
$ rpki-client -vvf rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
File: 5K6ANyqGeYe7Kgq74RCrgENw1eM.mft (raw, json)
Hash identifier: wFM7tTNRPKMu2fQc7my2+LgmoM6N36gczNWD9sujJfs=
Subject key identifier: 5F:56:1F:0A:FF:26:38:3C:AA:23:28:05:79:C0:CB:DA:D3:E7:16:48
Authority key identifier: E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
Certificate issuer: /CN=A917452D/serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Certificate serial: 03AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
Manifest number: 032E
Signing time: Mon 02 Mar 2026 01:45:50 +0000
Manifest this update: Mon 02 Mar 2026 01:45:49 +0000
Manifest next update: Mon 09 Mar 2026 01:45:49 +0000
Files and hashes: 1: 5K6ANyqGeYe7Kgq74RCrgENw1eM.crl (hash: Bdja0TRh0vYksEsjWoNrfyTCmO8Ol0h/kpweAW9S3R4=)
2: AA71F05C60EF11EF8D645D72C4F9AE02.roa (hash: swmukQ/6inpZ4FJ1TMTK1/37WsZOejfr5bfE8ReGGHI=)
3: 7D96BB10A96B11F09DD07C12C4F9AE02.roa (hash: 2RTgLoy0RD3Ypi83mkCGJfdMp3piRyK+gquTLVUemeE=)
4: 10B04C9853D411EFB53AD61CC4F9AE02.roa (hash: TaXp1xs0fHIGcbbMRsW0b96QsUKlV9OQZhZUz5rKIOE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl
rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 941 (0x3ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917452D, serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Validity
Not Before: Mar 2 01:45:49 2026 GMT
Not After : Mar 9 01:45:49 2026 GMT
Subject: CN=69a4ebce-1da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:0f:c5:4d:19:88:5e:9c:22:01:b5:67:56:
bc:61:63:85:e8:b5:53:87:f6:fc:70:8e:41:00:ce:
f0:c8:51:35:7e:3b:77:77:b3:43:cf:3f:0f:4f:45:
d7:f2:89:e5:a6:12:7b:6e:c7:4a:04:3c:2c:92:fa:
27:7d:6d:05:a6:00:10:7c:50:56:7e:51:69:fc:5a:
fb:22:c2:b1:ad:29:b6:e6:13:d8:ee:8b:48:4f:df:
4e:8a:8b:6a:b2:7f:a8:2d:5e:46:b6:36:54:e5:95:
9a:70:f9:f8:a4:cf:9b:c5:25:56:fc:13:3f:cd:54:
a6:5a:a7:80:58:b5:49:2b:34:1e:81:5a:5a:a7:9e:
60:56:94:dc:30:fd:34:0b:45:af:83:be:24:24:93:
5d:21:a3:49:51:f0:01:e8:cd:44:10:57:be:cf:f7:
c5:3e:dd:37:72:b0:c5:da:7f:1d:ec:0b:2c:0e:01:
c7:c1:b0:60:00:1d:e8:17:0b:4f:e5:60:e1:f0:5a:
16:e9:e4:da:ce:41:33:77:7a:d3:1b:f6:be:0f:7b:
3d:26:46:39:90:bd:a9:42:f5:1e:78:c5:05:2f:5e:
92:6d:01:b4:b0:47:60:7b:01:f3:db:aa:02:8c:af:
ef:01:a0:00:07:9f:ff:32:f6:de:b4:07:05:72:f0:
ad:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:56:1F:0A:FF:26:38:3C:AA:23:28:05:79:C0:CB:DA:D3:E7:16:48
X509v3 Authority Key Identifier:
keyid:E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:46:d8:ba:90:e4:c5:6f:8a:41:5a:0b:f0:d8:59:2f:e8:37:
f6:58:ed:59:14:1b:92:b0:ea:df:07:ca:eb:a9:49:ce:84:fb:
52:11:92:ed:3c:08:6a:c6:b1:4f:d3:2e:01:21:ac:76:2f:0d:
2e:72:1a:7f:b5:b3:2e:b2:fd:48:8a:e4:a7:b2:98:4b:5d:92:
68:4c:82:f1:05:24:f2:43:2f:b7:2f:e9:9c:2d:22:26:4c:b8:
26:70:7e:6c:b1:65:aa:f6:3f:0a:50:05:ea:95:0a:cf:97:8b:
b7:a5:e8:7b:82:bf:89:51:94:e7:a2:ac:6c:a3:0e:3d:1c:05:
1d:24:a6:1a:50:6d:05:3a:49:31:7a:53:35:b6:92:27:e4:45:
58:dc:12:e4:6d:d8:a2:86:3d:88:57:02:78:e6:82:e9:6c:41:
26:1b:e1:c1:7e:9e:7d:e9:66:29:ad:2d:36:d1:72:49:78:4c:
fd:50:86:20:a5:85:e7:0c:5c:2e:fa:5a:30:c2:d6:b6:ac:9d:
65:f0:69:bf:3d:b5:4c:5d:32:17:fd:e9:c7:8e:b3:85:e9:9d:
8e:d4:7c:4b:85:b0:56:69:ad:9a:37:90:44:6c:d0:7a:37:b5:
59:82:77:63:c9:47:bc:fc:c8:31:5b:87:bb:b8:6c:b9:72:ef:
b5:81:43:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:10:10 2026 by rpki-client