
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
File: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft (raw, json)
Hash identifier: fa96saWzfj0vYuN2WxHAnW6xGlSb/87PxlA2UXOOkM4=
Subject key identifier: A9:3E:63:BA:FA:C1:75:AE:ED:F4:EB:64:43:1F:B8:51:14:5B:77:2C
Authority key identifier: E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25
Certificate issuer: /CN=A914A47A/serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25
Certificate serial: 3536
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
Manifest number: 352F
Signing time: Thu 16 Apr 2026 14:52:17 +0000
Manifest this update: Thu 16 Apr 2026 14:52:17 +0000
Manifest next update: Thu 23 Apr 2026 14:52:17 +0000
Files and hashes: 1: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl (hash: mS/NQPkR8DEDiLQRGVnd17kx33mv/qMn9MpUQd5tnws=)
2: A5C01D6ED15511EA904EF30BC4F9AE02.roa (hash: TPYIIy7giECCiyhkn2zqAxX7e1+jAVNc9TByU391IOU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl
rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13622 (0x3536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A47A, serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25
Validity
Not Before: Apr 16 14:52:17 2026 GMT
Not After : Apr 23 14:52:17 2026 GMT
Subject: CN=69e0f7a1-ac71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:60:e3:a1:0e:8c:ce:e1:09:4d:2e:01:d3:
db:2e:a2:94:58:fd:d5:84:77:f1:1d:ad:95:1c:84:
b1:34:51:a0:15:07:30:0f:dc:ea:a6:6c:a8:dd:79:
f8:db:b5:ef:0d:4f:b9:9f:87:4b:af:4e:de:2f:00:
fd:4f:02:92:18:94:c6:6e:8e:8e:45:70:b4:37:7a:
fd:76:65:52:5d:a8:0a:1c:52:ad:cf:76:60:ed:be:
e6:27:ee:1d:f4:15:28:b9:f2:a4:e4:3e:88:04:f1:
fd:3f:bb:0b:a7:4e:cd:4a:79:46:63:6f:14:f6:70:
a5:41:37:b1:8c:c7:22:73:dd:24:f7:e7:f5:3f:a3:
fc:f8:85:a4:b0:cb:8e:63:a2:3b:89:cb:b2:e2:dc:
bf:90:ca:2a:fe:25:c6:12:47:6d:31:dd:b5:41:d2:
22:99:94:5a:7d:28:4d:80:f4:03:29:9a:3c:80:33:
28:1e:a2:a5:0c:28:a5:24:b7:a2:ef:49:d9:24:22:
ab:5c:9a:77:89:b3:3e:0c:2c:a9:42:61:16:a3:fb:
cd:55:c5:fa:06:72:df:37:ce:75:7c:ba:33:9a:60:
44:ef:f5:8d:de:3d:5b:34:4e:d8:eb:02:cc:d6:7f:
c2:4d:aa:fb:25:1a:87:0c:70:18:6a:54:07:7f:19:
2c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3E:63:BA:FA:C1:75:AE:ED:F4:EB:64:43:1F:B8:51:14:5B:77:2C
X509v3 Authority Key Identifier:
keyid:E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:53:14:c4:c3:37:22:ca:2d:38:4d:72:ee:9d:4e:60:1c:b7:
e1:e4:42:51:54:ff:10:a9:a6:ea:51:9a:91:f3:02:7d:c8:10:
89:96:65:1b:74:62:fb:17:59:ef:21:8c:bd:0a:0c:68:23:6b:
a4:f9:19:69:25:98:59:fc:73:55:a8:94:08:33:ee:0c:3e:71:
22:fa:b0:b2:28:04:5c:38:02:ee:f0:c6:81:e6:91:d8:65:fe:
a4:b5:3b:d4:d0:4e:fb:8c:db:a8:b8:43:d4:09:bb:37:c6:84:
a0:00:18:69:e2:67:b9:91:fe:3e:a6:4f:ec:c2:ad:8f:98:e3:
e4:3d:6c:0f:e4:ac:29:11:c2:c5:48:c1:7c:f4:3b:c4:c9:c9:
62:13:88:15:01:4e:81:f1:9d:4a:a5:9e:cb:de:45:a5:7d:03:
5f:87:4e:5f:9e:8e:c1:f3:06:de:25:df:1f:ad:51:14:b5:d4:
9b:77:b8:c3:cc:59:3e:1c:46:de:c4:e8:35:f4:d3:37:30:26:
8e:41:f8:3c:ce:c9:04:70:16:6e:92:b1:b5:4a:ac:71:2a:eb:
4e:92:6a:4c:50:1e:61:31:9e:52:51:fb:d7:ce:22:c4:06:35:
fc:d3:6b:ee:e4:08:ef:57:5f:3c:b2:2c:4e:9f:f5:72:f8:03:
4a:8a:7d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:56:55 2026 by rpki-client