
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
File: l_m5BihHZTCOwmiFXVY9q5GGMFs.mft (raw, json)
Hash identifier: 6V9umbTHzzFfdtt/zDU83wYequJO9PFruVDjusjIBf8=
Subject key identifier: 82:53:25:32:22:D2:73:C4:03:4E:F5:5C:AF:53:ED:ED:40:A7:94:C2
Authority key identifier: 97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B
Certificate issuer: /CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B
Certificate serial: 0D20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
Manifest number: 0D17
Signing time: Thu 16 Apr 2026 18:00:58 +0000
Manifest this update: Thu 16 Apr 2026 18:00:57 +0000
Manifest next update: Thu 23 Apr 2026 18:00:57 +0000
Files and hashes: 1: l_m5BihHZTCOwmiFXVY9q5GGMFs.crl (hash: ayMGZYNMNaz1UePO/e0oe0WMe2z7Cx44B4P1fEBnyAE=)
2: 9C9660D4FC6E11E9BC6D4822C4F9AE02.roa (hash: 2ofxCMC41OCd7xHEWUK98z0O11e/ASg9LLd6dkWeoic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl
rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3360 (0xd20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4E6, serialNumber=97F9B906284765308EC268855D563DAB9186305B
Validity
Not Before: Apr 16 18:00:57 2026 GMT
Not After : Apr 23 18:00:57 2026 GMT
Subject: CN=69e123da-28a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:f9:ab:04:34:35:17:82:d9:df:8d:bf:8c:
15:62:a6:61:c4:1a:a4:54:78:c7:bf:16:7a:d4:6a:
32:d7:0f:97:f2:82:53:24:2d:f5:98:bf:63:46:c8:
c1:da:b7:d2:38:f4:07:72:aa:7e:86:93:6e:91:65:
64:4c:e9:8f:f2:c6:45:9b:b4:a6:81:20:1b:88:04:
39:f5:50:e5:e0:e0:a6:69:a7:d8:35:be:31:ff:37:
51:79:0e:24:84:93:27:b7:07:49:e4:8c:ab:5c:89:
bc:49:b9:97:fc:52:cf:9b:20:db:ea:44:89:56:01:
6d:2a:73:2d:1f:40:11:cd:1b:9c:b1:5d:cf:bc:2e:
8e:4c:6b:21:41:f5:58:c1:21:4f:43:75:69:c7:ff:
81:8a:a0:0b:dc:f1:23:ec:89:52:f4:b9:8d:31:70:
3b:09:0a:0d:5c:25:65:f8:b4:c5:f7:cf:e7:06:96:
a0:e0:a5:df:6b:96:47:83:75:c4:c1:9e:76:d1:cb:
7b:89:db:38:28:d2:54:3f:88:52:60:5e:34:3a:c0:
99:01:95:b7:10:70:d6:11:65:ce:0d:d7:bd:9e:ea:
99:4e:ee:51:ed:2d:d8:b4:d8:e1:44:ac:4a:8a:1a:
3b:7c:2d:3e:09:b2:97:3f:ee:f8:98:30:2f:d0:28:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:53:25:32:22:D2:73:C4:03:4E:F5:5C:AF:53:ED:ED:40:A7:94:C2
X509v3 Authority Key Identifier:
keyid:97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:25:d4:c5:fe:0f:4f:7d:07:03:3d:33:79:75:2b:0f:71:31:
e4:11:ce:d9:b4:17:47:9c:93:98:35:8c:06:37:83:7f:25:d5:
c1:a4:19:b8:8e:82:c7:f4:2f:1b:40:82:bf:95:27:2d:95:e1:
c5:5f:5a:08:1b:b2:a7:76:ef:5b:ab:94:5d:20:69:b8:c1:55:
19:5d:2d:d5:89:08:78:dc:2b:7a:fd:34:77:e7:86:79:32:22:
69:03:19:5a:cb:72:55:33:07:2a:64:a1:f9:d4:c6:72:44:45:
4e:df:3d:5f:65:82:06:31:fe:25:1c:6c:09:74:e9:e4:c9:89:
af:b8:33:b8:7a:ed:aa:28:37:e9:0a:26:1a:e4:3a:dc:90:04:
a0:5d:78:de:d7:00:5e:d6:ff:46:8f:0e:f2:e1:8d:ed:05:5c:
1d:09:30:f8:f8:35:fd:dc:c7:3c:16:66:ed:5f:ad:d8:80:b0:
3b:63:fa:a8:58:3d:3f:53:4a:db:35:33:a6:87:d2:24:6f:1e:
58:e5:9e:d7:aa:b0:eb:54:cd:00:49:9d:7b:67:9d:05:8e:34:
dd:2a:9a:d0:df:9b:e8:19:83:7a:39:58:fa:76:b5:ab:06:8d:
c4:cb:b5:54:e5:8b:be:12:f4:1d:09:5f:0c:6a:d9:0a:fc:5b:
da:66:c7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:10 2026 by rpki-client