
$ rpki-client -vvf rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
File: 5x94KlPaFtsf0wxsDSYVQnUipt4.mft (raw, json)
Hash identifier: FFEi6ojCvQSxWuExb/MZyd7gPxZVMr2pLYFktXqFYII=
Subject key identifier: B0:D7:A2:12:78:B9:95:EF:3A:B9:B3:07:35:3D:6E:EA:1C:FE:25:50
Authority key identifier: E7:1F:78:2A:53:DA:16:DB:1F:D3:0C:6C:0D:26:15:42:75:22:A6:DE
Certificate issuer: /CN=A918ADBA/serialNumber=E71F782A53DA16DB1FD30C6C0D2615427522A6DE
Certificate serial: 46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
Manifest number: 42
Signing time: Wed 25 Mar 2026 07:38:05 +0000
Manifest this update: Wed 25 Mar 2026 07:38:05 +0000
Manifest next update: Wed 01 Apr 2026 07:38:05 +0000
Files and hashes: 1: 5x94KlPaFtsf0wxsDSYVQnUipt4.crl (hash: 1EwpBSuzLwPZlC4dk+KfFHNZFIx8uu5sweW++QbbKNc=)
2: 95C751AAC99F11F098604B44C4F9AE02.roa (hash: UHvpsaid7Pmo6YPIbYpolV2HsVFbpaGyjeGlBmkMR7I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.crl
rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:38:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ADBA, serialNumber=E71F782A53DA16DB1FD30C6C0D2615427522A6DE
Validity
Not Before: Mar 25 07:38:05 2026 GMT
Not After : Apr 1 07:38:05 2026 GMT
Subject: CN=69c390dd-a1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:91:f4:0b:f3:db:ff:71:33:cb:35:a6:ee:fd:
0e:2a:2f:3c:29:ca:f5:c9:49:9e:c4:8a:2a:3d:32:
72:f6:25:87:08:ab:12:31:60:15:4b:0a:14:ab:a4:
41:10:f6:e2:42:12:75:bd:32:59:58:2e:dd:97:07:
11:14:f7:3e:c0:80:85:45:c4:20:df:44:72:89:97:
2a:a3:17:58:59:0f:60:2a:86:08:3d:a0:67:a3:ef:
15:3f:51:05:56:ed:ca:cd:1a:4f:92:c7:16:3d:77:
38:3e:4f:99:57:83:c8:83:4c:0f:f6:11:78:e2:6a:
05:2c:37:df:e9:a7:9b:2a:af:36:61:0f:91:57:ef:
f1:7f:d4:fe:72:96:8b:26:ce:1b:34:0a:12:7a:52:
d6:bd:21:1b:af:d3:4c:9c:06:49:ab:fd:86:2a:87:
97:cb:a3:54:63:82:b4:a4:11:d9:c1:92:52:7f:8a:
3a:35:c1:35:ef:c1:0f:9a:67:41:be:02:83:30:0d:
dc:cd:86:0f:91:a3:c5:47:eb:f3:3e:a7:80:cc:73:
b3:d8:ca:24:ff:7f:ec:f7:de:e7:67:91:07:6a:5a:
3d:d2:9d:35:07:4e:8c:2d:12:54:af:16:7c:3f:31:
01:d6:91:16:b0:47:70:b4:2c:7a:3d:9d:ef:24:93:
1b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D7:A2:12:78:B9:95:EF:3A:B9:B3:07:35:3D:6E:EA:1C:FE:25:50
X509v3 Authority Key Identifier:
keyid:E7:1F:78:2A:53:DA:16:DB:1F:D3:0C:6C:0D:26:15:42:75:22:A6:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:86:05:a8:43:be:91:4e:0e:ee:7c:60:2c:82:77:ab:26:3d:
ed:47:54:75:49:f5:00:27:a3:ee:a0:cb:1e:cb:54:e5:77:73:
0f:7d:0a:18:a3:f7:27:2f:4c:de:e7:b8:44:b5:66:28:f3:8d:
22:fb:bb:ba:40:ce:05:4e:86:90:96:2a:1e:33:e2:a8:46:79:
c8:99:50:e4:53:ac:4f:d0:b6:a8:79:28:70:1b:90:8a:9b:cb:
55:1e:b3:a2:2b:d4:45:a6:e0:3d:94:70:87:5a:55:59:3e:f4:
32:05:e4:b2:a1:e3:ab:57:91:71:93:ae:79:44:e4:44:13:b5:
39:33:8d:30:32:10:77:0b:ea:d7:bd:6c:79:8b:3c:39:69:8d:
a0:bc:74:e4:d4:2d:f4:0d:19:4d:fa:1b:be:9f:68:1c:1f:0a:
bc:54:33:45:24:52:e3:eb:f4:89:00:e3:2c:08:47:01:fa:b0:
28:11:46:36:48:21:5e:aa:c9:8b:09:74:06:9b:8c:ea:44:3c:
36:98:18:40:d2:78:cf:a9:20:b7:6e:3d:24:4b:b5:05:28:b4:
93:32:3d:f3:51:d8:07:75:84:d2:85:90:29:5a:fc:4f:2b:c0:
7a:c8:09:54:d1:ee:d5:5a:ce:7a:78:1e:f3:f5:a1:65:18:3d:
db:51:59:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:27 2026 by rpki-client