
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft
File: sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft (raw, json)
Hash identifier: SRcrfoQymSeaBFwXounlXzv2gHch/jM36/r24chG6rk=
Subject key identifier: 35:23:F0:B3:5E:44:92:01:4D:34:9B:E2:E3:8D:08:1D:69:00:9B:02
Authority key identifier: B2:9E:45:31:16:74:5C:87:4B:F0:F0:B4:72:45:98:2A:71:D5:26:B5
Certificate issuer: /CN=A911FE83/serialNumber=B29E453116745C874BF0F0B47245982A71D526B5
Certificate serial: 18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft
Manifest number: 14
Signing time: Sun 01 Mar 2026 10:33:38 +0000
Manifest this update: Sun 01 Mar 2026 10:33:37 +0000
Manifest next update: Sun 08 Mar 2026 10:33:37 +0000
Files and hashes: 1: sp5FMRZ0XIdL8PC0ckWYKnHVJrU.crl (hash: MICdpVbpO7bOltkZHYDrTT2h3gFkMkUsj1pr1geXFS4=)
2: 1CF20536001311F1AC4D12CC406F56BC.roa (hash: g4Ud8ofVkhlMNmXk1DVd80+pMPQpIN+9NWS+U7ei8zU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.crl
rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FE83, serialNumber=B29E453116745C874BF0F0B47245982A71D526B5
Validity
Not Before: Mar 1 10:33:37 2026 GMT
Not After : Mar 8 10:33:37 2026 GMT
Subject: CN=69a41602-7755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f6:c8:4b:ee:19:9c:ad:19:a6:1a:21:2d:da:
dc:a9:80:a4:6e:42:8c:5f:d0:63:9a:d1:7c:e5:5b:
f1:9f:c3:a1:23:b7:71:d0:e3:42:7b:ec:74:01:c7:
33:cb:29:de:9a:57:57:93:92:81:18:45:2a:e5:08:
c3:a0:22:a3:1e:d3:77:15:74:6c:66:0a:89:0b:fb:
e3:b2:41:4e:98:fc:17:89:eb:8f:66:67:d6:5a:4d:
f5:73:4b:32:74:6c:57:2e:89:d9:20:b7:b9:7b:c4:
60:a4:1e:ce:eb:4d:d6:de:3f:19:3c:cf:06:d1:98:
24:c0:2b:49:e4:b6:71:5d:e6:ea:c0:9d:12:f3:21:
83:48:33:28:00:04:e0:13:8b:be:52:b9:cc:5a:0f:
e1:00:8d:3b:6a:95:00:24:5b:42:94:db:4b:bf:a5:
33:a7:fa:bf:c7:8d:1a:70:de:44:b5:29:b9:21:66:
17:e9:db:57:c8:65:09:a9:ea:9f:b2:35:8e:86:3e:
b1:8c:5c:3a:9d:12:85:ed:32:5f:d2:11:41:c7:d0:
3f:86:c5:ba:97:cf:54:cb:18:da:2d:68:57:7c:ee:
c6:42:61:be:8e:7e:83:b2:22:9f:e3:0b:6a:b5:0d:
50:64:fe:7f:e1:35:8b:89:1f:08:23:82:7c:36:c7:
5f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:23:F0:B3:5E:44:92:01:4D:34:9B:E2:E3:8D:08:1D:69:00:9B:02
X509v3 Authority Key Identifier:
keyid:B2:9E:45:31:16:74:5C:87:4B:F0:F0:B4:72:45:98:2A:71:D5:26:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:8f:5f:59:e2:64:10:19:47:76:d3:4b:7c:90:82:92:a9:96:
4a:9f:62:f2:c2:98:98:32:63:41:36:37:92:c2:f2:27:e0:56:
81:d7:87:a4:81:bc:5f:e9:cb:3c:2f:cd:43:74:b5:67:ad:6d:
96:36:b6:1b:d3:cf:c4:54:c0:a3:ea:35:31:d2:43:d2:8b:e2:
0f:0c:c9:e9:57:4d:f0:7a:78:a3:10:59:78:31:14:99:bd:f7:
7e:3f:d7:4e:db:28:03:a2:99:d5:18:d3:5f:a9:a7:06:e9:9f:
71:a3:69:a5:06:5b:5c:e0:5f:17:73:d8:0f:98:3e:f4:33:18:
7a:b1:6e:39:a2:f0:82:01:f4:fe:59:c2:fa:f3:0c:1d:ae:5f:
8e:39:e1:95:60:a0:02:05:f5:94:a8:48:11:22:4c:97:6b:44:
36:59:68:b3:e9:98:5a:de:ad:9d:a7:b5:00:2d:cb:2e:1f:53:
ab:20:a2:d1:ad:11:d6:65:af:01:1b:4a:19:6f:08:54:c7:cd:
2a:ed:51:5a:c4:ee:0d:9b:fd:36:c7:a3:95:64:da:c5:78:fa:
a6:d5:37:3f:bd:c2:8d:a5:b4:e2:cd:a2:b9:cd:ce:1c:00:ca:
3d:5b:99:c0:70:96:8d:1e:6a:35:c3:6a:bc:12:76:b0:fe:b1:
70:26:91:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:05:40 2026 by rpki-client