
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
File: C5sr_BxrLAlndq91fTrxRUfkPnI.mft (raw, json)
Hash identifier: RyP1tUieHS4i36TXTNU4d0we0I31+627Fi1pOzrQ3eY=
Subject key identifier: 5E:2B:28:C1:E8:E8:EF:81:00:23:C2:64:91:76:B0:B3:95:61:EB:C7
Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
Certificate issuer: /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Certificate serial: 126A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
Manifest number: 1254
Signing time: Tue 24 Mar 2026 17:00:18 +0000
Manifest this update: Tue 24 Mar 2026 17:00:18 +0000
Manifest next update: Tue 31 Mar 2026 17:00:18 +0000
Files and hashes: 1: C5sr_BxrLAlndq91fTrxRUfkPnI.crl (hash: fBfyO5zIgx1pxIE8b4y5+aXUlMrmd5p5zKJny6A2dho=)
2: 60FCDED2F48F11E89651151FC4F9AE02.roa (hash: HiXdPqv/fSehw4/CzQGtfDzX1ZWWwH3g/pTixbzkqlM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl
rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4714 (0x126a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F646, serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Validity
Not Before: Mar 24 17:00:18 2026 GMT
Not After : Mar 31 17:00:18 2026 GMT
Subject: CN=69c2c322-4640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7c:92:ed:b0:57:0d:04:ab:f1:2d:95:4d:8f:
1d:b6:6d:10:05:67:36:05:1a:b3:8b:44:96:ed:58:
13:de:54:f3:06:09:80:d0:8e:21:b7:04:9f:65:88:
18:dc:2e:9e:2d:64:dd:43:dd:2a:ed:45:9f:fb:b6:
06:27:16:9f:a5:c5:a7:5d:59:2f:b5:9b:4d:7f:fa:
b6:14:5b:e5:4b:d6:f9:eb:06:3f:fc:91:93:47:87:
08:a6:ee:ab:a9:d0:c5:cf:ad:b3:5d:d4:0e:bd:68:
c1:c6:22:1c:84:58:d0:1a:e8:9a:f9:43:c7:e2:69:
c3:82:91:1b:6c:72:48:c5:cd:9e:f1:92:bf:65:60:
93:44:45:3d:3b:ef:c7:d9:9c:e3:d9:a2:ca:43:e9:
98:1b:25:ce:83:55:46:55:06:ec:f9:35:2b:be:a2:
24:ca:1a:06:17:c6:b8:84:07:1a:ab:4c:57:c3:13:
b7:c4:ba:c9:6a:56:01:73:d3:d6:ec:d8:2f:6f:bc:
06:6b:d6:55:90:4c:cb:69:1d:1d:22:ae:ba:bc:b3:
83:06:c9:7f:a5:7c:a3:1d:c7:eb:f6:54:d7:9e:b5:
fb:fd:31:ee:66:52:4a:ca:5a:10:fe:0d:d8:9d:80:
da:02:72:09:87:a4:69:81:9a:be:ad:f0:b7:a6:9d:
fa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2B:28:C1:E8:E8:EF:81:00:23:C2:64:91:76:B0:B3:95:61:EB:C7
X509v3 Authority Key Identifier:
keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:80:da:52:ed:db:a5:f6:f4:78:e1:0d:da:6a:4a:e6:a5:37:
10:9d:0e:13:f9:52:95:18:6e:73:88:4d:69:45:d0:8b:66:9c:
26:45:d5:53:cc:0b:a7:2a:39:c2:f1:2e:39:22:e4:50:79:04:
11:95:ed:8c:a2:7c:6a:d2:e1:52:6b:02:05:b2:b1:08:3e:e5:
3c:f0:1f:53:11:be:31:08:58:ee:cc:f4:0e:d7:86:9a:cc:a9:
f4:3c:0a:2b:49:24:49:86:a5:87:c0:b3:9e:1e:67:d1:e8:23:
a8:3a:e4:e7:e5:f2:90:26:00:d3:d0:ca:71:e0:2d:a5:2a:c8:
d8:9d:bb:27:5a:f9:09:05:d1:42:f9:f6:01:bc:41:82:63:17:
5a:74:31:02:6f:5f:52:23:a4:bc:5b:63:78:1d:07:b3:c4:9d:
7e:08:75:a8:2b:89:81:84:66:cf:18:d4:f3:e8:c6:2b:e2:d8:
15:49:c8:43:50:e4:fa:bd:84:6d:f4:8f:d6:e4:83:b8:a1:26:
48:97:f8:86:1d:f7:20:d1:85:51:c5:e3:4b:2e:9d:63:d7:13:
c6:fa:8f:68:60:ea:62:3c:f1:3d:9e:cf:11:7d:21:63:6b:c5:
35:8c:b4:0a:11:30:19:1c:f1:b9:75:32:7d:a1:d9:eb:21:bf:
5a:92:79:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEY2NDYxMTAvBgNVBAUTKDBCOUIyQkZDMUM2QjJDMDk2Nzc2QUY3NTdEM0FGMTQ1
NDdFNDNFNzIwHhcNMjYwMzI0MTcwMDE4WhcNMjYwMzMxMTcwMDE4WjAYMRYwFAYD
VQQDEw02OWMyYzMyMi00NjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3nyS7bBXDQSr8S2VTY8dtm0QBWc2BRqzi0SW7VgT3lTzBgmA0I4htwSfZYgY
3C6eLWTdQ90q7UWf+7YGJxafpcWnXVkvtZtNf/q2FFvlS9b56wY//JGTR4cIpu6r
qdDFz62zXdQOvWjBxiIchFjQGuia+UPH4mnDgpEbbHJIxc2e8ZK/ZWCTREU9O+/H
2Zzj2aLKQ+mYGyXOg1VGVQbs+TUrvqIkyhoGF8a4hAcaq0xXwxO3xLrJalYBc9PW
7Ngvb7wGa9ZVkEzLaR0dIq66vLODBsl/pXyjHcfr9lTXnrX7/THuZlJKyloQ/g3Y
nYDaAnIJh6RpgZq+rfC3pp36QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF4rKMHo
6O+BACPCZJF2sLOVYevHMB8GA1UdIwQYMBaAFAubK/wcaywJZ3avdX068UVH5D5y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjY0Ni9DRUNFOEM5QUY0
OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxBbG5kcTkxZlRyeFJVZmtQ
bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0M1c3JfQnhyTEFsbmRxOTFmVHJ4UlVma1BuSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RjY0Ni9DRUNFOEM5QUY0OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxB
bG5kcTkxZlRyeFJVZmtQbkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjoDaUu3bpfb0eOEN2mpK5qU3EJ0OE/lSlRhuc4hNaUXQi2acJkXVU8wLpyo5
wvEuOSLkUHkEEZXtjKJ8atLhUmsCBbKxCD7lPPAfUxG+MQhY7sz0DteGmsyp9DwK
K0kkSYalh8Cznh5n0egjqDrk5+XykCYA09DKceAtpSrI2J27J1r5CQXRQvn2AbxB
gmMXWnQxAm9fUiOkvFtjeB0Hs8Sdfgh1qCuJgYRmzxjU8+jGK+LYFUnIQ1Dk+r2E
bfSP1uSDuKEmSJf4hh33INGFUcXjSy6dY9cTxvqPaGDqYjzxPZ7PEX0hY2vFNYy0
ChEwGRzxuXUyfaHZ6yG/WpJ53Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:54 2026 by rpki-client