
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
File: 55ST8wo-6fDuQFIv8Z1oXIBium4.mft (raw, json)
Hash identifier: PLO/VepaaRirxYO1r6+C2t56HtDCSaD1bdotTmQ+sPQ=
Subject key identifier: 53:EA:77:47:5B:F9:8A:A8:05:02:B7:E1:E6:5A:D3:88:BC:FF:C1:29
Authority key identifier: E7:94:93:F3:0A:3E:E9:F0:EE:40:52:2F:F1:9D:68:5C:80:62:BA:6E
Certificate issuer: /CN=A916E377/serialNumber=E79493F30A3EE9F0EE40522FF19D685C8062BA6E
Certificate serial: 01C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
Manifest number: 01BB
Signing time: Wed 25 Mar 2026 03:12:12 +0000
Manifest this update: Wed 25 Mar 2026 03:12:11 +0000
Manifest next update: Wed 01 Apr 2026 03:12:11 +0000
Files and hashes: 1: 55ST8wo-6fDuQFIv8Z1oXIBium4.crl (hash: LVdfaoscPUqfF8xQK4eG7xPIzDCe06yOSD/N3drlYII=)
2: 54692EB02FB111EFAD1C6322C4F9AE02.roa (hash: 7PaoHMA6XoZT4XJHkHBVfGbdDy263FRPB28wrXF5INM=)
3: 53F6AEC62FB111EFAD1C6322C4F9AE02.roa (hash: qSH4X3E9iU1ItPXDoiYYarRMYkBkjokUnUqcSYPUUxk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.crl
rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E377, serialNumber=E79493F30A3EE9F0EE40522FF19D685C8062BA6E
Validity
Not Before: Mar 25 03:12:11 2026 GMT
Not After : Apr 1 03:12:11 2026 GMT
Subject: CN=69c3528c-2359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f6:74:84:6e:42:8a:af:31:eb:e0:bd:93:f4:
d3:02:c0:5f:30:c0:46:5b:da:23:31:75:ac:8c:e8:
a4:ec:fb:c2:79:50:71:8f:39:f8:7a:7a:35:de:23:
3e:71:82:2d:e6:78:01:a0:99:94:fa:9d:29:80:f4:
c6:3d:f7:8d:c4:23:7c:85:c9:f3:19:7c:37:da:9a:
a9:fb:01:26:26:da:4f:78:ef:ba:cc:3e:3e:54:9d:
a3:86:a9:3b:12:b1:b2:77:8d:cd:bb:e1:ea:90:05:
40:6c:5a:49:73:ac:e6:2f:1e:1d:4b:07:b9:3f:79:
e3:57:dd:53:bc:93:77:3c:76:e9:97:2c:a6:9f:e8:
89:7e:8e:ac:25:88:fa:e4:be:f8:35:d6:fc:bd:8c:
fe:c4:64:9f:a6:d2:f5:ec:f5:63:e7:3b:98:ef:ec:
a4:56:b9:95:fc:64:9c:a8:61:48:43:3f:69:ac:6e:
1a:73:85:07:7f:67:e6:f5:37:67:e2:f2:bc:ec:5d:
5d:9d:a6:59:bb:f0:69:1e:20:88:38:b8:36:eb:a7:
a1:26:5f:ac:be:95:fc:ca:b5:99:c3:68:f8:cc:6a:
7f:ed:4e:56:f8:b7:c3:28:24:0d:1b:53:91:d8:a8:
67:71:8e:c3:b5:b8:0f:f6:d8:a1:dc:51:b3:ec:9d:
8f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EA:77:47:5B:F9:8A:A8:05:02:B7:E1:E6:5A:D3:88:BC:FF:C1:29
X509v3 Authority Key Identifier:
keyid:E7:94:93:F3:0A:3E:E9:F0:EE:40:52:2F:F1:9D:68:5C:80:62:BA:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:d8:ea:b1:d8:80:bc:b1:ae:7f:ce:fd:d9:e3:be:9b:ed:02:
81:49:06:a2:6f:9b:da:6b:d7:17:05:88:03:22:30:32:5e:c2:
58:be:15:f8:d0:05:10:d6:20:0a:73:3e:72:5a:18:fc:76:57:
47:1e:55:11:19:94:fd:2f:e9:0e:bc:59:0b:bc:03:cb:52:14:
ae:95:70:c1:e0:cc:ab:55:05:8b:6e:fb:f8:d8:89:8e:a6:97:
f9:5f:05:52:c5:8f:26:f7:74:b4:0a:d5:89:d1:60:d3:22:a4:
64:7b:e6:9b:c4:82:d9:d5:7e:ea:13:16:6e:63:86:cc:c0:bf:
96:a0:c4:2a:89:99:ff:46:a3:75:6c:43:cd:1e:15:03:c3:2d:
e6:26:8d:32:d9:29:3e:d4:36:01:cd:23:3e:c0:51:e4:3b:c4:
46:57:df:a5:8d:3f:d1:67:96:a6:80:07:e5:c8:7a:01:f1:03:
18:7b:62:06:94:cd:7c:e2:80:0e:a6:ba:19:1f:d8:80:41:91:
fd:fd:b8:94:0a:58:65:c9:07:e3:3c:69:b2:8d:32:54:f7:3f:
e0:75:a9:46:13:e4:be:d5:71:c5:d1:9c:43:80:90:bc:17:cf:
d9:39:e0:b4:90:a1:a3:a7:16:9b:b0:8e:bc:46:dc:32:a3:ee:
58:4a:c1:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkUzNzcxMTAvBgNVBAUTKEU3OTQ5M0YzMEEzRUU5RjBFRTQwNTIyRkYxOUQ2ODVD
ODA2MkJBNkUwHhcNMjYwMzI1MDMxMjExWhcNMjYwNDAxMDMxMjExWjAYMRYwFAYD
VQQDEw02OWMzNTI4Yy0yMzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1PZ0hG5Ciq8x6+C9k/TTAsBfMMBGW9ojMXWsjOik7PvCeVBxjzn4eno13iM+
cYIt5ngBoJmU+p0pgPTGPfeNxCN8hcnzGXw32pqp+wEmJtpPeO+6zD4+VJ2jhqk7
ErGyd43Nu+HqkAVAbFpJc6zmLx4dSwe5P3njV91TvJN3PHbplyymn+iJfo6sJYj6
5L74Ndb8vYz+xGSfptL17PVj5zuY7+ykVrmV/GScqGFIQz9prG4ac4UHf2fm9Tdn
4vK87F1dnaZZu/BpHiCIOLg266ehJl+svpX8yrWZw2j4zGp/7U5W+LfDKCQNG1OR
2KhncY7DtbgP9tih3FGz7J2PAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFPqd0db
+YqoBQK34eZa04i8/8EpMB8GA1UdIwQYMBaAFOeUk/MKPunw7kBSL/GdaFyAYrpu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTM3Ny84QTZEMTBCNjg4
M0MxMUVFOTU1NkJCNkVDNEY5QUUwMi81NVNUOHdvLTZmRHVRRkl2OFoxb1hJQml1
bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzU1U1Q4d28tNmZEdVFGSXY4WjFvWElCaXVtNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RTM3Ny84QTZEMTBCNjg4M0MxMUVFOTU1NkJCNkVDNEY5QUUwMi81NVNUOHdvLTZm
RHVRRkl2OFoxb1hJQml1bTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYNjqsdiAvLGuf8792eO+m+0CgUkGom+b2mvXFwWIAyIwMl7CWL4V+NAFENYg
CnM+cloY/HZXRx5VERmU/S/pDrxZC7wDy1IUrpVwweDMq1UFi277+NiJjqaX+V8F
UsWPJvd0tArVidFg0yKkZHvmm8SC2dV+6hMWbmOGzMC/lqDEKomZ/0ajdWxDzR4V
A8Mt5iaNMtkpPtQ2Ac0jPsBR5DvERlffpY0/0WeWpoAH5ch6AfEDGHtiBpTNfOKA
Dqa6GR/YgEGR/f24lApYZckH4zxpso0yVPc/4HWpRhPkvtVxxdGcQ4CQvBfP2Tng
tJCho6cWm7COvEbcMqPuWErBTA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:41 2026 by rpki-client