
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
File: 5pLFtgs-8cIERDn8OQrVbcPLzWM.mft (raw, json)
Hash identifier: XYpZ258kzMLM9TOTK/x1vdyBcGpO1FwIJvXV0ZfLOsM=
Subject key identifier: 81:B8:59:38:FE:94:6D:25:73:D7:C4:7F:03:0C:AC:D3:3A:11:9A:D0
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 0961
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
Manifest number: 08C5
Signing time: Thu 16 Apr 2026 20:58:31 +0000
Manifest this update: Thu 16 Apr 2026 20:58:31 +0000
Manifest next update: Thu 23 Apr 2026 20:58:31 +0000
Files and hashes: 1: 5pLFtgs-8cIERDn8OQrVbcPLzWM.crl (hash: Sxk5RTjwt2vhGK1OJpqNYiY80VccK/RVcY3iveHftLk=)
2: 9765FB988A5D11EE9E6AA223C4F9AE02.roa (hash: EEYzCbyeqxDaeKgknxCRHT1rePeuinavgu4aD0/oSEk=)
3: F3643AD6089C11F09BB44535C4F9AE02.roa (hash: h+M8yWQJoBkACzAfTIpQdErBAlAmwZgxPQ+K7UT/ZJ8=)
4: 79986EE8FE3D11EFB763F62EC4F9AE02.roa (hash: b0d7KFkivg+pSQhSopB2OC7InpEaaI034fHeKJQ1XME=)
5: 215A8FDE4B9E11EEBF766C7FC4F9AE02.roa (hash: n6tcvXpr4IAe1S5u61Xx4m/84oyxH16o7/TxMhPSnE4=)
6: 244B9D1874CB11EEB3C0267DC4F9AE02.roa (hash: NgHinJNOa5WD0lzlF+pCDsZCucZ3Hfmi2lX8TWyz05k=)
7: B6C565EE387711F190890609B7833773.roa (hash: cKHaKuk0v4HEYOsKI9oFgzXnxN8/wDN3MJXHofolXk0=)
8: 311C494286CC11F09348D16BC4F9AE02.roa (hash: RBYV41pL4Nucn1z+q4JWoCIg19xsy/360DZ/MRrEtr0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:58:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2401 (0x961)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Validity
Not Before: Apr 16 20:58:31 2026 GMT
Not After : Apr 23 20:58:31 2026 GMT
Subject: CN=69e14d77-6f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:fc:ba:cc:33:3b:bc:35:4d:78:c4:ea:66:
ed:74:b3:6e:04:55:44:21:d8:f1:94:55:f9:af:da:
31:a7:8b:1f:9d:f7:5e:57:1e:df:db:45:db:dc:54:
6f:c2:ac:d6:1a:9d:f5:09:55:be:dd:8a:5d:da:5b:
3c:c1:79:7d:ba:f5:9b:06:af:cd:56:9f:de:9a:cf:
52:f2:48:52:1c:70:a7:bf:4a:d9:ec:f4:d1:88:82:
93:8b:de:07:0b:75:b9:df:5c:65:05:03:a7:cb:43:
30:0a:4e:dc:f9:c3:3f:da:64:fd:80:fe:a5:45:a5:
58:38:4b:fd:01:9c:08:3c:19:f0:13:59:02:15:9e:
36:1f:65:7f:f7:d7:81:44:a3:d1:45:0f:a9:3e:b3:
66:e1:7a:48:67:23:47:79:62:b1:e8:f6:30:9c:80:
2e:21:12:6f:e9:97:b4:82:c9:e7:bc:25:46:ac:73:
8e:c9:9a:13:50:0a:92:53:b1:d6:68:bb:d8:79:00:
bf:96:af:74:af:1c:f9:61:6b:8e:78:f2:27:59:e4:
14:fe:c9:d5:42:c7:e2:44:27:ba:10:15:e1:6d:a7:
11:7f:25:65:9d:8c:5a:47:2f:74:28:3e:25:09:88:
d4:b1:3b:18:80:16:8e:b4:07:0f:3a:bc:95:61:14:
14:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B8:59:38:FE:94:6D:25:73:D7:C4:7F:03:0C:AC:D3:3A:11:9A:D0
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8e:b6:39:6d:bd:7c:2f:2f:d0:4e:d5:5e:bc:74:a8:03:b7:
c7:25:91:bf:c5:e3:34:5c:af:bc:fe:d4:89:b6:d9:74:2a:6f:
a6:ba:9a:1e:69:8c:fa:2c:cc:19:20:b6:d4:95:83:9a:5c:1b:
52:cc:b1:4a:77:f1:50:2e:0d:6a:8c:73:76:f4:a8:41:29:f1:
3f:08:52:61:8c:0a:18:ef:e3:2d:71:72:7b:dd:d8:c9:d0:bc:
60:0e:d7:95:9b:88:4c:76:a9:a3:64:cb:7c:6a:28:bb:a5:dd:
64:c7:2e:4e:59:04:02:63:24:21:a4:e8:17:3c:9c:8c:cd:a2:
36:2a:50:7c:08:5b:fa:1c:28:ce:8e:36:c5:27:0f:38:4f:0d:
43:33:b8:da:8f:1e:38:63:cd:83:49:b9:63:7f:b9:31:7d:9e:
11:c1:21:9b:c3:37:97:7d:04:21:17:f0:9d:56:87:f4:96:72:
50:c5:20:49:a9:f6:79:67:49:a9:79:46:e7:77:63:1f:93:ba:
68:16:81:bf:d5:a3:e6:59:14:52:68:7e:16:bb:e8:15:db:f5:
38:72:16:e9:b7:08:8a:01:67:fb:13:1e:2d:fc:0b:76:05:0f:
f9:4b:07:3c:80:e7:eb:56:20:f5:e6:14:c2:a0:e9:d8:6a:4e:
4a:b5:4f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:34:30 2026 by rpki-client