
$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
File: p5uCiHAxRBmQsY0aBfnicefnuOY.mft (raw, json)
Hash identifier: wPQfgu1byajMK0JZXIrlFpyVrVmfYIC9TT5L5msNy2A=
Subject key identifier: BE:9C:50:F3:04:07:A9:10:2E:9D:DA:E8:C1:8C:BA:CE:A2:3E:B4:E1
Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Certificate serial: 0287
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
Manifest number: 0259
Signing time: Wed 25 Mar 2026 01:51:13 +0000
Manifest this update: Wed 25 Mar 2026 01:51:12 +0000
Manifest next update: Wed 01 Apr 2026 01:51:12 +0000
Files and hashes: 1: p5uCiHAxRBmQsY0aBfnicefnuOY.crl (hash: aFqzPO21FsqnTp5bJ9vTpAkT3//GqOK45/An5W4+nuY=)
2: C8E6CF687AE811EFA0337A38C4F9AE02.roa (hash: m1+nCWPGVi+91aYdcnQe4+DRs/DiE2UcuXHShPkXJec=)
3: 0900F7CA7AE611EF8CE1F784C4F9AE02.roa (hash: FKRHRaDjtVgPms1401rj5mnS1bHVV0dLO0nqPD9MRKU=)
4: 9CA607DA3C8411F0BDA85229C4F9AE02.roa (hash: JGgROCd0rurPRIraTkAMkDhgeLifHRo8Ck7DouTUfEU=)
5: 4DD66E3C347F11EFB73F4074C4F9AE02.roa (hash: YHRMdtfB5PjXVdNYiPSJgNY2PlEXGzim4j/DO8EEY1c=)
6: 5D463936C87611EDAC86AA74C4F9AE02.roa (hash: /ZJTbg872JeMBAOXZfelLan18q5X6y2rWqiJ7MriT7U=)
7: 610B51267AE711EFACC0CA34C4F9AE02.roa (hash: zU4zzGCVl4bElUORl3NySVv02p4BnUlOIqIlBWtOii0=)
8: E98F15362B3811EF926F1555C4F9AE02.roa (hash: 6QSIJmWvvqqKmVUGIf2JJLiSEAGvWSmGSyg7Gl9k5fE=)
9: 9F4683A0B86211EDB9EDAD2CC4F9AE02.roa (hash: sFWh2u5jm+/XaSzPGlRz/2oVoDDT1FqpoZGU2nsK8eE=)
10: 34D5ED1210F511EEBCE2A81EC4F9AE02.roa (hash: tPvJ6ibshTdXuKO8A/hjIL4g3XF4DuP5+2X5k3/lunM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:51:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 647 (0x287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Validity
Not Before: Mar 25 01:51:12 2026 GMT
Not After : Apr 1 01:51:12 2026 GMT
Subject: CN=69c33f90-a001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:52:17:39:75:2f:8a:75:05:33:63:c3:aa:cc:
0e:7b:38:f9:30:86:c1:13:cc:b4:21:57:4f:a0:af:
b1:f4:24:07:d9:9f:93:64:ec:22:3b:91:17:b5:1d:
d8:aa:2b:fb:a3:d6:70:78:5f:9e:d2:db:66:6b:ea:
dd:c6:9e:d5:d6:e3:48:51:f6:32:fd:73:bf:38:0c:
81:05:7c:66:50:9a:ad:68:39:a3:7a:f5:83:fc:56:
9c:07:28:f6:84:08:54:1f:21:1b:a6:48:fa:2b:4a:
f9:66:d0:6b:49:06:b4:9f:dd:30:0f:5e:a6:ed:ee:
ed:f2:fa:c2:5b:4d:70:58:7a:9c:20:9d:4a:81:d0:
52:8c:83:43:4f:20:65:9d:a9:cf:d7:fb:72:d1:ad:
19:eb:77:99:61:98:f3:47:22:2a:c3:bb:75:6d:51:
21:bf:e9:18:e5:23:d8:1e:bc:75:df:42:21:f2:e8:
28:3b:2f:5b:2d:35:21:0d:53:17:7c:89:bc:ff:c4:
3c:33:b8:1e:a0:ab:47:f3:d9:b3:a7:41:e4:07:74:
60:af:ac:9c:26:59:71:3e:e4:51:f4:dd:40:27:22:
6e:1c:41:9c:12:49:55:a4:9e:07:26:a4:6b:b3:4e:
a7:18:cd:e2:20:74:f2:de:7e:9a:be:97:98:1e:0c:
d9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9C:50:F3:04:07:A9:10:2E:9D:DA:E8:C1:8C:BA:CE:A2:3E:B4:E1
X509v3 Authority Key Identifier:
keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:fc:b3:43:20:fd:16:c6:a8:32:c2:1d:b6:bd:48:4b:a7:d7:
06:46:c7:0e:32:16:9c:0b:95:6c:9a:a9:d0:94:a7:1d:c3:22:
4d:a7:b7:1a:69:83:a6:e9:81:8b:9f:e0:06:1d:e6:60:8e:2b:
86:a3:e3:06:c6:9a:6b:ab:8e:5d:5e:54:4d:39:e9:95:17:2a:
65:f9:59:ef:bf:b7:e7:0d:a0:2a:fd:03:fb:5b:07:12:a4:f2:
11:16:99:01:7c:ed:e9:b4:1a:70:69:d5:10:a7:78:c3:31:31:
f1:bc:be:72:46:fa:88:1d:29:b1:64:13:ba:9c:c4:7f:c9:02:
be:38:cc:75:c3:5f:f4:bb:17:dd:26:1e:de:09:44:a9:8c:31:
f9:b4:7d:81:91:ba:69:0f:d7:fe:3e:45:94:48:1f:ee:1f:ae:
c8:db:5e:70:fa:82:0f:a1:ea:b4:ac:22:92:e0:a0:c8:8f:fe:
1b:6b:ea:b6:71:38:85:26:03:ca:cd:b2:90:88:d3:6b:a4:b7:
5b:81:1d:e0:ae:70:97:33:6a:b2:95:38:6a:d2:d8:36:06:e9:
a1:15:67:10:39:69:79:29:45:da:6e:5d:da:d0:73:f3:18:83:
09:56:c9:0b:47:7a:56:5c:e1:8c:a4:4d:8c:4f:c6:fb:4d:f3:
d9:43:4c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:23:00 2026 by rpki-client