
$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft
File: 54D6N3e4HUz2o1QG6lz0vk9l6fo.mft (raw, json)
Hash identifier: EKMIDdJFLvcdg0Aef2+VpRUZ98TakFDEAvZcEbpJz0w=
Subject key identifier: 62:9F:C8:B8:D8:D7:A0:C7:1A:71:07:CA:50:F3:32:B2:94:C1:56:CD
Authority key identifier: E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA
Certificate issuer: /CN=A917530D/serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA
Certificate serial: 01A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft
Manifest number: 019F
Signing time: Wed 25 Mar 2026 03:33:18 +0000
Manifest this update: Wed 25 Mar 2026 03:33:17 +0000
Manifest next update: Wed 01 Apr 2026 03:33:17 +0000
Files and hashes: 1: 54D6N3e4HUz2o1QG6lz0vk9l6fo.crl (hash: Zov32eun+QcDdopqJNCC8z3K0/uMd861lbk3hz5apNw=)
2: 1032223CBC2B11EE9E04192FC4F9AE02.roa (hash: SEbrYLAi3GrkF0o5kvdL6QfJ3Jg6QtG0T39uuWSgUvY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl
rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917530D, serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA
Validity
Not Before: Mar 25 03:33:17 2026 GMT
Not After : Apr 1 03:33:17 2026 GMT
Subject: CN=69c3577d-cae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:03:90:17:d9:14:c7:02:0e:1e:c0:d7:be:09:
ee:56:f4:3c:50:e7:c1:db:bd:ed:99:88:4e:a9:c3:
d1:e0:38:2f:5f:78:29:70:5a:45:37:06:5a:e4:61:
13:5d:e5:36:51:38:be:fa:23:75:57:2e:31:b0:93:
19:39:0a:cc:e2:74:99:b5:97:6a:07:c1:38:3d:e3:
42:df:7b:b5:4a:8e:2a:0f:ee:b0:85:db:c6:b6:d5:
76:c0:49:fa:9c:7e:10:79:70:b6:9c:16:ff:e3:5f:
97:63:2d:44:a6:6b:62:f4:45:46:1c:8d:24:b1:64:
ac:a4:2e:a7:20:5d:a9:ca:19:d1:27:95:cc:e3:35:
f3:78:18:cb:53:76:6d:d6:84:72:5b:1d:9b:c5:e3:
b8:77:0d:b8:64:82:c0:42:f6:21:17:78:78:c8:d6:
5b:f3:8b:04:31:e8:5b:6e:bc:6a:b7:a8:bb:c4:ce:
79:5b:2d:f1:f8:f3:6c:b3:ae:da:47:10:b7:ba:27:
43:1e:9f:be:ea:b3:24:d1:34:47:cf:24:21:61:2d:
66:e0:e0:34:1f:88:fb:c2:a9:d9:1f:fb:e7:ae:b8:
57:73:74:53:0c:e3:59:ff:8c:bd:8d:3f:7d:5b:72:
dd:b3:74:6f:bd:6c:22:f2:99:48:1f:35:c4:93:7a:
ac:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9F:C8:B8:D8:D7:A0:C7:1A:71:07:CA:50:F3:32:B2:94:C1:56:CD
X509v3 Authority Key Identifier:
keyid:E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6b:77:f6:1d:e0:1e:d6:a8:3e:0c:71:a5:59:1e:69:90:d5:
08:d7:0a:ef:fb:f1:9f:f7:e1:2d:90:5b:60:2f:15:d9:ca:9f:
9d:74:7c:95:7f:68:7e:4b:ee:b6:a5:86:82:c2:ae:cd:6f:0c:
10:a1:bb:6b:a7:e3:6c:83:79:4c:2c:07:71:78:62:93:25:18:
e5:80:5a:25:71:b5:0c:c3:76:ae:67:cc:6f:a8:54:b1:b0:ff:
2a:e4:5b:41:73:e1:56:cd:0a:d8:49:f5:2f:c8:1a:8f:7f:b2:
06:96:a4:6a:e7:68:bc:eb:13:8f:67:67:9a:6a:e9:eb:85:e5:
55:6d:6c:a1:01:3a:cf:a2:79:fe:9c:58:af:e4:f0:96:3d:97:
b5:fe:0a:7b:b5:23:36:77:99:2e:d4:47:55:66:c2:ef:0e:13:
33:10:74:d8:84:32:0b:e3:58:34:72:0f:bc:d7:91:ac:67:51:
7e:e5:ce:10:05:ac:4e:8e:79:ac:4a:38:c6:a4:ba:fa:a8:97:
86:9a:b7:4c:83:3d:ae:2d:86:be:aa:2d:1c:79:10:92:23:a3:
44:1d:90:eb:07:8d:ab:36:df:e4:f5:42:a9:95:2c:54:44:40:
02:44:d0:fb:43:77:7e:dc:e6:e6:1b:cd:70:be:92:4c:2b:62:
2d:fb:42:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:05:38 2026 by rpki-client