
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
File: _5I0f11UaIEf0lOki_xp_lcKpFA.mft (raw, json)
Hash identifier: oUd7dOTCC3rSISBmvpxUnSGkIA7U/TTRkAkIxJq/zgU=
Subject key identifier: F3:F3:8B:61:30:A1:8B:76:D9:67:35:48:26:98:41:D8:8C:C1:73:69
Authority key identifier: FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50
Certificate issuer: /CN=A9191769/serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450
Certificate serial: 011F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
Manifest number: 011C
Signing time: Wed 25 Mar 2026 04:59:22 +0000
Manifest this update: Wed 25 Mar 2026 04:59:21 +0000
Manifest next update: Wed 01 Apr 2026 04:59:21 +0000
Files and hashes: 1: _5I0f11UaIEf0lOki_xp_lcKpFA.crl (hash: +JtuWK4fLo2J9xs4DhcENkdiO4UsqinLBKWEmBGpQBk=)
2: 4D36C07677C311EF84D38A3BC4F9AE02.roa (hash: UonUgi37eGK5+UZSgpaI5VcXY/NpGaUyQWHx23St90A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl
rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:59:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191769, serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450
Validity
Not Before: Mar 25 04:59:21 2026 GMT
Not After : Apr 1 04:59:21 2026 GMT
Subject: CN=69c36baa-65f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:11:4a:2c:7b:bd:c6:d6:89:f7:fe:fd:1e:e9:
72:83:2e:7f:d5:35:b3:b8:ff:c8:51:59:62:6d:35:
de:ed:66:93:f3:7f:da:97:58:91:76:cb:1b:88:7b:
50:4d:09:46:18:3f:3c:d2:47:fb:05:da:2a:53:26:
db:16:c0:cc:50:bd:44:b1:b1:05:a1:66:39:6e:22:
43:d2:64:02:06:09:14:69:22:6e:53:34:b7:0d:29:
c0:3a:4d:02:b1:ef:03:81:0d:b1:8b:34:91:46:4c:
f4:ef:a7:4d:13:79:40:c3:24:3b:0d:bb:64:0d:7a:
4a:1a:c2:17:a0:f0:60:70:d6:ae:fe:b0:6d:10:a9:
f8:c4:44:de:fa:8a:0c:0b:ef:c7:8f:53:5b:31:8d:
2c:41:97:7e:a0:2a:f5:ca:a8:fd:25:ac:52:13:ce:
c1:44:71:41:42:41:92:83:d2:7b:0c:f3:8d:46:34:
c2:9a:bb:8f:9e:5d:1f:ea:df:28:1f:c0:80:3d:7b:
ed:77:19:fd:30:15:2b:d7:44:59:9d:72:0e:58:0b:
ad:b9:20:73:a5:38:4d:e8:42:43:7e:36:23:d8:ba:
aa:3e:6a:98:a8:b7:02:3f:4d:45:dd:d3:20:12:4e:
53:9c:10:ab:e1:e1:c3:21:42:7b:81:3b:b9:3c:23:
9a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F3:8B:61:30:A1:8B:76:D9:67:35:48:26:98:41:D8:8C:C1:73:69
X509v3 Authority Key Identifier:
keyid:FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:9f:71:57:6b:01:f0:37:81:e1:94:4f:85:d3:a4:f1:46:cf:
9e:a0:2b:2f:b7:16:e3:51:7a:a0:6d:5d:81:46:f1:b4:d0:75:
10:6b:85:bc:a0:c5:75:f9:45:44:f5:a5:59:b2:04:66:7f:10:
6a:ad:02:42:e5:42:98:95:28:1d:95:7a:b9:1c:74:08:92:00:
cb:b1:42:1b:11:a4:f4:6b:85:a4:f1:29:cd:e8:b0:7b:16:c3:
ac:51:37:d3:00:1e:05:bd:92:8c:50:e0:81:bc:ee:fb:25:b2:
00:c2:5c:30:1d:c9:eb:9b:87:51:f6:75:a7:88:47:85:8d:7a:
47:10:fb:8d:d6:05:42:85:dd:ef:47:65:e3:ca:47:1a:36:b8:
98:32:01:38:a0:4f:9b:56:64:3d:57:01:72:5e:28:b7:05:55:
6d:bb:59:cc:16:f3:4b:9d:49:fe:1c:51:32:9e:2c:68:09:8e:
e2:7a:0b:76:d7:a9:19:86:ab:cb:1d:83:bc:cf:9b:49:75:7e:
2d:7a:ec:1e:8b:89:75:cd:1e:05:2c:06:3e:57:be:df:28:2c:
20:df:b8:26:64:3a:64:93:9a:48:18:83:22:1e:33:28:dd:17:
6f:e5:3f:91:9d:ec:99:c1:5a:de:9b:fd:eb:a9:b3:d3:2c:be:
18:8c:4e:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTE3NjkxMTAvBgNVBAUTKEZGOTIzNDdGNUQ1NDY4ODExRkQyNTNBNDhCRkM2OUZF
NTcwQUE0NTAwHhcNMjYwMzI1MDQ1OTIxWhcNMjYwNDAxMDQ1OTIxWjAYMRYwFAYD
VQQDEw02OWMzNmJhYS02NWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5xFKLHu9xtaJ9/79Hulygy5/1TWzuP/IUVlibTXe7WaT83/al1iRdssbiHtQ
TQlGGD880kf7BdoqUybbFsDMUL1EsbEFoWY5biJD0mQCBgkUaSJuUzS3DSnAOk0C
se8DgQ2xizSRRkz076dNE3lAwyQ7DbtkDXpKGsIXoPBgcNau/rBtEKn4xETe+ooM
C+/Hj1NbMY0sQZd+oCr1yqj9JaxSE87BRHFBQkGSg9J7DPONRjTCmruPnl0f6t8o
H8CAPXvtdxn9MBUr10RZnXIOWAutuSBzpThN6EJDfjYj2LqqPmqYqLcCP01F3dMg
Ek5TnBCr4eHDIUJ7gTu5PCOawwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPPzi2Ew
oYt22Wc1SCaYQdiMwXNpMB8GA1UdIwQYMBaAFP+SNH9dVGiBH9JTpIv8af5XCqRQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTc2OS9EMjZERERCMDc3
QkUxMUVGOUYyQTQ1NDdDNEY5QUUwMi9fNUkwZjExVWFJRWYwbE9raV94cF9sY0tw
RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL181STBmMTFVYUlFZjBsT2tpX3hwX2xjS3BGQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MTc2OS9EMjZERERCMDc3QkUxMUVGOUYyQTQ1NDdDNEY5QUUwMi9fNUkwZjExVWFJ
RWYwbE9raV94cF9sY0twRkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeJ9xV2sB8DeB4ZRPhdOk8UbPnqArL7cW41F6oG1dgUbxtNB1EGuFvKDFdflF
RPWlWbIEZn8Qaq0CQuVCmJUoHZV6uRx0CJIAy7FCGxGk9GuFpPEpzeiwexbDrFE3
0wAeBb2SjFDggbzu+yWyAMJcMB3J65uHUfZ1p4hHhY16RxD7jdYFQoXd70dl48pH
Gja4mDIBOKBPm1ZkPVcBcl4otwVVbbtZzBbzS51J/hxRMp4saAmO4noLdtepGYar
yx2DvM+bSXV+LXrsHouJdc0eBSwGPle+3ygsIN+4JmQ6ZJOaSBiDIh4zKN0Xb+U/
kZ3smcFa3pv966mz0yy+GIxOBw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:28 2026 by rpki-client