
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft
File: t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft (raw, json)
Hash identifier: SOHNXPsap8UkYGpy6vMLfaB6MFShUxMnDQx74Xi4A6M=
Subject key identifier: 2E:88:86:B4:AF:5E:D1:FE:1A:0D:B6:FE:CF:1C:06:1C:81:F9:10:89
Authority key identifier: B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E
Certificate issuer: /CN=A917F8F2/serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E
Certificate serial: 08E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft
Manifest number: 08CF
Signing time: Thu 16 Apr 2026 20:19:22 +0000
Manifest this update: Thu 16 Apr 2026 20:19:22 +0000
Manifest next update: Thu 23 Apr 2026 20:19:22 +0000
Files and hashes: 1: t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl (hash: JpomNKw6oW5GOUTxLnxkQhKpFNrzkVKEhPlpI5UEA4Q=)
2: B78B5CB6D65F11EA8B30486EC4F9AE02.roa (hash: OYXjXOF1OK74nQrn1QIRacdZBRoGnG2hFU6B9gjBscs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl
rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2273 (0x8e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F8F2, serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E
Validity
Not Before: Apr 16 20:19:22 2026 GMT
Not After : Apr 23 20:19:22 2026 GMT
Subject: CN=69e1444a-daf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:99:17:71:e8:28:2f:a4:d1:ef:1a:f4:aa:f7:
f5:d0:11:56:65:53:5b:45:1f:91:e7:fd:98:bb:da:
33:6f:ae:34:5e:24:b2:3a:2c:1b:01:05:c6:a8:d3:
07:5f:7b:13:db:fc:ef:c0:4e:68:b4:4b:28:91:75:
22:96:42:a7:01:51:28:a3:94:66:57:a7:a3:c6:7c:
b8:9e:02:4d:53:2e:ee:b2:e9:c3:94:b7:4c:2c:45:
e3:82:c3:3b:67:52:b1:da:0f:95:cd:37:e9:97:32:
c2:30:de:c7:83:fa:87:7b:0c:96:a3:71:df:c1:0f:
c3:87:12:65:f2:5a:c7:ab:32:a3:14:86:3b:0c:f1:
ab:0b:7e:5e:c4:91:e5:82:11:34:24:54:b8:0a:7c:
7a:db:be:4c:fc:af:b1:13:08:63:99:54:04:6f:0d:
9b:68:d2:f3:60:c6:3b:d0:ef:f1:60:31:6a:9b:95:
de:d6:7d:72:78:59:bf:74:25:0b:9b:ca:39:ab:a4:
17:9f:3a:b7:87:67:57:17:f6:e1:08:bf:68:80:5b:
e1:61:c0:98:33:00:02:a2:ee:a1:fb:94:97:6c:a7:
dd:7a:1a:f7:d7:6d:2f:c7:7f:2b:c2:50:15:a1:a4:
50:d7:80:78:72:ce:12:80:0d:26:bd:1c:65:b1:54:
2d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:88:86:B4:AF:5E:D1:FE:1A:0D:B6:FE:CF:1C:06:1C:81:F9:10:89
X509v3 Authority Key Identifier:
keyid:B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:81:85:b6:57:09:44:db:98:c5:41:6a:de:b3:bd:25:fb:ff:
b1:fe:ef:42:f6:af:1f:fa:d5:6c:32:c7:97:aa:97:67:74:5d:
9b:b7:33:2f:a7:f4:cb:1d:e7:b7:b9:b4:fb:05:2b:4b:14:88:
f4:1a:19:61:62:9d:00:fc:41:c4:ee:59:ef:aa:ff:08:e9:6c:
f7:3d:1f:44:83:e7:9e:d6:82:c4:90:3a:2a:57:fd:58:33:99:
f7:a5:74:6d:cc:03:9b:09:70:14:64:60:03:ec:a2:94:d7:87:
ce:ec:aa:9b:c8:ce:24:93:3f:17:46:7c:ce:87:b6:84:2a:5c:
6a:8b:39:67:53:01:53:e9:6c:6a:ec:39:80:ec:14:73:0f:ce:
b3:f8:fe:58:db:bb:3f:33:ab:fe:47:f4:12:76:55:41:6e:88:
ca:9b:b2:ed:c4:63:06:80:66:bd:65:1f:01:a2:a6:74:7b:00:
b8:0a:59:4b:39:b4:3d:c0:c3:2c:4a:cc:22:7c:b3:13:d5:e0:
e9:00:6d:97:d7:2f:9e:6c:35:da:8c:09:7a:3f:c1:03:19:2c:
e1:48:ea:44:9f:be:a0:a1:bc:45:39:d0:ca:9d:db:64:ed:02:
1e:0d:63:a1:d4:d4:ee:3c:b1:1f:57:fd:75:f6:df:6c:31:eb:
6b:12:85:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0Y4RjIxMTAvBgNVBAUTKEI3OTFCRDFDOUUyMDgxQUE4NEY4MDc4MDY2QzBDN0Y2
MEE2Mzc5MEUwHhcNMjYwNDE2MjAxOTIyWhcNMjYwNDIzMjAxOTIyWjAYMRYwFAYD
VQQDEw02OWUxNDQ0YS1kYWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy5kXcegoL6TR7xr0qvf10BFWZVNbRR+R5/2Yu9ozb640XiSyOiwbAQXGqNMH
X3sT2/zvwE5otEsokXUilkKnAVEoo5RmV6ejxny4ngJNUy7usunDlLdMLEXjgsM7
Z1Kx2g+VzTfplzLCMN7Hg/qHewyWo3HfwQ/DhxJl8lrHqzKjFIY7DPGrC35exJHl
ghE0JFS4Cnx6275M/K+xEwhjmVQEbw2baNLzYMY70O/xYDFqm5Xe1n1yeFm/dCUL
m8o5q6QXnzq3h2dXF/bhCL9ogFvhYcCYMwACou6h+5SXbKfdehr3120vx38rwlAV
oaRQ14B4cs4SgA0mvRxlsVQtXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC6IhrSv
XtH+Gg22/s8cBhyB+RCJMB8GA1UdIwQYMBaAFLeRvRyeIIGqhPgHgGbAx/YKY3kO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjhGMi8wMjJENTcxQ0Q2
NUUxMUVBQjYwQ0EzNkJDNEY5QUUwMi90NUc5SEo0Z2dhcUUtQWVBWnNESDlncGpl
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q1RzlISjRnZ2FxRS1BZUFac0RIOWdwamVRNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RjhGMi8wMjJENTcxQ0Q2NUUxMUVBQjYwQ0EzNkJDNEY5QUUwMi90NUc5SEo0Z2dh
cUUtQWVBWnNESDlncGplUTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGYGFtlcJRNuYxUFq3rO9Jfv/sf7vQvavH/rVbDLHl6qXZ3Rdm7czL6f0yx3n
t7m0+wUrSxSI9BoZYWKdAPxBxO5Z76r/COls9z0fRIPnntaCxJA6Klf9WDOZ96V0
bcwDmwlwFGRgA+yilNeHzuyqm8jOJJM/F0Z8zoe2hCpcaos5Z1MBU+lsauw5gOwU
cw/Os/j+WNu7PzOr/kf0EnZVQW6Iypuy7cRjBoBmvWUfAaKmdHsAuApZSzm0PcDD
LErMInyzE9Xg6QBtl9cvnmw12owJej/BAxks4UjqRJ++oKG8RTnQyp3bZO0CHg1j
odTU7jyxH1f9dfbfbDHraxKFnQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:38:25 2026 by rpki-client