
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
File: 45qx0HtQ27mr4stRzZseOlqFRSE.mft (raw, json)
Hash identifier: vdQNbYbVVF+8viCAsOEmspjohtZZOLEX8RIkGlr0grE=
Subject key identifier: 4C:BC:CD:4A:94:FA:46:12:93:A0:62:0E:C6:05:78:3E:21:C8:19:0E
Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Certificate serial: 359B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
Manifest number: 355A
Signing time: Tue 12 May 2026 15:11:04 +0000
Manifest this update: Tue 12 May 2026 15:11:03 +0000
Manifest next update: Tue 19 May 2026 15:11:03 +0000
Files and hashes: 1: 45qx0HtQ27mr4stRzZseOlqFRSE.crl (hash: +QPfTaMj8GxyydvpdPKzNfx52VjYodUSeDNSK/5me5Y=)
2: 6A44AF9A1AC711F191E10968393D8C67.roa (hash: uPMubkV8FhRQlQGVWB1Ss5RVIBMdWnZesOclj5/0msM=)
3: 70B74E2A16D811F1AFC6DD17323D8C67.roa (hash: nrDC018+z1XNNvIImlFWWlSnFpyUJj5uRlYNJgcEsC8=)
4: 92F53A0A4D8111EFAB3C1447C4F9AE02.roa (hash: XccP1/47583iPiSx+eEAvXi2g46yNyTAMgjTPnRV7Z4=)
5: 6AE0DC4E1AC711F191E10968393D8C67.roa (hash: EIquPTmzhNm/EgMF6y+odwoHMOmuWe10Hl5flxr8E0U=)
6: 98AF39F22E4211F1901494E893833773.roa (hash: iFoAuTtUU0PmJ95WE4oNN0+3octF6zZzDVlPo3nsN08=)
7: E243CD9C227811F1B65A16B9A4833773.roa (hash: S/AzEaze3DTMcHGlipjXyDifcNRIK7tT17DD9pwo8PU=)
8: 2A24EFB878D011F08CEB9275C4F9AE02.roa (hash: qZUPt2igy/OZCeagcwY7sBJ8TPbC9Y0onFfuw4bOoUY=)
9: 993B537CDD1911EA96723D11C4F9AE02.roa (hash: G25/DoIQB4l/NxwZR2ZZ4S0VBthWUlwHYrnZ9UpUQ54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:11:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13723 (0x359b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Validity
Not Before: May 12 15:11:03 2026 GMT
Not After : May 19 15:11:03 2026 GMT
Subject: CN=6a034308-4d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:1b:3c:12:8b:7b:e8:a1:53:ae:4b:25:46:
37:f6:d9:ac:e2:ca:9c:31:ef:ab:38:d5:96:9d:35:
5d:56:23:de:b2:a7:4b:fe:ca:84:e9:24:02:98:d6:
92:fc:9f:21:93:d4:39:68:81:b7:ae:e2:bc:96:73:
5e:2c:e0:49:6c:2c:e1:b5:cf:b3:dd:67:b0:8b:e9:
a5:53:42:c9:fc:0e:f1:a8:60:59:a2:d2:bb:8d:04:
77:b2:8c:0b:52:e6:81:8e:40:3f:96:44:7c:8a:38:
25:25:f4:9f:38:30:21:8a:0f:23:5d:45:1f:ca:54:
b9:c4:df:09:2b:cd:05:d4:ee:73:15:09:2b:9f:84:
15:ba:64:03:cd:9f:8d:3a:3b:61:0c:16:5a:2f:7f:
ea:56:0a:f2:5b:90:da:83:69:1e:a5:db:79:e2:43:
b8:db:c6:a0:2d:9e:3a:23:92:9b:b5:2b:0f:57:20:
d3:0c:57:10:4d:4d:7f:e1:a4:30:5e:9b:f6:ec:43:
43:1c:b5:ae:e1:5b:79:ce:b3:fc:41:0b:12:4b:56:
93:79:92:eb:54:f7:3f:c0:b9:b8:95:c8:9f:b7:c9:
b2:5c:66:77:f3:c6:8e:21:cd:82:e0:db:fc:dc:78:
38:e3:25:e4:a4:2f:ab:87:22:f2:d8:c9:43:41:83:
2b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BC:CD:4A:94:FA:46:12:93:A0:62:0E:C6:05:78:3E:21:C8:19:0E
X509v3 Authority Key Identifier:
keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5e:54:93:9d:ca:54:eb:e6:a8:3e:bf:4b:1e:ef:a6:bd:54:
7e:02:24:dc:f2:42:47:d8:5e:b5:40:23:9a:92:db:50:ab:d8:
cc:3c:c4:fd:4f:f8:97:bb:53:c6:c5:88:66:bb:a2:ea:c2:b2:
4d:80:4e:3a:1a:ea:5a:ed:69:e8:b2:a0:be:8c:db:8f:89:5d:
f8:8e:ce:df:aa:1c:11:2a:79:13:f7:48:b5:5d:f8:97:5f:b3:
21:95:19:70:00:d5:53:1f:13:c7:db:0e:61:cc:92:46:23:03:
6a:b9:79:c4:f9:45:c5:f6:1f:16:60:9a:88:85:a9:17:f0:a5:
6e:00:88:cc:7a:e4:46:8b:22:83:3a:42:d9:42:3a:bf:be:02:
31:10:27:6d:f0:12:cd:04:83:ff:52:9c:2f:27:10:a6:58:b3:
91:27:4b:d6:f0:d2:aa:17:0b:31:fc:37:58:d4:7a:5d:29:e4:
27:30:df:c6:79:92:36:33:d9:de:ef:7b:dc:9d:c5:9e:22:4b:
d1:f8:1d:c4:04:23:e9:71:2d:0d:00:9a:02:8d:cf:7b:2c:eb:
3e:40:45:2a:6e:bd:43:cb:45:8b:38:21:e4:6f:84:c3:a2:92:
e3:4b:a6:bb:00:6d:1c:84:33:63:1b:ab:da:f0:a7:af:92:97:
c4:49:32:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:35:33 2026 by rpki-client