
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.mft
File: 5qAfnnpf4L1tom3Ak9swMffqvPU.mft (raw, json)
Hash identifier: PPrRext9x9Oj0hea+dd7RJ3g7B0KNtIWovJV8BSvUj0=
Subject key identifier: 31:2C:53:FC:FF:E0:E8:75:EE:7C:E5:4F:BF:03:ED:E4:7E:FA:D0:0D
Authority key identifier: E6:A0:1F:9E:7A:5F:E0:BD:6D:A2:6D:C0:93:DB:30:31:F7:EA:BC:F5
Certificate issuer: /CN=A915A6E1/serialNumber=E6A01F9E7A5FE0BD6DA26DC093DB3031F7EABCF5
Certificate serial: 3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qAfnnpf4L1tom3Ak9swMffqvPU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.mft
Manifest number: 39
Signing time: Wed 13 May 2026 08:44:59 +0000
Manifest this update: Wed 13 May 2026 08:44:58 +0000
Manifest next update: Wed 20 May 2026 08:44:58 +0000
Files and hashes: 1: 5qAfnnpf4L1tom3Ak9swMffqvPU.crl (hash: 33b5mWknzmHaz1bWze4RfZxXVVbIxfjj3rVg/AyV0TE=)
2: 5A1CA5FE001511F1B173DED1406F56BC.roa (hash: Q9xRalMlZSgL2EIEYXzUsDgkkdzjYwQVHna8NWAirhs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.crl
rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qAfnnpf4L1tom3Ak9swMffqvPU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A6E1, serialNumber=E6A01F9E7A5FE0BD6DA26DC093DB3031F7EABCF5
Validity
Not Before: May 13 08:44:58 2026 GMT
Not After : May 20 08:44:58 2026 GMT
Subject: CN=6a043a0a-08b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:16:c3:8f:3b:5c:e5:15:c0:f5:15:77:70:b0:
24:e6:cd:b1:8f:f2:07:f2:47:e5:f1:09:1c:45:7e:
ff:aa:9e:68:fd:51:40:99:b7:24:94:20:7f:9e:83:
fd:94:a0:f4:44:4b:b3:fb:67:dd:e2:d7:d1:5b:19:
b6:cb:73:bf:53:aa:75:11:19:34:3f:04:ce:0b:46:
41:f7:bf:37:9d:0f:77:45:82:97:53:f9:65:9c:c9:
7a:bb:b1:f4:30:8a:e2:f4:29:aa:d4:bc:95:ea:60:
db:80:e1:98:49:cc:4f:d2:27:93:cc:52:35:c7:ca:
72:06:ab:37:85:89:ff:d3:4b:e8:ae:c7:fc:c9:dd:
05:3d:85:a3:71:19:32:81:1f:df:da:18:eb:4a:66:
d0:81:4d:ae:66:30:aa:ca:44:a9:57:4c:1a:a9:7a:
a6:6a:9b:00:bd:4f:8b:45:b4:83:9d:b6:ed:ee:85:
04:5d:01:fc:70:5a:a0:73:5c:1c:12:c6:e8:c0:dc:
be:91:96:5c:1e:ba:e5:9a:54:3e:1a:8c:14:24:42:
c8:bb:da:ee:5a:43:3f:a5:b8:eb:31:dd:82:c1:f7:
49:d1:85:68:9d:de:6f:6c:d1:bb:81:08:36:74:74:
4d:f4:d2:3e:29:73:3b:27:56:33:5c:9d:eb:b5:5f:
d3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2C:53:FC:FF:E0:E8:75:EE:7C:E5:4F:BF:03:ED:E4:7E:FA:D0:0D
X509v3 Authority Key Identifier:
keyid:E6:A0:1F:9E:7A:5F:E0:BD:6D:A2:6D:C0:93:DB:30:31:F7:EA:BC:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qAfnnpf4L1tom3Ak9swMffqvPU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:e0:32:2a:a5:21:66:3d:44:6a:f0:94:97:d6:cd:9b:0e:46:
4b:fa:8a:9c:84:37:94:4b:95:dc:6f:fb:34:32:0e:6a:69:4a:
94:dd:f3:45:d4:e1:80:17:14:99:5a:75:0d:b2:54:80:b1:17:
3d:be:8a:de:08:98:b2:e7:a9:dc:ca:ff:48:c8:2e:5b:58:00:
49:f3:68:6c:4b:71:19:63:13:08:2c:80:85:3e:7e:48:e8:29:
24:f1:1b:b3:2b:53:65:f5:72:c5:8d:18:ea:2b:6b:68:47:4f:
4c:da:8d:77:58:6a:f1:25:4b:e4:08:ec:e3:9b:df:d1:57:a2:
74:44:2b:83:26:a9:b6:e7:95:dd:53:12:fa:a4:fc:2c:cd:54:
0c:a6:83:cd:2b:9a:18:74:00:88:e0:46:ef:50:e9:43:a3:d9:
4c:ca:3f:fd:b2:e5:8c:be:2d:7b:f4:a4:61:77:3e:53:d1:5b:
e0:9f:58:55:39:b8:f2:61:80:09:95:a6:9f:91:6b:a5:fd:e1:
88:a0:dc:b5:70:b3:c9:73:a1:c6:4f:c2:8b:77:ee:03:b7:bb:
7f:90:c8:8e:8e:98:5a:c0:8f:ea:bc:97:3b:43:a6:5c:ab:e8:
d4:0e:2d:92:3f:be:9e:21:f7:c8:5f:02:84:26:a3:07:a8:bd:
9a:3a:cb:6d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
QTZFMTExMC8GA1UEBRMoRTZBMDFGOUU3QTVGRTBCRDZEQTI2REMwOTNEQjMwMzFG
N0VBQkNGNTAeFw0yNjA1MTMwODQ0NThaFw0yNjA1MjAwODQ0NThaMBgxFjAUBgNV
BAMTDTZhMDQzYTBhLTA4YjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQFsOPO1zlFcD1FXdwsCTmzbGP8gfyR+XxCRxFfv+qnmj9UUCZtySUIH+eg/2U
oPRES7P7Z93i19FbGbbLc79TqnURGTQ/BM4LRkH3vzedD3dFgpdT+WWcyXq7sfQw
iuL0KarUvJXqYNuA4ZhJzE/SJ5PMUjXHynIGqzeFif/TS+iux/zJ3QU9haNxGTKB
H9/aGOtKZtCBTa5mMKrKRKlXTBqpeqZqmwC9T4tFtIOdtu3uhQRdAfxwWqBzXBwS
xujA3L6RllweuuWaVD4ajBQkQsi72u5aQz+luOsx3YLB90nRhWid3m9s0buBCDZ0
dE300j4pczsnVjNcneu1X9NnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMSxT/P/g
6HXufOVPvwPt5H760A0wHwYDVR0jBBgwFoAU5qAfnnpf4L1tom3Ak9swMffqvPUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBNkUxLzJEMDIyOEU2MDAx
NTExRjFBNTUyMEFEMTQwNkY1NkJDLzVxQWZubnBmNEwxdG9tM0FrOXN3TWZmcXZQ
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNXFBZm5ucGY0TDF0b20zQWs5c3dNZmZxdlBVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB
NkUxLzJEMDIyOEU2MDAxNTExRjFBNTUyMEFEMTQwNkY1NkJDLzVxQWZubnBmNEwx
dG9tM0FrOXN3TWZmcXZQVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC/4DIqpSFmPURq8JSX1s2bDkZL+oqchDeUS5Xcb/s0Mg5qaUqU3fNF1OGAFxSZ
WnUNslSAsRc9voreCJiy56ncyv9IyC5bWABJ82hsS3EZYxMILICFPn5I6Ckk8Ruz
K1Nl9XLFjRjqK2toR09M2o13WGrxJUvkCOzjm9/RV6J0RCuDJqm255XdUxL6pPws
zVQMpoPNK5oYdACI4EbvUOlDo9lMyj/9suWMvi179KRhdz5T0Vvgn1hVObjyYYAJ
laafkWul/eGIoNy1cLPJc6HGT8KLd+4Dt7t/kMiOjphawI/qvJc7Q6Zcq+jUDi2S
P76eIffIXwKEJqMHqL2aOstt
-----END CERTIFICATE-----
Generated at Wed May 13 14:19:21 2026 by rpki-client