
$ rpki-client -vvf rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft
File: 5HXUQnchUazw-uprObkBK9Ij05M.mft (raw, json)
Hash identifier: MKSQnS4puXlNe84X/PtynRNfltBDRisAMCLh0vhhekI=
Subject key identifier: D2:12:EA:BF:6B:47:C0:89:7D:1F:D2:E3:D8:03:16:22:5A:1E:91:92
Authority key identifier: E4:75:D4:42:77:21:51:AC:F0:FA:EA:6B:39:B9:01:2B:D2:23:D3:93
Certificate issuer: /CN=A912809D/serialNumber=E475D442772151ACF0FAEA6B39B9012BD223D393
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft
Manifest number: 01AF
Signing time: Sun 01 Mar 2026 04:48:08 +0000
Manifest this update: Sun 01 Mar 2026 04:48:08 +0000
Manifest next update: Sun 08 Mar 2026 04:48:08 +0000
Files and hashes: 1: 5HXUQnchUazw-uprObkBK9Ij05M.crl (hash: tUGFojF1iq1GkN9nngWDmdZnsxBTC6Py2MLs4AK/k24=)
2: 2BBE96C284FC11EEAA5EAA5DC4F9AE02.roa (hash: kF1PkgxKDEhyrYELW9yLecIdbC5W7sviHErzkUrHQ5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.crl
rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912809D, serialNumber=E475D442772151ACF0FAEA6B39B9012BD223D393
Validity
Not Before: Mar 1 04:48:08 2026 GMT
Not After : Mar 8 04:48:08 2026 GMT
Subject: CN=69a3c508-bf55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e0:44:49:11:c6:e0:c1:73:11:68:07:14:f1:
0b:43:4c:51:0d:84:a6:c8:2f:a6:67:5e:d3:1a:ba:
95:f2:24:ae:95:23:66:bb:48:98:0c:11:c5:2d:91:
35:21:53:90:a0:23:1a:fe:3e:86:74:eb:a6:20:71:
87:0c:0c:9c:30:bf:c2:1f:93:b9:e5:42:60:37:a7:
c8:83:7f:b4:5e:7b:8c:44:fb:a1:09:22:2c:76:76:
7b:f1:33:b8:5d:16:bb:47:f1:63:d6:6d:e1:95:5c:
f0:34:02:6e:1a:bf:ae:6e:52:68:96:b7:2a:98:f8:
20:2e:54:ed:d0:e1:a0:06:55:dd:cd:a9:5f:e3:b0:
b8:23:61:71:6c:7a:6f:68:b6:17:28:a5:17:80:db:
86:dc:7e:e6:54:af:62:4a:69:6b:51:5c:50:03:2b:
97:e5:ed:12:f5:df:1d:eb:a5:87:4c:46:4d:df:92:
e2:6e:da:58:3f:ff:f8:1d:5c:78:10:ad:cb:48:cb:
ca:b0:b9:56:49:8f:d8:a1:81:94:26:ed:ca:9b:a5:
5a:c5:6b:d9:ab:d5:55:fb:95:26:92:d8:7d:0f:1d:
e9:63:a0:de:49:67:8e:7e:f0:bf:87:40:52:1c:a6:
19:85:e5:c0:06:31:30:5e:0d:25:09:3c:7a:8f:e2:
c6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:12:EA:BF:6B:47:C0:89:7D:1F:D2:E3:D8:03:16:22:5A:1E:91:92
X509v3 Authority Key Identifier:
keyid:E4:75:D4:42:77:21:51:AC:F0:FA:EA:6B:39:B9:01:2B:D2:23:D3:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1b:da:a6:f2:48:43:d7:76:be:25:d1:85:3e:63:75:c6:e1:
07:d2:70:63:53:7e:6e:96:5a:55:c7:02:c6:7a:a0:81:ba:8b:
6c:ef:07:27:96:10:5c:04:ba:13:d3:e6:26:88:f6:9a:01:55:
b8:ab:e0:b9:51:c5:e6:de:f1:96:b8:b0:4a:e6:aa:e1:7f:91:
3a:ad:88:8a:54:bf:2c:5c:c1:d1:b9:13:76:4a:b8:d1:b7:c0:
fc:68:71:dc:26:66:67:ae:a5:b7:c1:af:f2:a7:ec:19:f2:e6:
74:05:12:4d:b1:87:38:e3:17:69:23:76:d8:92:69:bc:63:34:
69:a0:9a:3a:aa:0b:26:c8:93:82:23:07:17:73:b3:52:23:95:
8b:8e:f9:1b:44:93:aa:cf:5d:be:27:55:29:2c:89:dc:60:c4:
c8:18:27:18:6a:e6:bb:21:61:ff:a8:b7:c9:df:f3:01:d9:57:
cd:8c:2d:68:0c:74:50:67:72:04:78:8c:6e:46:8b:37:13:37:
6d:6d:37:72:16:d6:1e:2e:b2:ed:36:1d:db:ef:21:4a:1d:09:
89:83:13:37:30:71:a8:e2:44:11:da:a0:01:c8:13:88:0c:db:
19:00:a9:a8:9f:75:f8:ee:f5:59:4a:47:1e:73:5b:6d:dd:67:
b5:c6:cc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:24:43 2026 by rpki-client