
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
File: 5sRskdEtWFoSsFVpYh3uGtP4kI4.mft (raw, json)
Hash identifier: J6cItowNNprz52SB8ES47In4u5tM6D28W6p9e313K4o=
Subject key identifier: AD:FE:0F:E3:35:E1:49:D7:D5:E6:35:4D:09:36:1A:08:95:78:E7:AB
Authority key identifier: E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E
Certificate issuer: /CN=A917A362/serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E
Certificate serial: 01DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
Manifest number: 01D4
Signing time: Fri 17 Apr 2026 03:21:03 +0000
Manifest this update: Fri 17 Apr 2026 03:21:03 +0000
Manifest next update: Fri 24 Apr 2026 03:21:03 +0000
Files and hashes: 1: 5sRskdEtWFoSsFVpYh3uGtP4kI4.crl (hash: e4IrhzUZZnbjEhtQVeLa0YD/JUKaDNiggqc7phaQGcY=)
2: 1B299892726F11EEB1217365C4F9AE02.roa (hash: HLST1p2Y6kJdvf5EsBXPMDmNGIMfeuDnuHY6Q9pEH8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.crl
rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A362, serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E
Validity
Not Before: Apr 17 03:21:03 2026 GMT
Not After : Apr 24 03:21:03 2026 GMT
Subject: CN=69e1a71f-81e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:80:61:0c:6b:0d:5f:7e:38:e1:83:79:48:
7c:ea:df:7e:62:65:12:5f:b5:ad:5e:99:e8:82:e3:
5d:3a:6e:5f:d7:e1:8a:63:f9:69:c3:3a:b4:6d:5d:
9d:d2:4e:fc:43:40:6d:2c:66:61:68:5f:c0:58:98:
ab:0c:64:92:8a:dc:61:ad:70:07:50:9a:1b:a7:48:
5b:2c:fa:79:eb:23:36:ef:e8:c2:d5:c6:c3:e1:f2:
55:4f:cd:11:d5:3f:5c:5e:3a:ae:e1:6e:40:a2:4b:
2f:a7:07:04:f2:eb:9d:51:67:6e:85:9a:71:61:62:
0b:69:af:24:b6:02:ea:e4:b1:db:df:85:1f:84:99:
dd:12:cd:46:a2:44:01:86:ca:4a:ee:3e:7e:66:04:
71:97:3b:b4:a9:e4:e0:51:7e:97:0e:63:1b:16:5e:
0a:8a:83:a2:b7:31:59:61:e1:20:f0:ea:d1:57:db:
27:96:c2:e7:34:78:5a:54:36:57:f0:87:e7:31:c4:
3a:01:e3:fb:f8:59:c9:ca:4a:93:84:71:b2:2b:96:
1d:1a:35:94:a2:01:23:ab:80:33:70:8b:63:f1:a6:
6d:33:e6:5a:7b:64:bb:6f:42:ad:0d:af:6d:40:ef:
a9:b8:de:3a:fb:fc:15:68:fa:42:95:74:5c:9e:5f:
ba:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FE:0F:E3:35:E1:49:D7:D5:E6:35:4D:09:36:1A:08:95:78:E7:AB
X509v3 Authority Key Identifier:
keyid:E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:64:49:b9:93:76:b3:8b:f8:2a:55:19:8a:70:8f:79:96:71:
74:74:7e:16:6a:63:a8:5b:86:2a:fc:8f:38:8a:86:0a:69:2f:
5f:25:9e:f1:4c:aa:d9:7b:43:8f:4b:96:6d:42:a6:c1:a4:54:
03:e3:b0:4f:4e:07:71:0d:3a:9f:42:43:4e:32:b9:18:fb:81:
f9:5c:52:60:e7:af:cd:3f:d1:61:5c:c5:2a:25:75:bb:e3:8d:
39:7c:a7:e9:1a:ba:ff:e8:17:8c:1e:69:39:bb:bd:3d:12:8d:
b7:99:23:4e:b7:93:3d:6e:97:05:46:98:98:4d:ab:f6:21:10:
1e:2b:31:ae:51:b3:60:a4:7a:92:33:c1:07:7f:c2:81:84:8a:
c5:61:63:27:e6:58:77:4a:f4:0f:b3:a0:29:eb:7a:1d:eb:c0:
b4:4e:78:00:6d:57:fd:77:96:c7:1d:01:59:84:78:8f:8a:83:
f5:37:17:13:50:79:a2:0b:d0:1a:60:95:b5:91:8e:cc:b2:56:
88:f4:f7:cb:d3:0b:fe:b3:3a:ac:db:3e:9e:c8:d5:11:6a:87:
40:20:0d:59:af:0c:07:95:0c:6c:42:8f:91:64:ce:6c:fd:3a:
be:73:5d:10:b6:41:f3:72:da:81:95:3e:bd:09:d8:58:48:fc:
86:f3:02:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0EzNjIxMTAvBgNVBAUTKEU2QzQ2QzkxRDEyRDU4NUExMkIwNTU2OTYyMURFRTFB
RDNGODkwOEUwHhcNMjYwNDE3MDMyMTAzWhcNMjYwNDI0MDMyMTAzWjAYMRYwFAYD
VQQDEw02OWUxYTcxZi04MWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu5CAYQxrDV9+OOGDeUh86t9+YmUSX7WtXpnoguNdOm5f1+GKY/lpwzq0bV2d
0k78Q0BtLGZhaF/AWJirDGSSitxhrXAHUJobp0hbLPp56yM27+jC1cbD4fJVT80R
1T9cXjqu4W5AoksvpwcE8uudUWduhZpxYWILaa8ktgLq5LHb34UfhJndEs1GokQB
hspK7j5+ZgRxlzu0qeTgUX6XDmMbFl4KioOitzFZYeEg8OrRV9snlsLnNHhaVDZX
8IfnMcQ6AeP7+FnJykqThHGyK5YdGjWUogEjq4AzcItj8aZtM+Zae2S7b0KtDa9t
QO+puN46+/wVaPpClXRcnl+6dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK3+D+M1
4UnX1eY1TQk2GgiVeOerMB8GA1UdIwQYMBaAFObEbJHRLVhaErBVaWId7hrT+JCO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTM2Mi83Q0JBNEM0Qzcy
NkUxMUVFOUZFMzUwNjFDNEY5QUUwMi81c1Jza2RFdFdGb1NzRlZwWWgzdUd0UDRr
STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVzUnNrZEV0V0ZvU3NGVnBZaDN1R3RQNGtJNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTM2Mi83Q0JBNEM0QzcyNkUxMUVFOUZFMzUwNjFDNEY5QUUwMi81c1Jza2RFdFdG
b1NzRlZwWWgzdUd0UDRrSTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvGRJuZN2s4v4KlUZinCPeZZxdHR+FmpjqFuGKvyPOIqGCmkvXyWe8Uyq2XtD
j0uWbUKmwaRUA+OwT04HcQ06n0JDTjK5GPuB+VxSYOevzT/RYVzFKiV1u+ONOXyn
6Rq6/+gXjB5pObu9PRKNt5kjTreTPW6XBUaYmE2r9iEQHisxrlGzYKR6kjPBB3/C
gYSKxWFjJ+ZYd0r0D7OgKet6HevAtE54AG1X/XeWxx0BWYR4j4qD9TcXE1B5ogvQ
GmCVtZGOzLJWiPT3y9ML/rM6rNs+nsjVEWqHQCANWa8MB5UMbEKPkWTObP06vnNd
ELZB83LagZU+vQnYWEj8hvMC9w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:37 2026 by rpki-client