
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft
File: 5nV74dIYmt6NdyyclIZDEL45LXA.mft (raw, json)
Hash identifier: cdMhGp9SUkEw8DMDyr+CJdtpFsZybYsy0fVCIY+aBbs=
Subject key identifier: BE:CF:2D:CA:4C:F8:04:04:7C:AF:71:00:EA:14:EC:50:16:EE:7D:C4
Authority key identifier: E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70
Certificate issuer: /CN=A9111F9E/serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70
Certificate serial: 04F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft
Manifest number: 04ED
Signing time: Sun 01 Mar 2026 00:21:44 +0000
Manifest this update: Sun 01 Mar 2026 00:21:44 +0000
Manifest next update: Sun 08 Mar 2026 00:21:44 +0000
Files and hashes: 1: 5nV74dIYmt6NdyyclIZDEL45LXA.crl (hash: AAo5huv9fDk3BeLKrfKvt9vuK+5GDmbEXXqeqHEoKeU=)
2: 2B70BBE889E111EEB5E86A0EC4F9AE02.roa (hash: DAt6kU8T1ilBH7F7cWv77HjnJ4XZlNTWHqJVtiI5e4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl
rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:21:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1268 (0x4f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111F9E, serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70
Validity
Not Before: Mar 1 00:21:44 2026 GMT
Not After : Mar 8 00:21:44 2026 GMT
Subject: CN=69a38698-f5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:aa:68:2f:cf:ef:f5:5b:e3:85:ae:4f:f9:
04:f0:36:1c:a1:1e:89:1f:8f:ab:db:a7:9a:c2:aa:
5f:89:19:47:63:f9:f0:ba:38:71:32:8f:02:67:4f:
c6:23:99:7e:89:94:26:bc:6c:0d:1f:15:bc:16:bd:
49:2c:18:85:89:b8:63:40:cd:94:d1:32:79:cd:74:
88:cf:2c:6b:0d:82:b2:32:c0:51:2f:62:21:0a:8a:
95:99:61:25:98:ff:11:cd:70:6c:62:dd:9b:84:b0:
5f:2a:5e:ac:06:25:ba:6c:82:24:9e:24:a4:e3:85:
3b:10:22:53:fe:83:10:ca:66:4b:b1:f8:fd:5e:f0:
7f:61:5c:df:33:ba:22:c6:55:b1:b9:b8:ef:0a:89:
19:c9:70:8f:67:12:15:ae:67:75:89:11:f7:73:a9:
29:79:c9:85:74:08:4f:e0:c5:1e:e0:8d:84:c9:60:
8b:28:69:1c:8a:75:c3:1e:4f:63:a1:e3:ff:a2:b8:
62:d9:f8:19:fd:65:c6:18:70:cc:52:e6:62:a8:f5:
ca:ab:cf:d8:99:d6:bb:84:d0:16:4e:04:06:8b:b3:
ec:fa:f1:f1:da:a3:2a:22:60:09:16:af:a4:a6:d1:
2c:0f:b6:45:1e:17:f0:c8:1c:d1:4b:30:fc:57:66:
f9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CF:2D:CA:4C:F8:04:04:7C:AF:71:00:EA:14:EC:50:16:EE:7D:C4
X509v3 Authority Key Identifier:
keyid:E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f1:ff:5b:1f:3d:9a:71:b9:a3:d3:64:09:b8:cf:17:de:9b:
61:92:24:4c:ec:2f:12:82:86:45:0d:d2:23:f3:5b:fd:b1:1f:
0e:f3:2c:06:8b:0e:1b:76:d0:4b:35:07:4c:2f:05:1c:ef:b8:
2e:e0:99:3f:21:18:44:8d:55:1a:23:c9:7c:cd:5b:e6:f8:d9:
98:e4:20:9f:a0:12:10:b9:32:93:25:f6:be:e9:8e:2c:24:b8:
9a:6e:69:20:c3:3a:b1:fe:a8:d0:ac:2e:a7:ec:94:6d:fc:36:
76:d3:11:2c:19:28:c8:48:14:e1:48:27:3d:4f:ad:73:cd:f2:
b6:b0:6d:38:4d:5a:a3:4a:9d:0a:3c:f2:09:3c:b9:9e:8c:d2:
6d:86:55:41:ad:74:ef:7b:66:3a:94:d9:27:04:a2:65:98:45:
5c:81:9b:45:3f:83:fa:37:5e:ae:af:eb:c8:22:c9:ce:85:c1:
cc:07:3b:4b:10:c2:07:51:e2:a3:b6:14:60:37:d1:c2:10:84:
00:d6:39:b0:b4:3a:99:23:62:a9:b8:41:24:fe:da:8b:e1:ef:
fc:f7:2b:4c:4b:7e:97:2a:34:d8:55:52:18:96:ba:6e:41:4e:
3c:60:23:eb:8f:84:ef:06:2e:3a:fb:46:3f:4e:dd:6d:6b:28:
4a:45:41:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:04 2026 by rpki-client