
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
File: 5pLFtgs-8cIERDn8OQrVbcPLzWM.mft (raw, json)
Hash identifier: laP5IlDHDRzLIb/ifeCDbwRnXSAZDp48f1B6l9zy058=
Subject key identifier: 80:42:15:EF:59:CD:1E:AF:59:E9:2E:12:B8:07:C1:BF:6B:1A:26:6C
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 0932
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
Manifest number: 08A7
Signing time: Sat 28 Feb 2026 21:31:59 +0000
Manifest this update: Sat 28 Feb 2026 21:31:59 +0000
Manifest next update: Sat 07 Mar 2026 21:31:59 +0000
Files and hashes: 1: 5pLFtgs-8cIERDn8OQrVbcPLzWM.crl (hash: A5Ct8DnbNuYXLbZGTq0G/WdDakWLUDzulPrrtMxM8fw=)
2: 244B9D1874CB11EEB3C0267DC4F9AE02.roa (hash: D4/4gO/cbJfEP5wlYW+iiyf7YJHeT+1Ir2WyIsZ62e8=)
3: 215A8FDE4B9E11EEBF766C7FC4F9AE02.roa (hash: 3KAXB0y77UEXT0NSmBqRqJYol3EdpUOQESEbjqAUowo=)
4: 311C494286CC11F09348D16BC4F9AE02.roa (hash: 0nnFf4uYLTJmjjk5bfslvRzP7JC33FfWRFY6VkqUic8=)
5: 79986EE8FE3D11EFB763F62EC4F9AE02.roa (hash: bA19Y+YseTfcXQaXEUZi3q3mODfpiIfKTPYCQNkXISs=)
6: 9765FB988A5D11EE9E6AA223C4F9AE02.roa (hash: VzbPsPGLDl5f/oFOZ9NpXnSyLExyEIRw6V+vhyTevuk=)
7: F3643AD6089C11F09BB44535C4F9AE02.roa (hash: /nLaGI3z1xCPylElkOX2xhje5D3mGsOohSwIv2xzDUQ=)
8: 4D135E8012B611F1B7F84153403D8C67.roa (hash: zrgCew6r2/7rD+XqIS7y1Z2XzlNWEq4IhBceqy0PniE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2354 (0x932)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Validity
Not Before: Feb 28 21:31:59 2026 GMT
Not After : Mar 7 21:31:59 2026 GMT
Subject: CN=69a35ecf-29bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:ef:23:7b:d7:34:cc:06:5e:25:30:6b:6e:
1b:55:b2:c2:27:0c:38:2d:f8:21:c4:78:d9:f3:e5:
7a:a1:7f:64:ec:5b:e7:a6:18:6d:55:c1:ea:66:d0:
a2:9b:45:9f:fd:49:89:f2:37:19:31:35:d6:67:41:
42:ae:d2:39:4c:ae:d6:ae:ed:d1:f1:e6:e4:cb:9b:
8f:28:c1:d8:6e:53:59:a6:e5:74:6d:62:24:d6:90:
05:44:49:2a:15:8f:0e:ce:8a:68:16:45:60:91:2b:
16:31:50:19:fd:fc:f1:35:0a:4c:cb:93:e8:51:00:
79:bb:3c:ea:31:ab:1a:dd:9d:d8:df:c4:d8:89:6b:
fe:41:45:62:79:6c:a1:ce:ae:bb:cb:49:19:f9:d8:
6c:09:10:99:7c:95:1e:b7:86:a8:7e:16:5f:e5:13:
a3:d8:89:8a:9d:bc:5c:b5:59:f8:96:a9:5d:95:f7:
65:cc:f9:ec:d6:e2:fc:5b:a9:5f:92:21:e5:9f:ac:
9a:74:17:e8:5b:af:2f:ca:82:df:c4:bd:d4:5a:a9:
9a:e8:ea:35:49:34:5f:d9:31:8a:d2:36:16:aa:c5:
1c:43:8e:6d:71:46:a3:80:8e:29:13:ae:f1:7e:dc:
3a:06:b7:9d:70:90:95:64:ae:cf:2a:63:04:72:50:
07:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:42:15:EF:59:CD:1E:AF:59:E9:2E:12:B8:07:C1:BF:6B:1A:26:6C
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:56:ee:3c:8e:67:b7:e9:c8:b5:04:09:9b:34:91:f6:10:f4:
2b:eb:3d:6f:75:0a:a5:33:73:32:7c:6e:82:bb:f8:61:27:de:
61:1f:3c:07:b2:6d:ee:d5:53:63:24:f1:c9:40:5f:2e:65:11:
9d:8a:d3:56:74:c2:6d:55:90:95:bb:47:c1:9d:34:16:99:2e:
3a:a6:2e:15:91:01:9c:ed:47:cf:79:bd:56:9d:ca:a2:58:16:
f7:f4:b2:d7:87:92:6d:d6:68:3c:99:6d:34:3b:34:b3:99:63:
3e:c8:29:57:62:37:b0:ce:c3:33:e5:f8:13:1d:6d:6b:77:9a:
fe:b3:19:57:66:4c:40:3a:5c:62:41:d0:5f:92:c0:64:af:7f:
5c:a8:fa:92:bc:c6:cd:a3:f1:57:b7:46:75:4e:66:66:69:93:
21:9a:50:58:eb:31:14:83:d8:70:20:73:33:04:9b:29:24:aa:
52:ab:df:d2:0d:93:e3:3b:9d:2a:29:39:8c:77:95:d9:5b:2d:
55:74:2c:16:c9:d6:46:8f:30:85:30:a3:b0:26:97:98:11:78:
04:a6:fc:ac:91:73:33:ba:bb:eb:6d:ba:2a:96:a7:c2:34:e2:
7a:3b:48:60:10:31:08:68:f8:6e:25:cc:2a:e3:56:34:53:d1:
93:a6:df:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:18 2026 by rpki-client