
$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
File: s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft (raw, json)
Hash identifier: YeMDLVazAyJjjeOkH/s6IWaezAlT/a1GjI2nZH99xic=
Subject key identifier: F3:F3:A9:FE:AB:93:84:E1:0E:B9:83:55:35:E9:FA:75:BD:DD:17:3C
Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
Certificate issuer: /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Certificate serial: 01F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
Manifest number: 01E7
Signing time: Thu 23 Jul 2026 04:56:50 +0000
Manifest this update: Thu 23 Jul 2026 04:56:50 +0000
Manifest next update: Thu 30 Jul 2026 04:56:50 +0000
Files and hashes: 1: s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl (hash: oq7H/u6paEmAUWUFEmafQxEk5ZPv3cDOiKiJAQ9VM+Y=)
2: A97CBD42A06611EFA888B57DC4F9AE02.roa (hash: 4V1R4yBz9L+Ygkp9Jd1O9idd1/44LPhkeQiPf1Qbp1Q=)
3: 762CACD0B04311EF95390327C4F9AE02.roa (hash: cvBldBadb8nJSATgwrsmCmmppZB2HYAM+GSD2SpFaCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl
rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505 (0x1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917530D, serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Validity
Not Before: Jul 23 04:56:50 2026 GMT
Not After : Jul 30 04:56:50 2026 GMT
Subject: CN=6a619f12-9dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:5c:6a:5b:bb:e6:b9:cd:b4:99:ba:e3:dc:
1e:80:6f:f1:1c:fe:41:84:13:04:f8:12:d5:11:fb:
92:36:45:f5:6d:a3:fc:57:4b:28:7f:51:38:e4:9e:
f5:f9:ba:83:42:4c:44:80:17:8e:59:39:6a:7f:74:
b9:b0:23:c0:d9:b4:9b:df:44:aa:67:25:cc:ad:5d:
89:2b:2c:b8:b0:5a:1c:46:84:ad:85:a9:7d:3e:61:
b0:6e:37:b9:58:4c:17:da:5b:90:15:71:b4:ad:0f:
ce:03:f0:a4:b0:dd:9e:a5:c5:76:d0:97:34:92:eb:
26:aa:da:04:15:bb:01:40:18:31:47:00:05:c3:fa:
7e:71:1a:8f:94:cc:5e:5c:7d:51:59:70:44:49:a1:
a3:1f:35:8a:5b:dd:b8:3c:ea:7e:8d:47:5d:79:0d:
f1:e6:b6:1a:3d:22:fe:4a:60:d3:8b:2c:5f:9a:fb:
b2:04:66:78:11:80:a5:f7:eb:8a:79:39:80:4a:a0:
93:52:8b:3c:3c:c7:b5:2d:53:50:8c:c3:ca:6c:ae:
18:ba:07:89:df:d3:df:0f:0e:65:c7:0e:48:d8:c7:
7b:b7:27:22:45:e7:b6:d7:26:2c:b6:cf:e6:f3:40:
93:69:cf:86:8e:f5:e9:85:ce:13:60:1a:7e:2e:73:
8c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F3:A9:FE:AB:93:84:E1:0E:B9:83:55:35:E9:FA:75:BD:DD:17:3C
X509v3 Authority Key Identifier:
keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:5d:e7:1e:70:15:96:a7:6b:b1:58:12:a1:4b:3d:a4:bb:51:
61:31:67:d2:8c:e0:2c:df:96:55:4f:d4:8b:20:cc:1e:7e:62:
3f:ad:c0:df:c9:89:be:4c:b8:d3:25:01:83:2d:a2:ed:80:80:
4c:76:c0:0c:d0:3c:b9:4f:0e:be:bc:d2:73:a4:8b:d4:2c:85:
c7:7c:60:8d:8b:9b:e6:3e:f1:b6:f9:9d:12:af:0e:20:4e:9c:
4f:47:b8:42:47:3b:93:f1:73:55:98:c7:04:f9:59:9e:11:c6:
e0:f9:48:81:19:05:36:ef:c6:41:7e:0f:b4:24:1d:38:4d:16:
6c:6a:80:aa:94:0b:f5:e2:ff:c8:b5:40:db:c0:4b:1d:cb:b5:
87:8f:e1:75:7d:a5:05:a6:db:33:e9:49:11:d4:92:d6:b2:39:
96:ce:2c:97:e8:7b:c6:75:05:dd:5c:63:34:89:76:d3:f0:21:
b4:b9:5a:2a:41:8a:9d:c5:f6:5f:7b:b1:ab:56:43:7a:6c:89:
93:47:16:76:6d:cb:72:97:53:a2:68:24:62:6e:70:35:f1:36:
af:c0:c5:a4:62:60:d8:35:0f:8f:8b:86:8a:5b:43:c7:34:ba:
34:4d:89:ed:ba:76:27:4a:25:c3:83:ba:9f:49:2d:bd:4e:c1:
b9:30:25:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:24:26 2026 by rpki-client