
$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
File: s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft (raw, json)
Hash identifier: zVuZuxZ7YFZUiKVImcitxHUzMw3WZdLzJvAwpGqoXSc=
Subject key identifier: 55:B0:EF:E1:97:6E:65:B6:BC:18:9F:5F:D2:DE:7C:59:7A:AF:EE:63
Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
Certificate issuer: /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Certificate serial: 01AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
Manifest number: 019D
Signing time: Sun 01 Mar 2026 05:20:19 +0000
Manifest this update: Sun 01 Mar 2026 05:20:19 +0000
Manifest next update: Sun 08 Mar 2026 05:20:19 +0000
Files and hashes: 1: s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl (hash: RwSFBaoVy0fBnVajT43G0D0DEb6aO6HhUrKIohGje8M=)
2: 762CACD0B04311EF95390327C4F9AE02.roa (hash: G46+/pM9DZmQVP/Iyn+FhwxhT5pdcn+RD8NrbEh8XW8=)
3: A97CBD42A06611EFA888B57DC4F9AE02.roa (hash: SuKoJjJKGc8dWIxE3hp+Qez2eq1wOwtqgkFFQ1qon/s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl
rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917530D, serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Validity
Not Before: Mar 1 05:20:19 2026 GMT
Not After : Mar 8 05:20:19 2026 GMT
Subject: CN=69a3cc93-0064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:35:07:f6:d8:6d:ec:a0:b9:c3:83:81:b1:0a:
f8:12:22:de:10:5e:85:07:81:80:50:95:f8:0c:8c:
cb:20:62:d4:6a:75:28:52:c7:d6:9f:80:cd:bd:26:
2c:d2:5f:c9:5f:98:ac:9f:c4:3e:7b:23:dd:03:61:
1c:b5:7c:a1:79:1f:e4:62:c9:65:4e:9d:42:68:9f:
ec:b0:e2:4f:d0:db:5d:40:00:16:e8:4e:7c:75:b2:
40:58:a8:f8:86:53:2c:93:72:63:aa:74:bc:82:fd:
99:89:7e:a3:e3:45:fc:30:1d:92:75:61:0e:08:4c:
8c:2e:de:c9:07:f2:ac:a4:09:1a:2e:72:b8:b6:04:
e0:27:86:d3:2c:2a:17:8e:37:3b:75:26:3e:c3:d7:
a0:9b:0f:59:25:fc:05:d5:b7:19:e4:80:b5:25:6b:
f3:74:9f:ab:62:52:2c:5a:4b:58:95:5c:2a:f9:8c:
86:a5:ec:21:e8:5a:71:7e:b7:05:ce:c3:65:a7:90:
b8:af:da:70:16:31:cb:63:d3:20:3c:c2:97:14:af:
a2:82:84:8c:01:65:45:97:8c:bc:e4:8a:2e:66:4a:
5d:14:ab:51:e5:22:42:cb:db:2a:80:cb:06:5c:90:
24:09:16:b9:5b:0e:d9:c4:1b:17:27:cc:ba:84:16:
0b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B0:EF:E1:97:6E:65:B6:BC:18:9F:5F:D2:DE:7C:59:7A:AF:EE:63
X509v3 Authority Key Identifier:
keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:38:2e:52:61:3c:75:54:98:05:94:03:9d:d7:b5:9a:2a:74:
ff:2b:06:86:a5:d9:02:42:09:52:d6:62:ea:a4:99:c3:7d:a0:
3a:34:db:2d:79:e2:85:ca:81:4f:a1:70:15:60:d0:39:b1:d1:
20:aa:34:34:11:16:03:9d:83:71:f0:95:87:1c:ff:48:9e:1c:
be:b4:d4:6f:50:9d:f1:17:68:58:3e:e5:4e:a8:a2:59:4c:5c:
90:aa:e4:98:f7:9a:f1:60:d5:e1:8c:e8:39:92:a8:69:32:16:
cc:d7:6f:af:bb:4e:9c:ca:ca:a2:9b:92:10:fc:24:ec:19:85:
5e:b1:2a:4a:ce:29:e1:21:f2:20:b2:8f:57:1b:55:c2:54:50:
58:8e:ae:86:83:c0:05:a4:2b:7c:1b:66:36:87:86:fd:36:24:
49:f8:99:31:34:26:56:e2:83:9c:98:7e:1a:bc:4a:5c:53:4b:
8f:03:1a:17:d2:a0:aa:04:7d:74:39:8d:f2:b1:57:31:33:17:
87:d8:e9:99:0a:e9:41:19:9f:f3:d5:58:9e:c4:07:6c:27:97:
2f:dc:42:f6:83:00:ca:33:60:a0:26:c0:82:81:67:b8:2b:7d:
2a:5e:cd:51:e8:d7:62:8f:a8:bd:92:ff:2b:b9:ac:0f:4f:66:
1e:15:32:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:44:59 2026 by rpki-client