
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft
File: pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft (raw, json)
Hash identifier: wIVzYIlsPJVRZ9hiUKN7vr7AmU3xXNL9fMqdWnYB6KE=
Subject key identifier: 17:F7:54:4E:BD:E8:53:6A:47:B7:85:AC:DB:61:C3:7F:DD:DA:2B:4E
Authority key identifier: A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE
Certificate issuer: /CN=A918FF9D/serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE
Certificate serial: 09CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft
Manifest number: 09C4
Signing time: Thu 26 Mar 2026 19:48:16 +0000
Manifest this update: Thu 26 Mar 2026 19:48:15 +0000
Manifest next update: Thu 02 Apr 2026 19:48:15 +0000
Files and hashes: 1: pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl (hash: 9QD6SWJLLuXOSpRUKQZz3IoChIOOOn6XrmTRMCgEIqE=)
2: 2A1AD3BA9FE711EAAFA97B81C4F9AE02.roa (hash: pZwvBdoaPR7hFViJEv+Bxbp/Jlp7eJmoUNr0vXBOYdY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl
rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 19:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2507 (0x9cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FF9D, serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE
Validity
Not Before: Mar 26 19:48:15 2026 GMT
Not After : Apr 2 19:48:15 2026 GMT
Subject: CN=69c58d7f-366f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e7:60:36:64:4d:60:6e:70:7f:f5:54:9a:53:
4f:c9:61:3a:7a:d4:a5:bc:8a:71:c7:5f:aa:d9:7b:
de:81:28:72:69:b7:11:94:17:c9:e4:82:24:be:5a:
b1:86:e6:2a:96:5a:57:19:fe:34:b6:a1:e6:7a:fb:
87:fc:c2:86:b6:89:f8:5f:f7:e0:c7:73:37:df:ef:
19:3c:ef:1a:f8:98:d3:00:c2:00:4b:be:4f:ef:cd:
b9:0a:45:78:5c:9c:8c:24:fe:1b:ff:c8:84:5e:bf:
ac:84:34:eb:bd:60:82:23:c6:4b:53:69:47:97:b6:
61:cf:3d:b1:56:d6:37:50:7c:c4:c5:49:36:ec:e9:
0a:0e:5d:bc:9f:99:91:b1:94:a3:31:bd:00:f7:b5:
1a:e9:b4:74:0c:6e:a1:00:98:6f:67:cb:7e:67:ac:
0a:8c:3e:81:c1:de:51:f6:1c:19:24:3f:4f:98:62:
82:97:f3:48:2c:7b:e0:1e:37:3a:54:ae:dd:4f:78:
ec:c1:a9:76:a6:75:fa:e7:3a:77:0a:07:c1:53:73:
9b:2a:62:35:32:0e:ca:0c:fd:a1:b0:4c:c2:ba:ca:
96:05:75:e3:c9:56:bb:5f:1b:91:c3:fc:d3:fe:10:
df:78:04:04:f8:fd:73:2d:07:75:15:3b:77:fe:69:
34:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F7:54:4E:BD:E8:53:6A:47:B7:85:AC:DB:61:C3:7F:DD:DA:2B:4E
X509v3 Authority Key Identifier:
keyid:A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:dc:c2:3d:e8:c7:f0:0e:29:d9:3c:4f:7a:62:30:75:66:24:
58:1a:25:ec:fc:94:5e:4c:59:13:b0:8e:79:27:99:2f:98:b2:
a4:6f:81:50:d4:e8:fe:85:47:ef:fb:e2:a1:62:27:82:6a:fb:
20:c2:4c:a5:ad:c9:38:7f:8c:6c:a8:ba:97:74:25:86:00:75:
67:79:22:74:54:7d:27:89:e6:c8:d7:70:8d:f2:2b:03:b2:36:
59:0e:c5:26:44:08:6d:90:cf:5f:11:b5:62:9c:27:af:01:9b:
6a:41:39:04:4e:8d:92:ac:36:de:6d:0b:15:07:9a:09:ea:07:
4b:be:f3:87:55:ad:cd:5d:9b:d9:53:09:e3:7d:60:ff:3b:12:
76:31:3f:76:04:9b:4b:fd:76:20:c0:50:53:27:69:45:d4:ed:
1a:8f:b5:2e:09:d0:c1:ce:eb:79:e8:1d:53:45:e4:0e:f9:fc:
0b:b7:58:ff:83:b6:7c:7a:89:5b:ab:3f:d2:65:8c:4e:b7:68:
19:03:b0:90:82:1a:04:cc:32:36:7b:23:c4:8c:09:93:69:fb:
8f:bb:b3:b3:d5:b7:27:02:b0:fe:e2:29:46:79:ba:8a:89:e3:
33:31:c2:55:d0:a3:90:88:7d:9e:f0:45:dc:6f:72:34:5f:af:
61:ce:1f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:43:49 2026 by rpki-client