
$ rpki-client -vvf rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
File: 5x94KlPaFtsf0wxsDSYVQnUipt4.mft (raw, json)
Hash identifier: 3+GsQsfQMZzyDm1EixneQtcYE6elaSy93prFeJSrmFo=
Subject key identifier: 17:99:B6:CD:B4:51:3A:F0:66:33:B1:96:FF:91:AA:B1:67:04:B5:BC
Authority key identifier: E7:1F:78:2A:53:DA:16:DB:1F:D3:0C:6C:0D:26:15:42:75:22:A6:DE
Certificate issuer: /CN=A918ADBA/serialNumber=E71F782A53DA16DB1FD30C6C0D2615427522A6DE
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
Manifest number: 36
Signing time: Sun 01 Mar 2026 10:02:19 +0000
Manifest this update: Sun 01 Mar 2026 10:02:19 +0000
Manifest next update: Sun 08 Mar 2026 10:02:19 +0000
Files and hashes: 1: 5x94KlPaFtsf0wxsDSYVQnUipt4.crl (hash: g7jWD2/L7tOVY5JaVk0SeLxekYthUB+mv6aO7jsP8bA=)
2: 95C751AAC99F11F098604B44C4F9AE02.roa (hash: UHvpsaid7Pmo6YPIbYpolV2HsVFbpaGyjeGlBmkMR7I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.crl
rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ADBA, serialNumber=E71F782A53DA16DB1FD30C6C0D2615427522A6DE
Validity
Not Before: Mar 1 10:02:19 2026 GMT
Not After : Mar 8 10:02:19 2026 GMT
Subject: CN=69a40eab-7225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ac:a2:78:3b:71:81:b2:3c:e5:02:91:2b:7f:
da:3e:d6:5e:b9:87:7f:05:a0:c0:17:61:db:36:8f:
90:41:e2:48:63:e5:d1:2a:a7:83:75:43:a0:c5:cb:
e9:2e:c6:be:e8:52:94:b2:ac:2f:86:82:98:2b:df:
94:87:78:96:1f:f0:48:b3:d5:00:19:b4:34:ea:ec:
7f:59:71:f2:f4:ca:93:35:c6:00:d7:32:f5:e5:40:
73:90:dc:0a:cf:19:d6:b3:7b:4e:52:81:83:5b:9f:
0e:8d:81:69:f1:ee:36:a3:a6:23:17:63:9b:0b:c4:
f3:c6:3f:20:61:dd:18:d5:e8:15:ef:1d:72:56:bd:
fc:28:f2:82:ea:e7:b8:c5:b0:f2:61:7f:69:42:98:
3b:0b:b3:f8:1b:d8:1a:81:ac:89:92:38:ab:8a:49:
a2:01:e8:b7:79:18:e2:e4:64:01:87:32:c9:81:ee:
4d:98:59:9d:98:bf:0e:c6:66:92:83:ae:bc:cf:1f:
e4:b6:9c:39:a8:2d:2f:d4:4c:8e:7f:18:b7:12:3a:
20:7b:02:c1:82:06:74:95:67:29:7e:82:39:3d:5b:
13:70:d2:36:9d:ea:0f:58:3e:ec:8f:ab:d6:cb:9e:
aa:50:a4:93:e8:4d:30:90:53:99:e7:fe:b5:f6:d4:
7b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:99:B6:CD:B4:51:3A:F0:66:33:B1:96:FF:91:AA:B1:67:04:B5:BC
X509v3 Authority Key Identifier:
keyid:E7:1F:78:2A:53:DA:16:DB:1F:D3:0C:6C:0D:26:15:42:75:22:A6:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:df:fe:89:11:7f:5a:26:7f:98:97:ef:3b:79:ef:25:c6:56:
c3:6f:f3:e6:fc:c3:72:72:8f:03:0e:a0:c6:6c:5f:42:f7:84:
de:d5:79:34:23:ed:65:bb:fa:15:bf:01:c8:f1:49:69:41:ba:
b3:e0:97:9c:a8:88:f0:cf:89:08:d7:21:da:38:ed:70:da:45:
dd:00:e6:74:9f:65:b9:00:df:eb:7b:59:61:d3:4f:f8:15:12:
74:1b:5f:82:12:4e:c3:07:34:ed:07:c2:13:58:97:3a:69:f4:
ec:d8:47:67:66:6b:4f:e4:2c:f7:ed:fa:08:6c:60:a8:c2:c2:
a5:02:64:66:18:79:f1:7b:22:e3:ce:f9:ef:61:aa:c0:b9:30:
ea:77:0a:9d:bc:41:4e:8b:5b:a9:38:f0:43:43:3d:16:50:2f:
af:3d:0c:ff:d2:a2:2e:21:92:a3:e1:76:54:be:45:db:cd:91:
78:ff:83:b7:70:72:ab:c1:b5:c9:93:b8:ec:8d:ec:9a:8a:6c:
7b:f9:ea:c3:91:7b:a5:90:4f:1e:89:86:7c:dd:7f:be:2e:c7:
aa:c9:ea:c5:22:87:c2:0b:a6:a1:4a:64:36:dd:e8:47:2e:87:
05:9f:bf:16:e1:82:24:35:f1:80:25:30:f0:02:a2:a5:69:c3:
00:26:6f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:39:30 2026 by rpki-client