
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
File: r-cn5CCdzfgnYldLXjPICDeHoY8.mft (raw, json)
Hash identifier: JERIr8QiiuMYN2a6hqlyfuuqq0cQXMNOKtZrlEQc+bQ=
Subject key identifier: 4D:9D:44:5B:A5:00:83:E3:EC:1C:B2:58:89:C5:30:E6:81:94:C6:6F
Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F
Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F
Certificate serial: 1F72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
Manifest number: 1F01
Signing time: Tue 12 May 2026 16:02:53 +0000
Manifest this update: Tue 12 May 2026 16:02:52 +0000
Manifest next update: Tue 19 May 2026 16:02:52 +0000
Files and hashes: 1: r-cn5CCdzfgnYldLXjPICDeHoY8.crl (hash: ApScktn3OF+Id+FLe1Bb1zBYV3q05TP0h0q/pTBXIsw=)
2: 7EFB8A6E885311E6BDE50A80C4F9AE02.roa (hash: yrw/Wliea2v/nhT95C1H6CHn+Y9xHNL1DsyB2AthFt4=)
3: 882AC358E1F511EE9188A919C4F9AE02.roa (hash: 8+HVn+1aDWLHtIQalu+KT6alxAIGWOxLQB3VgePG+TU=)
4: CF946690E5E711EE89AF4E5AC4F9AE02.roa (hash: R0F5zzc+BpzP1/ZU/NVRkNdsAgNiR161974QmuBaZJM=)
5: 5C6A7BE6E1F511EEA08A5519C4F9AE02.roa (hash: orzccmiNSicAop/OpjFFJ2tGr1eSdfKFi4jU7YLYc30=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl
rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8050 (0x1f72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AE5F, serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F
Validity
Not Before: May 12 16:02:52 2026 GMT
Not After : May 19 16:02:52 2026 GMT
Subject: CN=6a034f2c-edd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:19:a3:b6:f5:8f:ad:56:1d:9f:01:b0:76:
c1:54:8f:92:19:f2:8e:a9:2f:b5:72:4c:dd:ce:4b:
94:89:9d:ba:38:74:11:1d:5f:47:53:dd:b9:4e:3b:
4c:4b:3a:a7:78:ee:26:a4:39:d4:64:49:f2:f6:35:
f3:84:29:51:f7:a9:60:63:ff:72:b0:6f:3a:5c:08:
87:eb:b6:ae:22:cd:2b:c6:ce:28:d9:bf:f2:ad:99:
39:4b:ed:aa:e4:97:e0:32:12:d1:9d:f9:f0:29:f2:
41:87:e7:6e:4e:f9:69:c4:54:b1:71:1b:1d:95:5f:
f2:0e:07:38:65:11:c2:80:ec:ae:f1:72:34:a9:3a:
a6:20:39:83:3b:92:b0:48:09:fd:4d:68:2a:0d:bf:
53:43:dd:1f:af:4d:07:89:cb:7d:f8:0f:89:d1:67:
1e:50:d9:f0:d1:67:89:34:78:2c:3a:45:ac:bd:98:
51:81:2b:e8:f4:88:9a:9d:73:7f:92:00:51:45:f5:
34:bb:f2:07:90:6d:95:8e:a8:b1:b4:d4:0a:fc:6f:
73:b6:59:d9:f9:9f:7f:46:04:39:55:42:fe:c2:8c:
33:aa:d5:b9:3c:fb:0e:a6:15:63:6b:9a:61:9d:89:
ae:1e:19:ce:ba:53:a0:4a:21:8c:bd:ce:75:05:78:
8c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9D:44:5B:A5:00:83:E3:EC:1C:B2:58:89:C5:30:E6:81:94:C6:6F
X509v3 Authority Key Identifier:
keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d4:d6:94:0c:5e:ad:c5:7e:80:41:0e:9f:15:1b:9d:b5:fe:
af:9a:dd:f3:f2:9e:b7:c6:0c:cd:c7:52:f1:c4:a8:fb:17:48:
df:ae:80:52:53:1c:dc:38:e2:49:e6:e2:b4:ac:25:a4:0c:de:
e6:8f:77:e8:c1:b2:42:bb:a9:23:0d:2c:f2:91:23:fc:30:fa:
08:95:9a:d8:ad:3e:e2:db:96:0b:ba:e7:fe:87:49:c6:f4:2d:
5e:6d:ef:26:e4:3e:ff:13:3c:1d:22:75:4f:e7:aa:c4:1c:05:
eb:aa:a5:95:06:19:89:72:41:22:e4:33:3c:de:16:02:eb:c6:
3f:d6:65:3b:e8:da:a7:24:8e:c7:36:d0:a1:fb:2e:68:1e:fd:
07:aa:cb:d9:66:cd:71:5c:e4:09:d0:90:e2:6b:90:b6:bd:fd:
ea:60:28:19:07:ed:1e:f6:50:79:7c:25:29:d3:d8:48:39:b6:
7a:87:d2:2a:23:bc:86:f6:32:40:b8:a3:55:47:cf:40:d7:7b:
8b:55:71:29:2d:67:94:c4:10:d6:4b:db:99:72:52:ce:66:14:
b3:3e:b2:28:7d:d1:dc:74:f9:91:e2:75:56:c5:42:72:8e:f8:
e9:0c:7a:cb:1c:35:3b:37:8c:55:05:a6:18:51:ae:8f:fa:e2:
06:50:a1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:42:23 2026 by rpki-client