
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
File: usH6Gx5O5DACOyddInpdBDx_lqM.mft (raw, json)
Hash identifier: BFjahUrJViajDW795Q/yPdO8jWDDBGBRMcucK3mBWgg=
Subject key identifier: 15:87:0F:48:0C:5D:3E:EE:34:3C:24:BA:E3:BB:09:EE:98:D9:41:E1
Authority key identifier: BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3
Certificate issuer: /CN=A913FE55/serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3
Certificate serial: A5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
Manifest number: A2
Signing time: Fri 17 Apr 2026 07:01:44 +0000
Manifest this update: Fri 17 Apr 2026 07:01:43 +0000
Manifest next update: Fri 24 Apr 2026 07:01:43 +0000
Files and hashes: 1: usH6Gx5O5DACOyddInpdBDx_lqM.crl (hash: fn6qpIsYMMgrXmXU046UNAsig84VNKCU3MNyBYHrqH0=)
2: 7D7ECB70480611F08B614210C4F9AE02.roa (hash: TDS7qbzkjns0lb3qBIPlOIfh7gAVrC0ccm+ewwA1wN8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.crl
rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FE55, serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3
Validity
Not Before: Apr 17 07:01:43 2026 GMT
Not After : Apr 24 07:01:43 2026 GMT
Subject: CN=69e1dad8-3e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b7:1b:ce:3f:15:e6:ca:25:6e:77:19:eb:78:
7c:6e:b7:77:e4:e6:fa:54:83:05:2a:17:ff:7a:91:
14:fb:c7:8b:5e:42:4b:c6:04:f5:81:b4:11:2a:a1:
c0:47:94:90:05:cc:89:b1:5c:76:22:9e:72:b0:0a:
f1:ad:97:5e:76:67:81:f6:75:34:32:16:56:94:11:
46:62:42:42:33:81:0d:1e:30:8a:c3:8f:f1:d8:71:
e6:83:01:fc:be:42:ad:3e:49:7b:2c:40:44:73:f2:
78:36:62:52:c5:e1:48:b9:90:19:84:62:2e:cf:ec:
3c:74:a1:d7:b6:db:59:c6:eb:a7:69:94:95:a0:47:
9f:1c:d7:e7:0d:02:bd:23:d3:eb:23:f6:57:c5:02:
74:8c:9e:0b:30:80:84:aa:c3:93:d4:0c:d6:43:aa:
ed:76:05:12:e7:d3:24:71:a5:fa:e1:76:02:34:08:
f7:28:e2:ce:86:72:78:88:f8:2b:96:01:e6:d3:7d:
e3:9a:f6:07:33:3b:a7:73:0e:d2:a0:a4:3a:a2:d8:
07:08:2e:06:3e:45:0a:b7:3f:79:88:3b:77:23:0d:
8d:b2:2f:fc:c3:8f:72:4a:3a:38:72:e3:e6:ed:f2:
4b:9f:3f:4d:8c:f9:7b:ba:b1:56:3f:30:d0:11:1a:
65:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:87:0F:48:0C:5D:3E:EE:34:3C:24:BA:E3:BB:09:EE:98:D9:41:E1
X509v3 Authority Key Identifier:
keyid:BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ae:7b:48:64:74:58:4c:98:7e:9c:fc:c3:51:ab:f3:e1:fc:
f4:f9:84:11:0b:dd:07:40:40:a4:0b:5c:4a:46:7c:e5:8d:c1:
90:c2:94:b2:70:b6:e6:7e:58:0c:35:27:a3:20:e7:3a:cb:4e:
31:db:f7:a7:2b:a2:51:2b:88:8b:9f:01:cc:ed:ba:1e:73:36:
cf:ad:1f:32:fb:db:cc:db:71:00:db:b7:8b:0a:a3:88:d7:bd:
4d:8b:30:ad:80:c1:de:f4:84:34:b1:a0:f4:7d:66:ab:15:93:
bd:e7:7a:cc:83:34:49:49:84:92:95:32:18:ee:2c:46:8c:0f:
6c:bb:24:61:9b:5d:1e:b7:c2:cb:a1:b5:7e:0b:a1:ad:82:4f:
f6:81:32:a8:53:d0:ce:2d:81:04:e9:8a:59:4f:d4:44:b6:d1:
05:f4:c3:54:d1:a6:37:36:79:97:7c:d4:c9:a9:44:d3:48:4a:
38:00:90:d0:45:12:1b:7b:41:4a:9f:ef:f0:25:a8:b8:1f:e5:
da:eb:e8:f8:44:6f:c0:90:e5:a2:bf:1f:8a:b6:94:fd:60:b1:
5a:5c:aa:69:35:29:96:e8:0d:2f:b2:14:88:8c:b7:a2:3f:43:
2f:a2:59:28:4d:a8:b8:d1:9d:5e:79:81:a0:fd:04:36:19:a9:
c8:e6:99:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:41:56 2026 by rpki-client