
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
File: l_m5BihHZTCOwmiFXVY9q5GGMFs.mft (raw, json)
Hash identifier: paTce5syIGHyR8b9X6XIW8jquNiJUMYX5wioJo0d9Os=
Subject key identifier: 19:FF:40:D1:BD:6E:EF:21:0F:E2:51:83:A3:6E:1A:65:A6:83:54:FF
Authority key identifier: 97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B
Certificate issuer: /CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B
Certificate serial: 0D14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
Manifest number: 0D0B
Signing time: Tue 24 Mar 2026 17:57:18 +0000
Manifest this update: Tue 24 Mar 2026 17:57:18 +0000
Manifest next update: Tue 31 Mar 2026 17:57:18 +0000
Files and hashes: 1: l_m5BihHZTCOwmiFXVY9q5GGMFs.crl (hash: AsIs3YEldZqnCqWAGp8QKfL46KKLEpJ/7ueLZPM6zB8=)
2: 9C9660D4FC6E11E9BC6D4822C4F9AE02.roa (hash: 2ofxCMC41OCd7xHEWUK98z0O11e/ASg9LLd6dkWeoic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl
rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3348 (0xd14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4E6, serialNumber=97F9B906284765308EC268855D563DAB9186305B
Validity
Not Before: Mar 24 17:57:18 2026 GMT
Not After : Mar 31 17:57:18 2026 GMT
Subject: CN=69c2d07e-9ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b5:1e:dd:0c:30:33:43:a1:16:a5:06:43:f3:
3c:05:81:14:b2:21:55:d0:af:e9:c5:66:ef:6b:50:
82:4b:9a:2b:03:94:80:af:11:b7:e4:38:97:e8:00:
51:5f:0d:fe:94:a8:e0:bb:df:3b:dc:72:0e:51:c3:
ae:45:02:89:45:fe:d0:08:b1:5c:67:c0:23:39:d7:
0a:1f:15:a3:35:92:97:53:86:ca:d7:53:18:b5:9d:
50:2e:ac:fc:87:85:81:64:a7:48:ef:1f:bc:5d:3a:
81:df:7e:5f:2e:08:4f:bc:c9:5d:bd:10:69:d0:12:
83:fc:07:35:21:e1:94:85:a3:36:6c:93:e0:53:5e:
3c:8b:b3:f5:1e:d6:b5:6c:93:9d:74:9e:89:b3:9c:
9f:26:54:9e:fa:e7:0e:32:5c:e2:e7:43:d8:db:5d:
67:60:42:b6:f6:69:9c:a9:78:0c:3e:8b:db:42:4c:
c2:ec:f5:ab:36:d5:06:2c:2d:ed:08:6c:34:f0:71:
3b:81:1b:2f:49:05:96:35:a5:33:03:54:69:5b:ca:
79:89:45:3d:d0:4f:55:90:70:c5:ca:ae:1b:c5:89:
6f:3f:8c:bd:71:af:c2:d3:e2:dc:09:7b:25:6e:16:
ee:e9:80:78:28:56:28:e5:89:11:9c:d1:8e:57:96:
2a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FF:40:D1:BD:6E:EF:21:0F:E2:51:83:A3:6E:1A:65:A6:83:54:FF
X509v3 Authority Key Identifier:
keyid:97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:77:d0:c4:ba:6a:94:01:4a:7d:f4:d1:b6:b9:29:ac:d1:13:
9b:a6:2f:9c:f6:47:fb:03:4f:89:a8:3b:22:20:7b:f0:b7:a6:
9c:ac:b0:c0:00:08:06:27:bd:30:57:e0:66:1d:20:0e:de:52:
68:48:bc:a6:93:db:cf:fc:70:be:40:dc:aa:51:c0:1e:bb:a9:
32:15:21:eb:67:af:49:5b:c7:54:29:04:d6:60:a9:92:07:4c:
83:03:9f:6c:a6:05:11:41:01:5b:c0:05:d8:12:7c:5f:88:9f:
0f:35:45:b6:2b:3f:df:ac:bc:e2:73:77:04:da:34:6b:1d:fb:
48:33:1e:72:c7:f8:1e:4e:b3:36:c4:ca:76:03:6d:5d:3e:34:
89:82:3e:53:20:ed:7e:d8:48:59:9b:a4:49:fb:0a:f7:42:1c:
d6:4b:7c:f3:e2:82:64:e5:b5:39:64:11:dd:97:bc:9c:dc:97:
9f:a0:66:57:9e:4e:05:0e:52:9f:1d:ea:b3:30:98:ac:ac:eb:
2d:91:41:a2:2b:79:33:98:ba:85:26:07:c2:84:d3:5a:f2:b3:
c7:30:2b:1f:ac:e5:fb:80:9b:3e:ee:be:6c:2d:15:20:51:46:
7e:00:96:7c:50:2f:30:ff:81:fc:e8:ae:2d:0a:62:76:4b:8b:
e1:55:71:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:38:58 2026 by rpki-client