
$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
File: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json)
Hash identifier: 2c7IZ6fznrfHVLaC9kIbI9Ae/JJDBmKyaeO5Sx9Nftk=
Subject key identifier: B2:1C:10:FA:85:35:1B:DE:4A:45:CB:66:1E:80:26:68:92:7D:E4:AF
Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03
Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
Certificate serial: 0958
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
Manifest number: 0947
Signing time: Thu 16 Apr 2026 20:03:38 +0000
Manifest this update: Thu 16 Apr 2026 20:03:38 +0000
Manifest next update: Thu 23 Apr 2026 20:03:38 +0000
Files and hashes: 1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: Ve40hVz8KzVjRCn14Bcd8t/N3AZami8xhFO7fouLjO0=)
2: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: TRtCWEacfScERXGsANUVPFpqIEC3+bt+vk9acDdl/Bg=)
3: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: juRf6DKubWHLyUVCkZq0DoXL3LBiJ5IdHL3Dkg0ZIH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl
rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2392 (0x958)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
Validity
Not Before: Apr 16 20:03:38 2026 GMT
Not After : Apr 23 20:03:38 2026 GMT
Subject: CN=69e1409a-df74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:45:a5:f3:d1:33:ce:1e:ea:5d:28:ab:c5:84:
ce:9a:e1:45:5a:40:26:5f:2a:83:99:18:ff:98:60:
60:d0:b8:02:1e:96:55:95:9f:f3:7a:90:c1:b1:f5:
0b:45:ab:24:75:b1:60:58:0d:cf:53:c4:02:7e:d5:
32:9b:31:70:a3:16:0c:1f:09:ff:4b:1e:26:8a:ed:
43:06:a4:56:93:1b:48:b5:ba:92:a7:7b:9e:d8:eb:
21:94:04:8d:28:12:ca:66:03:ed:7a:52:86:05:64:
f0:6e:82:bc:9e:7c:93:e3:dc:cc:e0:23:24:51:55:
8a:65:26:16:c3:f0:61:ff:93:62:ad:f0:55:34:88:
7d:99:d5:23:b9:6e:ac:c8:d1:94:21:10:b6:20:2d:
f4:68:0c:fe:48:8c:ca:50:f5:31:df:0f:9a:f0:7c:
1c:e8:8e:6c:e0:3f:08:b8:d3:85:25:c3:70:ab:c1:
8b:78:c1:62:aa:b8:0e:e7:9b:0f:fb:3f:9a:a6:f7:
52:93:62:f8:81:5a:98:cb:f7:8d:67:f9:a7:a3:45:
e0:87:4a:b5:7c:ca:c0:b9:bd:0a:b2:de:46:ea:4d:
57:c6:78:8d:de:72:28:95:28:cd:82:8b:c6:eb:3f:
18:e5:c6:6d:13:be:d1:50:0b:44:5e:02:0f:ce:f7:
b3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1C:10:FA:85:35:1B:DE:4A:45:CB:66:1E:80:26:68:92:7D:E4:AF
X509v3 Authority Key Identifier:
keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:78:a2:f4:0c:22:7c:7b:ef:a5:6f:2c:36:d5:2d:9f:8b:ae:
61:16:9b:80:98:ab:fa:ad:be:a6:d3:1f:7c:5a:8d:21:a2:ea:
75:e2:cd:5d:9f:da:42:35:06:94:7f:3c:2f:1d:c2:f6:89:14:
5a:2e:1a:1c:86:b0:ae:93:3c:5d:52:26:8e:78:74:1e:54:4e:
c4:d2:c4:9a:06:cf:7a:13:ed:1c:7e:b0:1d:d1:eb:e8:c0:d1:
c4:f6:db:0f:6d:b0:49:c6:98:5b:ff:0f:78:55:a2:8f:50:93:
06:51:f6:f0:c9:fb:ed:00:c2:e8:06:4c:2b:be:b1:07:d3:68:
40:19:a7:56:79:1e:24:42:98:f8:49:d7:5e:0d:8f:39:7c:b3:
58:7b:70:c9:4d:83:47:0a:e8:83:eb:0b:f4:df:56:2c:dc:8a:
73:bb:7d:53:dd:9c:57:54:fa:b8:b0:26:ce:5d:3e:49:be:71:
ad:5c:7c:8c:a3:c3:09:37:21:4a:75:58:df:8e:9d:31:d9:bb:
a0:0d:1c:0a:cc:54:b2:83:5d:33:fc:21:81:4f:40:37:29:d1:
05:c2:90:9b:65:90:0a:40:c4:c4:2c:e4:4d:7d:83:2b:35:1b:
3a:16:ab:4b:1b:05:5e:f2:33:34:e4:65:40:17:bf:7c:d4:5a:
b3:e8:22:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3
QzNBRkU0MDMwHhcNMjYwNDE2MjAwMzM4WhcNMjYwNDIzMjAwMzM4WjAYMRYwFAYD
VQQDEw02OWUxNDA5YS1kZjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApUWl89Ezzh7qXSirxYTOmuFFWkAmXyqDmRj/mGBg0LgCHpZVlZ/zepDBsfUL
RaskdbFgWA3PU8QCftUymzFwoxYMHwn/Sx4miu1DBqRWkxtItbqSp3ue2OshlASN
KBLKZgPtelKGBWTwboK8nnyT49zM4CMkUVWKZSYWw/Bh/5NirfBVNIh9mdUjuW6s
yNGUIRC2IC30aAz+SIzKUPUx3w+a8Hwc6I5s4D8IuNOFJcNwq8GLeMFiqrgO55sP
+z+apvdSk2L4gVqYy/eNZ/mno0Xgh0q1fMrAub0Kst5G6k1XxniN3nIolSjNgovG
6z8Y5cZtE77RUAtEXgIPzvezcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLIcEPqF
NRveSkXLZh6AJmiSfeSvMB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB
QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1
QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTJGNy83Q0M0NUZBRUJBQUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElk
UjdHelZad0oxdXA4T3Y1QU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZHii9AwifHvvpW8sNtUtn4uuYRabgJir+q2+ptMffFqNIaLqdeLNXZ/aQjUG
lH88Lx3C9okUWi4aHIawrpM8XVImjnh0HlROxNLEmgbPehPtHH6wHdHr6MDRxPbb
D22wScaYW/8PeFWij1CTBlH28Mn77QDC6AZMK76xB9NoQBmnVnkeJEKY+EnXXg2P
OXyzWHtwyU2DRwrog+sL9N9WLNyKc7t9U92cV1T6uLAmzl0+Sb5xrVx8jKPDCTch
SnVY346dMdm7oA0cCsxUsoNdM/whgU9ANynRBcKQm2WQCkDExCzkTX2DKzUbOhar
SxsFXvIzNORlQBe/fNRas+gieg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:31:59 2026 by rpki-client