
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
File: P5mfuMEae4Z_G_n5nKHCaglVK34.mft (raw, json)
Hash identifier: nBO1ih5pl/bWveOVCKx//IxpJFKg+y3EcFjoOWKoKNI=
Subject key identifier: 64:40:71:F1:C8:7E:7A:E2:3C:EF:B8:78:6C:E1:8A:3D:AE:46:2A:E0
Authority key identifier: 3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E
Certificate issuer: /CN=A917429C/serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E
Certificate serial: 0258
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
Manifest number: 0252
Signing time: Sat 19 Sep 2026 02:26:56 +0000
Manifest this update: Sat 19 Sep 2026 02:26:56 +0000
Manifest next update: Sat 26 Sep 2026 02:26:56 +0000
Files and hashes: 1: P5mfuMEae4Z_G_n5nKHCaglVK34.crl (hash: yIHmR9BrMTKnsIjNIfHcvDHU1bOAp0u/rh9Uir7R0ww=)
2: D41F53D48DC011EEB2B3600BC4F9AE02.roa (hash: tPyAwiQAg+johnabIh5EJJpG8jXtHq7a+F5Zf4Rm4WI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl
rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 600 (0x258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917429C, serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E
Validity
Not Before: Sep 19 02:26:56 2026 GMT
Not After : Sep 26 02:26:56 2026 GMT
Subject: CN=6aadf2f0-6c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:57:86:f1:ee:ed:9f:46:c0:24:4d:4c:b8:d8:
73:58:35:c6:1f:34:f5:a9:7a:88:66:b7:14:fd:d1:
88:91:83:7e:c9:81:d1:5c:f2:83:3e:50:7f:1f:39:
a1:47:c6:ab:6a:07:6d:9d:27:2d:70:34:9a:aa:82:
cc:40:f5:7a:ce:eb:45:dc:61:9f:0f:8d:f7:c3:c1:
21:4d:86:ae:81:8c:ff:f1:fb:6f:e9:12:34:0c:bf:
35:fe:a3:2e:01:bf:6b:80:78:44:5b:20:14:66:2d:
8f:a0:b5:9e:34:48:67:5f:b0:49:39:02:c0:df:4e:
7b:66:c7:73:ef:6b:24:53:6b:55:89:8f:ab:d1:0d:
2d:aa:45:8b:b1:e8:0e:1c:16:17:e1:20:78:d2:f3:
23:15:dd:eb:a8:64:14:04:82:05:35:7a:ef:5c:3f:
1d:9f:58:52:58:4f:67:23:af:0a:db:a4:ac:37:cc:
37:52:83:b9:c8:6e:9a:e2:00:0f:c4:91:30:97:f4:
7e:1e:0a:fa:74:8f:03:79:15:62:4f:99:63:31:d6:
29:43:38:04:5c:68:7e:14:ea:18:c4:c3:f6:47:90:
a8:46:72:fd:9f:e7:ca:31:d7:7f:b6:27:76:3f:c2:
dc:4e:3d:c4:08:13:a4:33:9a:40:73:1b:72:aa:39:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:40:71:F1:C8:7E:7A:E2:3C:EF:B8:78:6C:E1:8A:3D:AE:46:2A:E0
X509v3 Authority Key Identifier:
keyid:3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:35:9f:e9:be:93:de:34:93:dc:1c:a6:2e:83:ef:47:70:09:
8b:38:ea:47:cf:6d:09:a4:9c:32:b1:ff:17:5f:d5:77:28:be:
52:bd:0a:b9:5c:65:1b:79:a1:89:3b:66:29:54:2e:92:97:cd:
70:98:41:64:09:17:4b:9b:1f:eb:8b:bb:d3:1b:21:b4:d2:ba:
30:61:56:b1:b8:a6:c1:82:09:26:19:d9:b5:c8:d1:7a:2b:25:
37:77:d6:75:79:88:69:d3:4a:0a:69:94:fd:49:39:2c:9f:bc:
53:6c:2c:a3:e6:e9:b7:65:7d:e3:fd:1d:9c:44:e5:80:5a:6d:
b3:65:5b:34:b5:06:f2:55:f1:36:b6:e1:06:86:f9:9a:63:e9:
8c:a8:eb:5b:96:9a:f4:c0:47:90:13:34:7d:5b:96:a7:c6:8f:
b6:bb:cf:3f:2d:1f:1c:ab:c9:a5:fc:41:c5:83:b3:ee:1b:e1:
34:6d:fd:14:2a:ac:4a:a7:fa:49:b6:07:05:80:6a:0a:e2:9b:
e2:fe:fd:05:32:9c:21:38:26:09:be:5c:2d:7c:91:22:4a:f3:
85:5d:43:c2:f6:15:69:34:e7:2a:71:00:bf:06:df:7a:c6:d0:
58:b0:12:56:6d:0a:4e:42:88:44:f0:23:c6:9c:15:51:be:06:
15:09:12:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQyOUMxMTAvBgNVBAUTKDNGOTk5RkI4QzExQTdCODY3RjFCRjlGOTlDQTFDMjZB
MDk1NTJCN0UwHhcNMjYwOTE5MDIyNjU2WhcNMjYwOTI2MDIyNjU2WjAYMRYwFAYD
VQQDEw02YWFkZjJmMC02Yzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyleG8e7tn0bAJE1MuNhzWDXGHzT1qXqIZrcU/dGIkYN+yYHRXPKDPlB/Hzmh
R8aragdtnSctcDSaqoLMQPV6zutF3GGfD433w8EhTYaugYz/8ftv6RI0DL81/qMu
Ab9rgHhEWyAUZi2PoLWeNEhnX7BJOQLA3057Zsdz72skU2tViY+r0Q0tqkWLsegO
HBYX4SB40vMjFd3rqGQUBIIFNXrvXD8dn1hSWE9nI68K26SsN8w3UoO5yG6a4gAP
xJEwl/R+Hgr6dI8DeRViT5ljMdYpQzgEXGh+FOoYxMP2R5CoRnL9n+fKMdd/tid2
P8LcTj3ECBOkM5pAcxtyqjlSQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGRAcfHI
fnriPO+4eGzhij2uRirgMB8GA1UdIwQYMBaAFD+Zn7jBGnuGfxv5+ZyhwmoJVSt+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDI5Qy8wRjE3MkREMjMw
MjgxMUVFOTM0QThEMENDNEY5QUUwMi9QNW1mdU1FYWU0Wl9HX241bktIQ2FnbFZL
MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1A1bWZ1TUVhZTRaX0dfbjVuS0hDYWdsVkszNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NDI5Qy8wRjE3MkREMjMwMjgxMUVFOTM0QThEMENDNEY5QUUwMi9QNW1mdU1FYWU0
Wl9HX241bktIQ2FnbFZLMzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbjWf6b6T3jST3BymLoPvR3AJizjqR89tCaScMrH/F1/Vdyi+Ur0KuVxlG3mh
iTtmKVQukpfNcJhBZAkXS5sf64u70xshtNK6MGFWsbimwYIJJhnZtcjReislN3fW
dXmIadNKCmmU/Uk5LJ+8U2wso+bpt2V94/0dnETlgFpts2VbNLUG8lXxNrbhBob5
mmPpjKjrW5aa9MBHkBM0fVuWp8aPtrvPPy0fHKvJpfxBxYOz7hvhNG39FCqsSqf6
SbYHBYBqCuKb4v79BTKcITgmCb5cLXyRIkrzhV1DwvYVaTTnKnEAvwbfesbQWLAS
Vm0KTkKIRPAjxpwVUb4GFQkS1A==
-----END CERTIFICATE-----
Generated at Mon Sep 21 03:38:24 2026 by rpki-client