
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.mft
File: p5fXmDuLOcgGaBZGSJrT0fCeD9s.mft (raw, json)
Hash identifier: YpWZG7XV6Ut9vQW7I84OvhVc9jdGbhvxY/cASnqlNCw=
Subject key identifier: 56:6B:BC:EA:DD:F6:69:A4:FD:5B:44:00:9F:1A:3B:56:18:1B:68:73
Authority key identifier: A7:97:D7:98:3B:8B:39:C8:06:68:16:46:48:9A:D3:D1:F0:9E:0F:DB
Certificate issuer: /CN=A916A78A/serialNumber=A797D7983B8B39C806681646489AD3D1F09E0FDB
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5fXmDuLOcgGaBZGSJrT0fCeD9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.mft
Manifest number: 0A
Signing time: Wed 25 Mar 2026 08:24:04 +0000
Manifest this update: Wed 25 Mar 2026 08:24:03 +0000
Manifest next update: Wed 01 Apr 2026 08:24:03 +0000
Files and hashes: 1: p5fXmDuLOcgGaBZGSJrT0fCeD9s.crl (hash: 3NYJg9mn4dxu4e8xSNL3JDHzL9M9gfd40pBmhTE1s44=)
2: 0997DA40251811F19187E6B0C0833773.roa (hash: EBehWsJCDzKDmD+oQkR35+7/S/sLkeR1I1PxlnGdMJA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.crl
rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5fXmDuLOcgGaBZGSJrT0fCeD9s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A78A, serialNumber=A797D7983B8B39C806681646489AD3D1F09E0FDB
Validity
Not Before: Mar 25 08:24:03 2026 GMT
Not After : Apr 1 08:24:03 2026 GMT
Subject: CN=69c39ba4-d5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:92:a8:9c:27:c0:5f:57:6d:81:b9:de:26:
a6:b6:f1:93:e1:6c:fe:9b:01:d8:1a:5c:1b:aa:80:
8d:e4:ea:07:da:4c:af:19:cc:af:f3:f4:1a:1f:6b:
d4:ac:ff:51:49:6d:82:e4:a1:c9:ca:d2:58:09:7d:
c6:6c:8a:8f:60:e3:37:d1:b9:01:1e:35:d8:c3:b8:
a4:4f:d6:73:ac:7c:43:42:09:31:28:a4:72:b4:d5:
c2:c4:af:41:d4:ca:6b:d4:af:93:a8:28:b4:ea:75:
05:64:ca:99:94:f3:2b:4c:02:5f:c5:fe:f3:a3:3e:
07:ee:68:f7:1d:cc:07:32:d5:57:a7:36:f3:53:54:
c7:ac:25:32:38:bd:dd:48:f5:09:4f:2c:72:75:8d:
a0:20:85:00:13:32:16:50:e6:19:32:af:0f:57:bc:
f0:b5:4f:13:02:01:15:34:d4:e4:dc:de:75:83:24:
9b:62:f5:d8:9f:67:9f:db:ae:30:6a:35:8d:26:a4:
e1:d8:ab:2a:e1:2f:c5:32:39:c6:bf:0b:f9:11:f3:
70:d9:ae:46:05:ac:1d:56:0b:45:28:31:5d:86:5d:
78:05:59:c2:c8:eb:47:68:3c:de:18:02:38:67:98:
70:05:19:54:e5:c1:40:47:dc:5e:60:bd:6e:8d:9b:
da:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6B:BC:EA:DD:F6:69:A4:FD:5B:44:00:9F:1A:3B:56:18:1B:68:73
X509v3 Authority Key Identifier:
keyid:A7:97:D7:98:3B:8B:39:C8:06:68:16:46:48:9A:D3:D1:F0:9E:0F:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5fXmDuLOcgGaBZGSJrT0fCeD9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:cc:8a:c1:dd:e6:92:37:af:47:a3:7a:8e:87:fc:f4:ad:12:
21:1c:7a:67:05:8f:db:70:b6:ab:20:1b:5d:0b:9b:ef:99:a3:
63:96:6f:f3:bd:84:f8:15:6c:67:53:67:ed:60:88:81:df:cd:
f4:f0:7c:21:56:8c:78:95:d4:9d:52:e8:a0:62:d2:72:89:c3:
2a:0d:05:0e:2d:e9:76:12:a3:a6:b3:d4:e4:90:fc:7b:7e:e8:
6a:37:f3:4b:e9:af:b9:d8:fd:1b:bb:c8:03:f4:c6:b4:94:aa:
2a:18:f3:9e:d4:fe:d5:eb:fa:00:fc:28:19:9c:41:f1:a8:b5:
9f:cb:e5:d6:14:1b:d6:95:6a:0b:f6:d9:8e:5b:e0:61:f7:2e:
47:8b:3e:35:e2:b8:38:92:05:9c:7c:9f:05:3b:6b:a6:85:10:
71:aa:5f:de:17:1d:38:47:f3:1d:dc:83:b5:dc:a9:f0:0d:51:
23:8f:b3:b8:76:ad:88:10:db:95:02:39:56:66:69:98:f7:a5:
8e:f0:24:7f:7f:cd:bb:08:fa:3a:24:3c:e8:bd:52:83:f8:8e:
7d:1f:1a:ed:ee:0c:b5:f0:32:a6:cd:f9:25:1b:30:4f:d4:5b:
0a:a8:df:f1:16:f6:e3:b6:13:95:c1:a8:54:de:a4:82:00:d1:
22:28:25:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:50:51 2026 by rpki-client