
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
File: 5vEsD995brDfK2AuWsQsy4OyLhg.mft (raw, json)
Hash identifier: RD76Bn1RmQe+41lvkLshQiIsjR9mb/xqHJ5omttYcf4=
Subject key identifier: FE:73:04:8E:A5:85:3F:EA:3C:5C:3B:58:61:BE:2F:60:17:7D:62:A5
Authority key identifier: E6:F1:2C:0F:DF:79:6E:B0:DF:2B:60:2E:5A:C4:2C:CB:83:B2:2E:18
Certificate issuer: /CN=A914E3B7/serialNumber=E6F12C0FDF796EB0DF2B602E5AC42CCB83B22E18
Certificate serial: 3514
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
Manifest number: 3511
Signing time: Sun 01 Mar 2026 23:22:49 +0000
Manifest this update: Sun 01 Mar 2026 23:22:47 +0000
Manifest next update: Sun 08 Mar 2026 23:22:47 +0000
Files and hashes: 1: 5vEsD995brDfK2AuWsQsy4OyLhg.crl (hash: l0IDq0cxpdJetelQPLJx3c/V8A4zPp1Ecw3/LDlDd6Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.crl
rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:22:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13588 (0x3514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E3B7, serialNumber=E6F12C0FDF796EB0DF2B602E5AC42CCB83B22E18
Validity
Not Before: Mar 1 23:22:47 2026 GMT
Not After : Mar 8 23:22:47 2026 GMT
Subject: CN=69a4ca48-516e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:8b:ce:4f:92:7c:46:e3:57:e9:f5:2e:1e:
fd:74:b8:09:3e:4f:26:36:be:ca:9a:74:54:12:3f:
92:58:83:12:ea:97:cd:b4:04:41:fc:4d:a1:c3:d2:
7a:79:21:7c:eb:15:dc:53:e2:ff:cd:6d:6b:f5:89:
a5:44:da:2b:8e:4c:41:b2:61:ab:68:95:a6:5d:84:
8b:de:2e:e4:12:ee:43:8f:88:1b:08:2f:a2:7b:fc:
81:40:f1:6b:c8:b4:6c:2c:12:e0:54:6f:91:96:54:
09:ab:ce:de:64:07:82:d9:ca:27:9a:c4:5e:57:10:
93:e1:2e:f3:5a:ae:de:c0:5f:96:7e:64:f2:fd:2e:
7a:44:d2:55:0d:44:8c:92:69:1c:86:42:b6:ce:4c:
94:34:a4:9d:8c:04:b0:6c:0d:25:5f:b4:8a:85:5e:
4c:fa:15:ef:29:5e:07:34:6e:1f:1a:88:49:9d:3c:
da:9b:f6:b0:2a:e3:5f:20:a1:4b:a3:ba:98:27:f8:
90:4f:f7:cf:f0:09:15:2d:9e:5f:59:da:f5:48:0f:
79:87:8c:9a:6e:1e:3b:e0:45:40:1a:57:18:b8:58:
2a:17:96:63:f8:06:7b:dc:6b:59:ee:b6:63:bc:ac:
15:67:9c:e8:c5:55:b9:3b:89:98:30:d9:a6:4e:61:
ac:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:73:04:8E:A5:85:3F:EA:3C:5C:3B:58:61:BE:2F:60:17:7D:62:A5
X509v3 Authority Key Identifier:
keyid:E6:F1:2C:0F:DF:79:6E:B0:DF:2B:60:2E:5A:C4:2C:CB:83:B2:2E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c7:38:16:44:23:a3:ee:a2:49:f9:11:72:29:e3:f2:8e:5a:
00:83:9c:ce:d6:27:f4:0b:55:73:44:83:a9:91:dd:8c:a8:a1:
5b:79:2a:1f:d8:d3:d8:9a:99:bd:82:f8:5e:2b:8e:d7:a2:64:
64:4a:75:ff:39:4d:04:a4:e0:f8:6f:80:c1:d4:0f:a4:47:c7:
e4:d4:19:c1:30:6d:9f:d3:d4:57:fe:63:a0:04:06:f6:f7:a1:
b9:30:e0:a7:22:d3:d2:49:f7:41:39:ca:1a:03:79:ad:d4:c7:
20:bd:2c:1f:16:d9:39:96:ed:57:3b:99:36:02:f2:b6:9d:d0:
79:cc:61:ef:93:40:29:91:80:f2:c9:2b:ef:56:80:17:84:7b:
53:94:49:dc:41:ac:b0:cb:a9:44:21:62:f0:58:0e:19:cc:40:
16:f3:cd:f4:5c:46:6a:19:2f:20:ff:37:8a:9c:27:24:76:b1:
55:b2:09:57:d0:f3:4f:e9:3a:40:ac:eb:99:5a:c1:76:3d:d3:
ab:1d:ab:ef:17:8d:24:b4:a4:c0:22:25:8b:5a:09:34:6c:87:
53:25:5a:34:2b:0a:e3:f8:13:52:5f:05:82:b9:49:9a:ab:33:
a8:d0:a5:25:c8:98:0e:2f:55:aa:2f:89:8c:0b:ad:ce:c6:49:
6b:1f:27:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:19 2026 by rpki-client