity
Not Before: Mar 24 20:33:59 2026 GMT
Not After : Mar 31 20:33:59 2026 GMT
Subject: CN=69c2f537-505a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:a1:8d:59:f8:57:0d:e2:66:cf:21:42:94:
0b:f0:3f:50:b7:20:5a:cd:ff:24:14:3c:0e:57:b2:
17:c5:35:6c:a4:0b:fa:af:73:2f:6a:cd:fd:33:87:
8e:cd:d9:48:b3:ca:74:b8:e9:27:ac:38:44:28:27:
9b:21:fb:6e:00:05:9e:84:88:ef:6b:9b:06:ae:35:
2e:78:46:50:62:5e:02:26:3c:f0:91:c5:47:23:24:
7c:1b:cb:33:b6:0e:6c:cd:6f:81:fd:7c:6a:10:5b:
31:93:85:bf:3c:da:31:fb:5f:f3:66:ec:aa:5f:ac:
2a:fb:89:a9:09:6a:19:27:49:37:33:bd:0f:56:95:
60:90:92:e4:61:f6:2e:df:73:d7:f7:ae:7e:27:de:
1e:c9:c6:64:f0:64:a2:32:cc:21:1f:bb:6e:df:db:
f4:5a:3a:21:3a:88:de:a3:df:d9:07:dc:c2:fc:e3:
23:b9:b4:f2:91:7a:12:7c:34:6b:6a:ac:3a:02:83:
5d:71:76:06:5b:b3:9e:c8:5b:01:e3:3d:4f:9b:77:
1e:96:a6:a2:d4:bd:71:78:ad:03:dc:1a:cc:85:35:
50:53:26:3f:d7:8f:3d:e5:be:92:b5:f4:fa:f9:b1:
63:16:0d:0d:fc:37:cc:3f:8f:d0:af:55:d7:86:46:
68:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:ED:E1:13:C9:1E:04:89:A1:66:10:14:CA:E3:F2:84:91:5E:37:CE
X509v3 Authority Key Identifier:
keyid:E4:62:3C:FD:44:3E:62:32:F2:6C:23:E8:1F:DF:97:58:B2:6F:3B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:14:89:06:4a:8b:8e:9a:86:b2:fd:08:e3:48:38:1b:68:a1:
89:2e:87:05:bb:1b:09:9f:b3:cd:d2:65:5c:a3:10:1d:cf:1c:
58:23:6b:a8:64:66:d1:31:6e:27:bf:4b:5b:0f:ba:00:3f:e4:
e0:89:74:b8:30:74:8e:c1:72:18:57:16:a1:1f:6b:e8:f5:05:
5b:d7:f9:31:55:6d:71:5c:8b:0e:7a:a7:85:53:8b:0e:51:45:
41:04:1b:55:6c:0b:00:62:bf:bf:ea:2a:20:aa:8b:30:f8:61:
e7:83:99:40:48:3b:fe:8a:8f:84:4a:d6:7c:19:db:06:be:48:
0c:dd:50:be:a1:12:24:d2:95:e0:e7:41:df:e3:1e:ca:18:15:
e4:34:2c:6a:90:3d:20:3b:3c:9a:de:64:68:a0:0d:20:89:a5:
65:e8:bc:64:14:e5:ff:fb:b4:24:e2:f1:49:2c:3d:bf:6d:3a:
10:32:c5:7f:a1:ec:de:dc:2b:0e:15:75:18:7a:a7:26:02:1c:
86:55:23:fc:21:9d:a0:23:a8:ed:e6:15:af:c2:8d:f8:e9:68:
0a:06:bb:40:68:d8:ce:ee:64:3f:99:e4:e3:e7:c1:d6:c5:78:
2c:63:4a:cc:79:86:f6:fc:5a:21:b9:7e:1f:6f:ee:e0:35:16:
b3:b1:26:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:36:13 2026 by rpki-client