
$ rpki-client -vvf rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft
File: 5jLTjFoywhfG7nHVLe-fOMoWbFE.mft (raw, json)
Hash identifier: +tVulR36gJajJF8Qn5X5YGxQj+uzDGKZ/KFuiw9QiW4=
Subject key identifier: F5:58:93:B4:70:39:9F:7B:D5:2C:B0:78:D9:CA:21:DF:3E:73:6C:FD
Authority key identifier: E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51
Certificate issuer: /CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51
Certificate serial: 02AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft
Manifest number: 0289
Signing time: Fri 17 Apr 2026 01:50:13 +0000
Manifest this update: Fri 17 Apr 2026 01:50:12 +0000
Manifest next update: Fri 24 Apr 2026 01:50:12 +0000
Files and hashes: 1: 5jLTjFoywhfG7nHVLe-fOMoWbFE.crl (hash: C17HUT/2G+oW/tZVqsM5Xr26CZqoDhjuddFow3obTrs=)
2: 32D8E190D0CB11EEAB1CAF34C4F9AE02.roa (hash: FOd1W7zMCod1PsCz4NDcAAA6iXQg7qF4eo6XlN29wRY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl
rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684 (0x2ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911486F, serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51
Validity
Not Before: Apr 17 01:50:12 2026 GMT
Not After : Apr 24 01:50:12 2026 GMT
Subject: CN=69e191d5-c870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:e9:4f:91:b5:64:3a:31:fc:2a:11:2d:89:
04:c9:72:72:25:45:cd:3e:d3:24:22:8f:a3:62:c8:
8e:e1:61:12:40:27:3f:2d:f6:7b:67:fa:d5:85:5f:
02:2e:0e:1b:76:26:92:2a:5f:5d:96:e4:31:98:63:
a5:a7:fa:1c:4d:6c:9e:23:f5:8c:8a:95:3c:7a:9f:
b4:78:cb:c5:ff:8e:c4:36:48:77:e0:d3:8a:1b:ac:
3b:36:89:9c:c9:72:fe:02:de:30:a6:5a:28:08:34:
d0:90:49:3c:eb:96:19:a9:73:58:68:98:c9:bd:ce:
e6:69:8f:6c:db:69:a7:8b:bc:0c:44:56:d8:af:23:
b2:d5:73:b6:69:8b:7c:1d:90:e9:2e:fd:01:e3:c5:
ef:33:0c:2b:6e:19:9a:9f:07:a8:f0:e3:99:66:c5:
55:72:26:b4:c1:2f:df:83:93:8b:e1:a0:65:15:78:
37:e8:38:10:b5:30:33:80:32:c4:79:bd:55:d8:38:
bf:67:03:cd:79:82:16:cc:2a:80:3d:1e:00:58:5f:
91:2f:cd:ca:4c:cd:34:c9:c1:10:ec:08:8a:98:6d:
68:9a:c2:6b:c4:74:d5:17:a9:67:54:9d:92:b6:ff:
7e:b5:3d:57:3f:e3:aa:48:a4:c2:e8:a2:d0:ad:49:
16:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:58:93:B4:70:39:9F:7B:D5:2C:B0:78:D9:CA:21:DF:3E:73:6C:FD
X509v3 Authority Key Identifier:
keyid:E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:ef:97:41:1a:3c:e7:eb:7a:08:91:d6:c7:cf:26:3f:73:44:
16:20:fc:ed:75:e5:35:13:73:a3:45:a6:67:4f:82:09:14:9e:
f4:bf:69:25:cd:3f:e3:ca:01:c3:95:73:78:38:5a:57:71:2b:
1c:9b:14:3a:fb:b5:f1:f4:ce:69:9a:75:a2:3e:8e:55:b8:6a:
e5:53:2a:da:5c:84:8b:83:93:4a:71:5d:b2:72:19:8d:20:92:
e6:14:b2:33:63:61:c3:50:17:09:fe:02:98:8e:9f:63:43:84:
49:33:d1:cb:4d:78:5c:81:3c:67:c2:47:4f:6b:31:04:d3:7e:
28:cb:89:e2:5e:51:f3:c0:12:e1:d7:4a:02:7c:28:d4:66:19:
f8:35:51:09:de:11:53:ec:2a:b7:2d:38:f2:ff:da:27:4e:78:
bb:58:74:05:4c:b0:31:7b:44:bc:3e:3c:a2:de:61:18:24:6e:
61:0b:26:c0:7f:ea:9f:f1:83:37:85:70:24:48:d6:73:64:96:
aa:4f:07:1e:47:8f:f0:fc:d1:81:88:29:75:f1:28:4f:95:e2:
be:10:1d:03:77:77:0c:dd:e5:00:bb:fc:5f:ed:0c:b3:f1:ce:
28:7a:75:f5:e7:da:7e:68:f7:24:ea:4a:4f:d2:73:7a:c3:1a:
0e:23:fc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:25:12 2026 by rpki-client