
$ rpki-client -vvf rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
File: P5mfuMEae4Z_G_n5nKHCaglVK34.mft (raw, json)
Hash identifier: EtMeM5pI8GNQB5cyvE6HDUSPz2aDOoqp6pUr5Q8+djc=
Subject key identifier: 09:F4:FE:95:DD:3A:8C:A2:08:CA:7F:FD:CE:6B:1F:B2:DA:76:0E:D3
Authority key identifier: 3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E
Certificate issuer: /CN=A917429C/serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E
Certificate serial: 0208
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
Manifest number: 0203
Signing time: Sun 19 Apr 2026 02:50:27 +0000
Manifest this update: Sun 19 Apr 2026 02:50:27 +0000
Manifest next update: Sun 26 Apr 2026 02:50:27 +0000
Files and hashes: 1: P5mfuMEae4Z_G_n5nKHCaglVK34.crl (hash: YesI+v8dl5l75ek0Wn+jS+ZoDZbxgygXqsJY6IVZuJs=)
2: D41F53D48DC011EEB2B3600BC4F9AE02.roa (hash: +o/nFF9YcRFxpnVGXo6IbySuNz1oT8+gBrDzhbaViHc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl
rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917429C, serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E
Validity
Not Before: Apr 19 02:50:27 2026 GMT
Not After : Apr 26 02:50:27 2026 GMT
Subject: CN=69e442f3-1e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:92:43:4d:b6:4f:3e:a2:9e:e0:5a:8f:74:b9:
f6:86:b2:fa:ac:9e:ec:dc:aa:c7:6c:52:c6:50:0a:
bb:2c:79:a2:b5:0f:2a:b7:cc:a8:c4:f9:1a:2d:6a:
14:2b:6d:df:05:73:da:49:25:54:1a:60:ec:63:d1:
06:63:eb:1c:0d:0a:70:be:73:e4:ab:72:cb:f4:43:
6d:3f:d2:49:86:e5:a2:e1:21:b6:74:12:b3:e8:fa:
fb:d2:f6:9a:11:d2:49:9a:7c:14:ec:58:1e:6d:ff:
a1:a5:d2:57:d5:00:41:59:9a:b4:a0:d3:f5:63:98:
8a:57:93:1a:e2:0e:2d:c3:c0:e1:6e:78:a0:01:ff:
0a:7c:2a:61:3e:ab:4f:99:36:6f:30:32:20:fd:df:
42:1d:8b:20:7a:26:5c:a0:22:e1:ae:45:7b:b9:92:
4f:d6:04:ec:93:33:da:a4:38:41:7d:b7:48:d6:1c:
84:a6:3f:4a:81:c8:3b:99:22:5a:62:f7:68:c5:e1:
65:7d:b2:51:ed:f4:78:4a:fc:03:d5:39:74:cb:a3:
d0:55:c0:86:73:32:99:1e:4d:a9:40:41:bf:b3:c1:
8e:84:d6:7b:e7:94:c4:b8:5d:02:55:88:6b:95:e1:
ef:07:b6:8b:d0:70:76:af:69:23:1a:62:0f:b9:ed:
0f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F4:FE:95:DD:3A:8C:A2:08:CA:7F:FD:CE:6B:1F:B2:DA:76:0E:D3
X509v3 Authority Key Identifier:
keyid:3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:88:15:c3:b8:8a:3e:91:f3:a4:ef:0f:29:54:8c:cc:62:74:
4f:16:2b:a7:f0:16:93:ea:cf:ec:8f:ac:91:81:1d:fb:44:b3:
7f:fd:87:4b:82:0e:75:e7:1f:19:e7:94:ed:8a:87:a2:27:77:
ae:19:1f:11:f2:bc:cd:75:c8:6d:1c:43:83:82:74:1b:3f:4c:
76:ed:f9:f3:31:56:ad:35:35:87:f3:a9:89:ed:8c:43:9e:d4:
f8:51:82:e7:91:79:ac:72:d0:12:c5:ab:74:75:b2:7d:fd:d1:
10:c6:05:f2:d3:83:1c:8d:be:0a:fe:89:e8:39:a2:4f:74:aa:
d0:c6:b7:de:7f:c7:67:38:57:21:7a:84:c4:b6:64:e5:ef:50:
4e:8c:f8:88:be:e1:9f:55:06:69:8c:b8:b3:e9:f8:36:0f:8f:
33:9e:eb:33:fa:76:db:52:29:e3:dd:ae:a2:a6:72:7a:a8:0c:
55:38:52:91:b2:5f:30:59:b9:14:ef:a0:f3:e4:9f:72:14:46:
55:4e:46:67:af:ca:e2:fc:9a:3d:ae:08:bf:c5:a3:f9:ac:7c:
e9:e5:be:cf:95:fa:91:26:0b:05:03:5d:3d:19:af:0e:e1:e5:
72:6e:fc:87:b9:14:83:0a:b7:e3:90:ac:22:ae:94:63:99:9b:
a7:50:b4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:56:14 2026 by rpki-client