
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
File: g5Veubsl3DOnjslssIEXQZxkulw.mft (raw, json)
Hash identifier: JOJpL6lxoJEMG7EOX1E2giWhEKt06jR3ABpFzYw8YWs=
Subject key identifier: 98:43:53:43:2F:DD:25:EC:BF:99:2A:2E:A5:88:95:BA:B7:3B:60:4D
Authority key identifier: 83:95:5E:B9:BB:25:DC:33:A7:8E:C9:6C:B0:81:17:41:9C:64:BA:5C
Certificate issuer: /CN=A9155810/serialNumber=83955EB9BB25DC33A78EC96CB08117419C64BA5C
Certificate serial: 0100
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
Manifest number: FB
Signing time: Fri 17 Apr 2026 05:58:52 +0000
Manifest this update: Fri 17 Apr 2026 05:58:52 +0000
Manifest next update: Fri 24 Apr 2026 05:58:52 +0000
Files and hashes: 1: g5Veubsl3DOnjslssIEXQZxkulw.crl (hash: FGyQ8kqoq+B+gGfiU6w3RhAMNtbIncJeWAjpS+e7MbU=)
2: A9D891D4C82B11EF8409A474C4F9AE02.roa (hash: 85VnbBesAuFtmnoaNDKNK175y8YDoN8WdUlNmCsSoTg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.crl
rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155810, serialNumber=83955EB9BB25DC33A78EC96CB08117419C64BA5C
Validity
Not Before: Apr 17 05:58:52 2026 GMT
Not After : Apr 24 05:58:52 2026 GMT
Subject: CN=69e1cc1c-28df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a3:d0:46:4d:6e:1d:5f:be:9a:ac:77:6b:0e:
0a:ae:60:fb:51:7f:4c:23:25:76:27:9d:9a:44:12:
64:5c:f1:5e:45:ec:99:8c:5e:e2:c4:48:7a:4b:21:
49:3f:1a:14:bb:f5:1a:7d:62:97:cc:42:fe:4c:74:
2a:e1:ba:80:f7:4f:96:6b:69:38:b2:61:a3:87:f6:
76:ae:72:6e:7a:e0:c6:75:10:b9:34:0b:25:6f:97:
8f:8e:15:fc:da:ac:2f:a9:ac:27:5c:32:05:7c:98:
c0:4f:a4:58:63:15:93:ff:f9:31:6f:d2:9d:8d:4a:
09:13:fd:a3:13:7b:da:b3:71:52:4d:64:57:65:bb:
9b:6a:c2:48:53:34:d5:05:cf:e2:f2:a0:a2:b2:14:
de:ab:38:5d:ef:5c:9f:73:a3:c4:a2:e8:ec:f8:42:
cf:f6:4e:e1:dd:7b:cf:47:87:53:60:1b:9b:27:0a:
ff:6d:bb:8c:c5:db:12:c8:61:bc:71:ca:ee:ad:3e:
38:6f:63:ff:83:76:2b:bf:1a:1e:f4:e7:e9:80:48:
9d:86:7a:6c:ab:a3:3e:69:39:9d:61:5a:91:f6:55:
71:98:ad:8e:ae:07:06:15:c1:6c:d2:d9:33:5a:ba:
43:d5:44:29:64:01:e6:fd:73:7c:d0:1e:5a:04:14:
11:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:43:53:43:2F:DD:25:EC:BF:99:2A:2E:A5:88:95:BA:B7:3B:60:4D
X509v3 Authority Key Identifier:
keyid:83:95:5E:B9:BB:25:DC:33:A7:8E:C9:6C:B0:81:17:41:9C:64:BA:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ff:ba:63:d6:c3:60:09:ce:a9:86:83:9f:8c:c4:29:2e:16:
10:72:c5:4c:ae:2c:9a:ae:64:d6:b0:d0:65:78:20:4d:5c:0f:
ed:ae:c3:a2:5e:80:85:d0:58:9c:13:1c:64:1b:7b:f4:2a:99:
98:1e:56:7b:a7:83:fb:2d:ef:75:32:93:b1:4d:e4:6b:32:35:
50:3b:a5:d4:b0:cc:c5:0c:eb:fc:12:3a:9d:c8:d1:c0:91:77:
8b:9b:a3:8f:cb:b0:5c:a3:4e:a1:53:68:96:66:4e:8e:cb:95:
88:4e:be:a1:e1:e5:92:93:49:49:15:e1:a3:7e:e8:11:ec:7b:
12:3c:32:50:b4:51:6b:bd:e5:87:b4:34:3b:a4:4c:5b:a0:02:
5b:7c:dd:bf:17:6a:48:64:37:cb:6d:c7:4a:e3:74:bd:c9:79:
dc:a4:5b:0f:87:12:2c:bc:64:e9:23:f0:c8:1f:dc:a7:e3:81:
4f:00:0a:70:83:8e:32:67:46:a9:e7:44:26:49:2b:dc:01:22:
94:9b:05:07:dc:17:09:2c:7b:3c:b5:de:2c:0e:42:83:61:a1:
7e:6c:82:99:c2:ed:d9:1a:3d:b8:40:34:de:eb:23:bb:1a:e6:
54:e8:8e:d7:87:cb:e0:cc:d9:13:89:9a:d6:b9:33:c4:1e:8e:
ba:31:71:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:23:39 2026 by rpki-client