
$ rpki-client -vvf rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft
File: 5IPa-2wrg71IK24pCn5AU1W1Ltk.mft (raw, json)
Hash identifier: CXSHFZ2PhtywAFhZhWHmA215XBuFVoYUpOKAKYmY19w=
Subject key identifier: C5:53:CA:6E:61:82:26:87:EA:2B:7A:23:78:1F:D3:CA:FB:81:4C:78
Authority key identifier: E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9
Certificate issuer: /CN=A919136B/serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9
Certificate serial: 10FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft
Manifest number: 10EB
Signing time: Thu 26 Mar 2026 17:15:26 +0000
Manifest this update: Thu 26 Mar 2026 17:15:26 +0000
Manifest next update: Thu 02 Apr 2026 17:15:26 +0000
Files and hashes: 1: 5IPa-2wrg71IK24pCn5AU1W1Ltk.crl (hash: jvtJ1QV9K73Q+bQXiGyjY045BEBl3Iav33oPh2JzR60=)
2: 99B6039C215311EA86E1E020C4F9AE02.roa (hash: xBQzJokUINHvwXbjCEGs5dFY9Pxy3Whg47fTfEwk4/Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl
rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4346 (0x10fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919136B, serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9
Validity
Not Before: Mar 26 17:15:26 2026 GMT
Not After : Apr 2 17:15:26 2026 GMT
Subject: CN=69c569ae-6297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:38:49:fb:f0:ec:b4:db:7a:dc:ce:7b:52:
0e:42:8d:75:b8:21:87:c8:04:46:00:1a:d9:03:32:
86:d8:b4:3b:8f:b5:48:1f:ce:37:25:79:1f:45:03:
77:51:2c:58:06:d7:b4:b6:cf:12:25:c6:62:3e:dd:
23:e0:41:c4:47:0c:a1:c5:10:8f:9a:00:84:1b:f8:
2e:3b:71:69:11:47:9d:51:bb:9d:b7:d7:84:8a:09:
72:ce:a5:4b:90:14:e3:7a:25:92:83:e9:a9:c4:0d:
d3:81:d9:34:f9:3c:4f:c5:eb:7c:26:63:d4:9c:28:
b8:a2:c4:d4:01:68:07:95:a5:25:e7:2d:bd:f3:24:
d2:e4:da:d7:ca:1d:8e:e0:65:fb:32:a7:44:a6:51:
63:2c:05:60:ce:58:4d:30:07:dd:4a:6c:45:a5:e8:
21:d2:c1:90:c9:fc:7c:b7:2a:c5:af:ff:40:70:54:
3a:e5:d8:08:b6:1f:c6:8b:07:6e:4b:e4:e0:83:30:
f0:f1:d0:50:e0:7d:4f:be:04:a0:ea:d5:ce:20:34:
1f:f3:82:f0:64:f8:ea:cd:38:49:86:e3:f0:3a:6f:
7b:a5:c4:e5:06:dc:d5:76:7a:95:32:43:5e:73:18:
37:93:dc:03:10:64:ae:b0:8b:a6:a8:e1:a4:34:18:
55:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:53:CA:6E:61:82:26:87:EA:2B:7A:23:78:1F:D3:CA:FB:81:4C:78
X509v3 Authority Key Identifier:
keyid:E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:f5:ce:29:ac:78:c0:41:cc:5f:5f:e2:10:cc:ae:d2:62:39:
cf:5b:83:f5:f5:8b:6c:57:40:ae:6b:f1:f3:a6:76:25:15:17:
ee:b2:24:e9:63:a1:c6:82:40:1c:af:2f:0a:3c:aa:06:93:40:
e1:d3:9d:fb:d8:03:e9:a2:cc:2b:8c:50:ba:58:42:ec:47:1c:
4f:d5:c6:f1:86:b3:72:3a:52:d1:e0:70:a1:36:03:ba:8a:4b:
13:55:6d:c9:6c:fa:a1:1a:f4:5d:0c:7e:48:bb:36:02:6e:8f:
49:10:ba:3d:4a:c1:b8:62:e9:82:1a:2f:6c:60:ce:90:63:40:
76:6f:7d:69:9d:b4:a3:cc:a3:67:8d:cc:13:0b:9c:d1:99:3a:
a8:75:61:8a:8c:f1:51:30:be:a1:63:b8:d2:1a:4a:6f:c6:55:
0a:90:1d:a9:bf:2a:4f:d6:13:55:25:06:35:02:d0:72:8b:58:
3e:92:5b:65:7c:e7:f2:bc:66:40:c9:9f:aa:77:28:03:cd:d7:
2b:b6:57:51:60:44:11:95:54:95:c1:2d:e6:30:cd:14:b9:cd:
e7:81:a9:00:22:17:bf:93:87:ec:56:ee:ef:2a:ff:60:43:98:
b9:50:38:f6:a6:21:7a:45:71:e6:a1:62:f7:ad:f7:99:ed:26:
fd:e1:25:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:07:32 2026 by rpki-client