
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
File: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft (raw, json)
Hash identifier: IZu56QvBK7QMyKoLbItfsZYe6IyM1mKf/fYhbSfJODE=
Subject key identifier: 55:94:EC:7C:BA:14:E0:DE:62:EF:B4:5F:C3:D0:06:42:2E:F5:4A:DE
Authority key identifier: E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25
Certificate issuer: /CN=A914A47A/serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25
Certificate serial: 351E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
Manifest number: 3517
Signing time: Sun 01 Mar 2026 22:40:22 +0000
Manifest this update: Sun 01 Mar 2026 22:40:22 +0000
Manifest next update: Sun 08 Mar 2026 22:40:22 +0000
Files and hashes: 1: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl (hash: gjjNCNXGeQm/zJgeJRKzOVkCTQzbdaKVLLk8eXHVXr0=)
2: A5C01D6ED15511EA904EF30BC4F9AE02.roa (hash: TPYIIy7giECCiyhkn2zqAxX7e1+jAVNc9TByU391IOU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl
rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:40:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13598 (0x351e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A47A, serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25
Validity
Not Before: Mar 1 22:40:22 2026 GMT
Not After : Mar 8 22:40:22 2026 GMT
Subject: CN=69a4c056-ab83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:d8:d8:b4:38:a7:28:ad:61:cf:d2:15:34:
bf:30:c9:bc:c8:c7:29:74:63:f7:f4:51:a2:2d:e1:
8a:74:86:0e:b3:14:a1:ae:66:dc:47:99:ce:43:dc:
ba:d8:d9:27:a6:31:6c:b1:82:18:e0:ec:3a:e8:3b:
82:ed:df:27:f0:5b:1b:88:54:ea:c6:2f:dc:79:d9:
4b:f7:85:a3:a5:36:9a:c0:5a:ee:22:a5:87:08:1c:
bd:0c:0c:b4:0f:6a:bf:62:ea:73:be:3f:65:45:2d:
63:f2:8b:3b:8b:e3:04:79:6a:80:65:ab:89:dc:c8:
8d:1e:9b:fb:6c:95:b4:fd:25:ea:b2:bc:88:39:aa:
42:f5:42:e2:d2:ca:db:42:f4:86:91:63:70:93:53:
cb:f4:48:eb:4b:2a:ca:0a:3f:71:84:50:66:34:78:
33:a1:04:70:7e:03:42:d5:cc:3f:5f:c1:1a:90:a6:
54:33:c3:82:bb:8b:29:27:4f:9e:48:81:71:f2:bf:
a8:c8:8b:11:7f:40:16:bc:8c:08:5f:c5:d3:e5:75:
1a:c5:ef:b2:66:b7:e6:05:0e:be:e1:02:a3:5d:af:
22:ee:57:0d:88:0d:84:ae:9a:46:62:d5:8d:3c:4f:
0e:6b:ff:d6:00:52:6e:45:f7:b9:00:5d:c2:a0:e8:
5f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:94:EC:7C:BA:14:E0:DE:62:EF:B4:5F:C3:D0:06:42:2E:F5:4A:DE
X509v3 Authority Key Identifier:
keyid:E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:07:ba:40:0e:8f:b6:49:bc:0e:be:d5:86:33:98:e3:97:d2:
0b:0e:83:df:ba:e5:77:db:4b:6e:67:84:3d:c2:a1:ab:58:c2:
d2:de:2d:03:f9:82:0c:2f:52:e8:a1:3a:f0:ff:a9:0d:e3:b6:
ec:e9:9b:b1:40:ff:19:b5:c9:02:41:a7:34:d2:ff:67:c1:41:
97:47:ed:c3:dd:4d:61:0b:ee:97:5b:60:e1:5f:85:6b:1e:3f:
53:24:5d:2c:1e:3b:36:4a:5f:49:89:4b:f6:0a:8d:c6:af:b4:
3f:96:6b:8d:9b:9c:6a:47:e2:b9:78:95:d7:1c:5d:83:0a:f0:
07:71:45:32:10:a7:61:3a:4a:a3:d0:83:0a:3e:ec:f5:e7:d1:
ba:3f:6c:8a:2a:8a:5e:63:9c:a8:af:30:11:16:7f:9f:04:f8:
2a:10:0f:c0:5e:52:58:e1:c8:5f:0e:fb:b1:cf:61:58:09:d4:
46:c2:3f:d1:a0:fd:57:e2:c0:cc:e5:c7:50:21:52:60:7d:90:
08:7d:7c:a4:e5:c2:a1:75:1d:94:ce:b0:75:60:8f:c4:f7:f9:
0c:68:59:ab:71:9f:64:4b:ba:83:c8:60:cf:09:de:39:34:b4:
32:40:ec:aa:f5:bc:ad:a3:31:c8:65:c2:c3:38:2f:20:54:7d:
80:1d:87:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:36 2026 by rpki-client