
$ rpki-client -vvf rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
File: 5K6ANyqGeYe7Kgq74RCrgENw1eM.mft (raw, json)
Hash identifier: SGnn9aK13XpAw8y43cyLOsACa+12rkASom7wD81OUjg=
Subject key identifier: D7:A8:C8:06:D1:7D:C8:44:C2:63:55:94:82:96:2D:70:1A:C7:12:3C
Authority key identifier: E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
Certificate issuer: /CN=A917452D/serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Certificate serial: 03B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
Manifest number: 033A
Signing time: Wed 25 Mar 2026 01:00:52 +0000
Manifest this update: Wed 25 Mar 2026 01:00:51 +0000
Manifest next update: Wed 01 Apr 2026 01:00:51 +0000
Files and hashes: 1: 5K6ANyqGeYe7Kgq74RCrgENw1eM.crl (hash: uZm8Tm8LNjzVyNXB1aNCuezLdp3V0ILnch5Qh5em2oU=)
2: 7D96BB10A96B11F09DD07C12C4F9AE02.roa (hash: 2RTgLoy0RD3Ypi83mkCGJfdMp3piRyK+gquTLVUemeE=)
3: AA71F05C60EF11EF8D645D72C4F9AE02.roa (hash: swmukQ/6inpZ4FJ1TMTK1/37WsZOejfr5bfE8ReGGHI=)
4: 10B04C9853D411EFB53AD61CC4F9AE02.roa (hash: TaXp1xs0fHIGcbbMRsW0b96QsUKlV9OQZhZUz5rKIOE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl
rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 953 (0x3b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917452D, serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Validity
Not Before: Mar 25 01:00:51 2026 GMT
Not After : Apr 1 01:00:51 2026 GMT
Subject: CN=69c333c3-212e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cb:ec:1e:96:56:37:fa:a3:da:ef:14:2b:a2:
05:7d:52:37:a0:b3:7e:ff:c7:4d:22:cc:73:36:7d:
5b:2b:70:bc:a7:a4:a3:29:ec:71:16:57:69:eb:c5:
3e:81:c0:d8:7a:cf:8e:04:51:4b:2a:0b:13:ca:42:
7b:95:6d:5b:d3:54:0f:90:1b:72:c3:3e:c4:d7:21:
d1:af:31:29:cd:a1:4d:12:2d:de:e4:e4:f1:d1:ff:
f3:cd:f6:14:fe:f5:82:a7:ef:9a:8d:84:39:63:31:
64:7c:f1:cb:99:78:da:a6:d8:8f:ec:03:b1:54:7f:
9f:d5:f6:0a:f7:de:6c:f5:87:53:94:0e:2d:91:3c:
11:f4:86:e3:6c:f6:ad:20:4b:1b:dd:6f:27:d5:4a:
1f:67:6b:bb:1d:8c:88:73:22:8f:97:a8:89:e1:d1:
4f:3d:b5:59:69:0c:ef:7a:14:f7:23:d8:ad:8c:39:
73:54:43:84:7a:11:b6:17:8f:38:84:f0:99:43:45:
2a:6d:0d:82:f1:49:0b:c0:29:04:97:b7:1e:05:ff:
c0:80:d7:d5:ae:a0:3f:52:39:a2:ab:d8:ca:fb:6e:
1f:8a:ff:57:2b:89:00:b1:3c:e0:c5:9c:5e:ad:b7:
8e:ad:ed:e9:dc:43:cd:0c:9e:ac:87:43:9c:ca:dd:
48:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A8:C8:06:D1:7D:C8:44:C2:63:55:94:82:96:2D:70:1A:C7:12:3C
X509v3 Authority Key Identifier:
keyid:E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:cd:bd:4c:25:ba:a7:ec:ee:d0:db:d5:97:7b:1d:4b:58:66:
73:33:12:9f:3d:ae:3b:8e:55:4b:f9:cd:93:63:e0:68:66:d9:
4c:97:d2:4a:27:32:74:1f:56:56:f9:74:02:5c:74:db:06:33:
2b:65:96:6a:c6:45:f3:12:13:3f:47:d1:db:50:74:6d:1f:12:
d6:b3:44:47:1b:85:d8:60:44:9a:0b:90:68:1e:84:1c:6b:e6:
f9:02:c2:5c:13:92:50:35:2b:40:6c:bf:67:70:ef:15:f2:dc:
b4:4b:d2:b0:d0:4c:f6:0e:eb:ea:1a:c2:54:6a:9f:7e:3b:a1:
ce:e1:64:15:bc:d9:4f:60:c2:5c:63:4b:4d:c6:94:a9:40:50:
22:db:75:20:87:5e:01:80:f1:4b:68:2f:a1:eb:fc:6b:5b:9f:
c9:35:f2:37:0d:22:16:41:ad:c7:00:2d:fe:79:ec:3f:d2:e8:
14:dc:94:8a:c5:a4:b0:b7:c6:ac:fd:41:b7:5a:a5:f7:ea:c3:
66:44:ea:52:0e:08:86:14:90:7f:60:86:57:32:6a:f6:39:7f:
6d:6c:99:14:52:8f:a3:cf:bb:4e:15:71:7e:fb:dc:24:70:d6:
34:2c:78:a3:1c:12:0a:76:b5:63:b1:6a:51:69:33:83:7e:cb:
6f:aa:29:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:12:14 2026 by rpki-client