
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
File: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft (raw, json)
Hash identifier: b3YvC5GAsXJLWpKhzJqCOSUHa5qd3l9bA3tDtZ07iqI=
Subject key identifier: 23:70:0E:94:F1:95:85:B8:17:DB:04:B2:A8:FE:3E:36:48:F4:7D:57
Authority key identifier: E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF
Certificate issuer: /CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
Certificate serial: 1A6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
Manifest number: 19F2
Signing time: Thu 16 Apr 2026 16:18:28 +0000
Manifest this update: Thu 16 Apr 2026 16:18:27 +0000
Manifest next update: Thu 23 Apr 2026 16:18:27 +0000
Files and hashes: 1: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl (hash: AQmek3/NU9xPKOaJxz1DoSMNGzi8uwLBk/0L2+GOfXQ=)
2: 97F31854777011E7BF7EED10C4F9AE02.roa (hash: YkCRNqQCS8jVIHV+a7IJFYqulDisT+tl/2C+71L8pZ0=)
3: 9787989A777011E7BF7EED10C4F9AE02.roa (hash: cMSDuBT3kjpyehv0+lJ2MFU5CMopK6TVvtYRY4GXdzU=)
4: 98E572FC777011E7BF7EED10C4F9AE02.roa (hash: oitbivbdUYSMdXh7VLPNdxq472u6AbzxgvTVwLHL+so=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl
rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6763 (0x1a6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187313, serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
Validity
Not Before: Apr 16 16:18:27 2026 GMT
Not After : Apr 23 16:18:27 2026 GMT
Subject: CN=69e10bd4-1c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:14:9a:e4:d5:32:6e:62:fe:c0:43:65:54:
4d:72:ef:b2:76:4c:d3:5a:3b:1d:88:a3:5f:56:c9:
89:6f:58:9a:15:75:22:60:c1:5a:c8:4e:7f:4e:dc:
62:4c:bd:33:4e:ee:ad:55:57:e2:35:86:20:dc:24:
fb:db:ab:83:ec:e9:02:00:61:a0:65:7f:f9:33:ed:
80:08:c9:4f:d8:25:7c:53:23:11:15:cd:18:7b:51:
88:88:6e:f7:41:80:d3:22:59:41:1f:d5:e9:0f:7b:
d9:40:2e:9b:71:4f:13:a7:c0:46:5c:fb:66:cb:70:
82:6e:ff:93:0b:4b:bf:ac:6a:c7:87:bd:c1:a2:d6:
61:e9:b0:bf:5f:59:50:b4:a2:a0:20:7f:57:93:a7:
35:04:b4:71:90:02:1b:3c:61:20:7c:06:5f:62:4b:
ef:3b:e3:74:90:7f:c8:42:a6:32:77:c6:4a:4d:33:
f2:0e:a7:1e:10:ef:0e:2c:1c:ab:02:fb:39:63:99:
af:e9:8f:90:60:cc:03:98:53:1d:ad:57:04:71:f1:
03:2f:4f:6d:f4:49:75:7f:95:ad:4c:88:16:4c:25:
a4:52:48:c1:03:45:35:76:6a:e4:33:84:f4:c4:9f:
21:cc:c5:4d:e2:fe:ca:b7:53:bc:02:3a:7a:3f:83:
ca:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:70:0E:94:F1:95:85:B8:17:DB:04:B2:A8:FE:3E:36:48:F4:7D:57
X509v3 Authority Key Identifier:
keyid:E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:78:2d:f9:ce:0f:7c:6b:ff:56:1a:2c:13:64:24:7c:8e:5b:
18:ce:b8:a6:cf:ab:93:db:c0:05:f7:3a:e6:64:49:ad:fa:71:
b3:c9:fe:17:ba:93:6c:f6:8f:55:c4:20:a5:66:5d:0f:0d:80:
3c:8d:73:0b:8c:d4:0e:c9:d3:55:42:c4:72:49:da:93:ac:77:
4d:53:c1:b4:06:79:49:21:3d:d2:71:82:6f:33:ff:e4:f8:ca:
92:96:09:9f:1c:28:6e:57:52:2a:69:e8:0d:ed:3e:ba:e3:1f:
91:da:3d:47:32:e1:70:3e:2e:91:05:1c:a6:f4:f8:5a:de:c1:
a1:ca:32:c7:68:41:62:a5:96:e5:2f:f8:c3:e5:7e:a4:38:88:
ee:39:cf:a8:7f:a2:91:c7:25:9b:26:b3:d3:1c:38:9b:34:e8:
3e:b0:81:93:0c:9a:f3:dc:e3:eb:e2:29:52:af:00:c7:5d:f1:
9b:b2:6f:9c:51:53:25:42:2e:f6:07:64:32:98:7a:e3:50:b1:
9b:95:28:9e:a7:34:d0:b2:1f:45:86:a3:ec:0b:d7:ef:fa:0f:
1f:49:11:2d:e6:f1:38:8b:59:03:51:c0:d8:9b:a6:b1:21:f3:
c7:24:0f:a7:ef:ca:7d:57:25:32:e4:92:29:7f:2d:2f:c2:fa:
c4:c7:15:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODczMTMxMTAvBgNVBAUTKEU1NjcyQkJGMThDNENGRUJEM0Y0NzJEMTNCNDg3NzEz
NzJEMzRFREYwHhcNMjYwNDE2MTYxODI3WhcNMjYwNDIzMTYxODI3WjAYMRYwFAYD
VQQDEw02OWUxMGJkNC0xYzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyi8UmuTVMm5i/sBDZVRNcu+ydkzTWjsdiKNfVsmJb1iaFXUiYMFayE5/Ttxi
TL0zTu6tVVfiNYYg3CT726uD7OkCAGGgZX/5M+2ACMlP2CV8UyMRFc0Ye1GIiG73
QYDTIllBH9XpD3vZQC6bcU8Tp8BGXPtmy3CCbv+TC0u/rGrHh73BotZh6bC/X1lQ
tKKgIH9Xk6c1BLRxkAIbPGEgfAZfYkvvO+N0kH/IQqYyd8ZKTTPyDqceEO8OLByr
Avs5Y5mv6Y+QYMwDmFMdrVcEcfEDL09t9El1f5WtTIgWTCWkUkjBA0U1dmrkM4T0
xJ8hzMVN4v7Kt1O8Ajp6P4PKuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCNwDpTx
lYW4F9sEsqj+PjZI9H1XMB8GA1UdIwQYMBaAFOVnK78YxM/r0/Ry0TtIdxNy007f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzMxMy8zQzM0RUMwQTc3
NkYxMUU3ODJBRDZEMEVDNEY5QUUwMi81V2NydnhqRXotdlQ5SExSTzBoM0UzTFRU
dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVXY3J2eGpFei12VDlITFJPMGgzRTNMVFR0OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzMxMy8zQzM0RUMwQTc3NkYxMUU3ODJBRDZEMEVDNEY5QUUwMi81V2NydnhqRXot
dlQ5SExSTzBoM0UzTFRUdDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe3gt+c4PfGv/VhosE2QkfI5bGM64ps+rk9vABfc65mRJrfpxs8n+F7qTbPaP
VcQgpWZdDw2API1zC4zUDsnTVULEcknak6x3TVPBtAZ5SSE90nGCbzP/5PjKkpYJ
nxwobldSKmnoDe0+uuMfkdo9RzLhcD4ukQUcpvT4Wt7Bocoyx2hBYqWW5S/4w+V+
pDiI7jnPqH+ikcclmyaz0xw4mzToPrCBkwya89zj6+IpUq8Ax13xm7JvnFFTJUIu
9gdkMph641Cxm5Uonqc00LIfRYaj7AvX7/oPH0kRLebxOItZA1HA2JumsSHzxyQP
p+/KfVclMuSSKX8tL8L6xMcVIw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:42:22 2026 by rpki-client