
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft
File: 5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft (raw, json)
Hash identifier: W/v1zFwsx98oIIVkeBjNEwH18PcOX2weDoRDD5BQvXo=
Subject key identifier: 63:AC:F7:65:3A:13:7B:65:8F:93:B9:2F:DF:5F:8B:30:88:2E:B0:ED
Authority key identifier: E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4
Certificate issuer: /CN=A915C15F/serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4
Certificate serial: 071F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft
Manifest number: 0708
Signing time: Tue 24 Mar 2026 21:50:19 +0000
Manifest this update: Tue 24 Mar 2026 21:50:19 +0000
Manifest next update: Tue 31 Mar 2026 21:50:19 +0000
Files and hashes: 1: 5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl (hash: i5wB+cx8DB8mubSUI7DDUSoEHaZbfulh6NDgToYTdbo=)
2: 2540A3D24C9F11F0B3E79877C4F9AE02.roa (hash: qGDdg1i//pxSkkb/V0tDuFd0TZJsem9c+GmeMw73mWI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl
rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1823 (0x71f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C15F, serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4
Validity
Not Before: Mar 24 21:50:19 2026 GMT
Not After : Mar 31 21:50:19 2026 GMT
Subject: CN=69c3071b-3092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:19:08:c3:b7:92:f6:a7:7e:46:7c:05:30:13:
32:ed:e3:1c:c7:24:04:08:a0:91:10:f8:3b:5b:69:
ce:22:a1:40:99:62:c0:a8:df:94:55:af:b3:f3:09:
6f:49:24:84:7d:ee:ca:3c:b2:16:0c:d8:f2:b2:9b:
58:e3:cb:c8:4a:5c:9a:dc:ca:c3:c4:82:e6:80:98:
d9:9f:e1:ff:14:ea:87:8b:c9:4d:15:bf:5b:41:d4:
52:db:07:b5:8f:68:46:47:60:61:e8:ea:0f:dd:48:
1b:b0:75:6a:1e:48:e3:c8:c1:21:47:e8:c0:b2:ee:
af:a7:ee:91:08:aa:b6:59:83:eb:65:a5:15:0b:c6:
c4:2d:ca:fb:2b:0b:28:2e:00:d8:8e:40:7b:11:1b:
92:3f:d5:39:88:75:7e:42:6e:b2:dd:ee:33:82:0f:
76:ff:71:16:86:44:a5:29:5c:e5:cd:82:d4:28:a5:
64:9c:8b:0e:8b:31:a9:53:fb:8b:4b:01:c1:4a:44:
84:1e:76:be:f7:3d:76:a5:c6:93:7f:64:a6:ae:a9:
86:63:98:a2:39:ea:ba:cc:4f:7e:21:6a:06:38:1f:
4c:b2:f1:59:13:7b:82:cb:9c:60:17:49:fe:99:25:
42:86:40:cc:e5:f6:cb:a7:04:a8:61:d1:9b:ff:1b:
df:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AC:F7:65:3A:13:7B:65:8F:93:B9:2F:DF:5F:8B:30:88:2E:B0:ED
X509v3 Authority Key Identifier:
keyid:E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a6:79:9e:84:e5:44:7e:ce:be:cc:6c:92:93:e4:12:9b:a8:
42:42:d8:b5:1c:25:81:fd:9f:22:69:b3:a3:2a:a5:d1:e3:33:
14:e8:c0:12:0c:c9:a9:70:6b:7f:6b:5a:ef:40:42:5b:8e:a8:
53:fd:13:ba:ab:40:79:2f:41:5c:4b:35:d4:26:d5:6e:ca:98:
9d:e4:ae:be:05:0c:c5:de:6c:f7:d3:15:8b:4a:3c:20:03:5c:
02:c5:4d:86:73:d5:8f:e1:4b:4e:ee:7b:41:79:09:c9:9d:05:
bd:01:34:be:ad:3b:ee:35:bf:47:de:63:3a:e0:33:45:45:b5:
3e:6e:b8:cd:ba:aa:38:58:c9:ae:51:f0:c6:c3:fc:15:dc:81:
1b:e5:df:e6:3a:64:93:8d:9e:89:ce:db:47:f4:cf:49:65:8c:
67:e6:79:c7:e2:f4:dc:16:d3:ee:92:cf:ea:a0:7e:1a:7e:60:
6a:a3:c3:29:d9:e2:ff:83:60:28:27:15:d2:44:09:a5:07:f9:
6e:81:19:b3:f1:8f:28:30:0b:06:d6:38:50:a3:b1:fa:02:1e:
78:cf:dc:7e:73:0d:4d:38:8a:41:87:0d:37:17:00:cb:ed:c7:
5e:6d:3b:ea:45:43:bd:51:19:23:fd:a0:27:83:89:40:c2:c6:
a8:3f:76:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:03 2026 by rpki-client