
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft
File: c5PammDgEK2QIFHzC9pJc3T4UaQ.mft (raw, json)
Hash identifier: gtIyNllbg8C4Nd2IJI10NpL0IyKzLlLZ4Px6k1ZLMRs=
Subject key identifier: 09:87:CC:F1:1A:55:AE:FD:27:E0:96:C2:E4:A8:82:65:2C:33:08:6B
Authority key identifier: 73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4
Certificate issuer: /CN=A9182545/serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4
Certificate serial: 05FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft
Manifest number: 05DC
Signing time: Thu 26 Mar 2026 22:55:33 +0000
Manifest this update: Thu 26 Mar 2026 22:55:32 +0000
Manifest next update: Thu 02 Apr 2026 22:55:32 +0000
Files and hashes: 1: c5PammDgEK2QIFHzC9pJc3T4UaQ.crl (hash: RkIim8d7uFBvktvozadBjNPe1RRbAm2ZyQlLT9M+gxQ=)
2: 58AAED74E1E211ED8F1ACF4DC4F9AE02.roa (hash: 5x+a+cbxcgpb98M+0xhl05QHZh3kzB/PJjAUSQXv7co=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.crl
rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 22:55:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1530 (0x5fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182545, serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4
Validity
Not Before: Mar 26 22:55:32 2026 GMT
Not After : Apr 2 22:55:32 2026 GMT
Subject: CN=69c5b965-974e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8a:3c:69:95:5d:b9:4c:89:f2:2d:b1:b9:2c:
cd:40:66:61:73:03:d8:92:47:4e:36:57:1c:78:7f:
19:48:31:fb:c6:e8:f6:9f:3a:60:0b:56:db:1c:70:
14:75:62:e0:f3:69:ac:69:a2:d4:cd:e3:65:84:f8:
21:e5:4f:b5:ad:fc:61:71:22:c9:78:8b:0b:5b:43:
54:69:c8:dc:25:9b:d0:5c:8d:1b:f7:f9:32:31:0c:
61:75:58:2f:eb:fb:6f:40:98:ca:73:18:a7:5c:8d:
57:af:9e:e3:5a:ac:0d:74:8d:25:a2:bb:04:ad:cd:
03:c9:6b:03:81:2e:1d:74:83:30:c5:d7:43:78:0f:
18:67:6f:a9:fc:93:91:cd:32:e2:13:6d:cc:b6:9b:
d6:1e:f8:cd:12:05:78:70:a5:99:15:f7:66:31:9e:
65:44:d9:68:35:47:47:c2:95:0e:49:0c:b2:f5:03:
4b:07:be:56:18:82:80:8f:a3:b8:73:aa:64:ed:0f:
2c:26:cc:36:d4:0e:8c:22:67:77:94:80:16:18:7b:
c4:78:16:bf:94:5a:0d:f1:6e:9a:92:45:53:29:05:
9e:74:de:4c:20:3b:95:50:db:bc:78:b5:e6:c6:54:
76:80:8e:b6:44:b3:dd:39:ff:c6:6a:ea:27:0d:58:
da:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:87:CC:F1:1A:55:AE:FD:27:E0:96:C2:E4:A8:82:65:2C:33:08:6B
X509v3 Authority Key Identifier:
keyid:73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:e9:56:15:e9:44:ca:66:a4:f2:74:1c:f3:b7:20:98:ca:5b:
c5:e2:b1:cc:1c:c5:da:90:6e:50:d8:82:ee:fd:97:28:cb:04:
98:c0:f3:f9:c1:ef:cb:a8:e9:f0:87:b3:94:8d:ce:96:c5:8d:
eb:e9:c4:b9:b9:1d:f1:40:f0:8f:c6:25:95:a8:01:a7:31:6d:
d3:cd:d6:a0:8e:6b:db:16:ac:da:74:0d:9f:70:39:c2:2c:47:
be:5b:5b:72:ba:eb:95:ff:e0:1b:4d:42:98:c0:e4:ac:20:da:
18:ed:35:98:cc:ee:d8:5f:b6:ec:3d:10:30:4f:38:ea:9d:c3:
1b:4b:32:50:b1:c1:83:7a:2f:c4:95:96:f4:b4:e4:6b:76:d6:
2f:fc:ff:82:09:ec:6e:70:a4:13:d3:a9:a9:fb:3f:f7:a1:ad:
e1:a8:20:db:82:99:cf:9f:04:6d:44:9f:58:e5:72:95:d4:29:
97:29:45:1f:07:c7:a2:8f:16:db:f3:c6:79:82:7b:91:6c:67:
0a:09:44:0d:ed:d1:b9:eb:c9:62:4d:2e:bb:08:51:c5:cf:60:
0f:ce:4e:bd:55:39:55:15:13:38:a8:b7:6d:0d:1a:a8:cf:56:
b7:50:01:61:a6:20:b0:d9:cb:03:0f:0d:01:45:47:08:93:b3:
24:16:37:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:42:03 2026 by rpki-client