
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
File: C5sr_BxrLAlndq91fTrxRUfkPnI.mft (raw, json)
Hash identifier: qQsoe9y92Gyq9hnDTwixV6DNUIbK4E0vqk68CrJQ6cE=
Subject key identifier: C3:57:CE:89:64:F6:E5:B3:00:E8:87:83:40:86:A2:FD:05:02:DB:0E
Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
Certificate issuer: /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Certificate serial: 1279
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
Manifest number: 1262
Signing time: Thu 16 Apr 2026 17:02:24 +0000
Manifest this update: Thu 16 Apr 2026 17:02:23 +0000
Manifest next update: Thu 23 Apr 2026 17:02:23 +0000
Files and hashes: 1: C5sr_BxrLAlndq91fTrxRUfkPnI.crl (hash: MCGtUDLCz9RNR2kBEMFiEhdbWKeNEo53QUG5femSLOs=)
2: 60FCDED2F48F11E89651151FC4F9AE02.roa (hash: oM2ZfoKfiRMESikDKbO4c1ZDLXIvdz0FiP6xcgKr7Rg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl
rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4729 (0x1279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F646, serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Validity
Not Before: Apr 16 17:02:23 2026 GMT
Not After : Apr 23 17:02:23 2026 GMT
Subject: CN=69e1161f-c365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:5f:63:0d:35:1b:56:e0:cf:18:63:fc:ea:
86:d0:04:ee:70:74:92:6b:92:ef:0c:7c:1f:8e:72:
17:3e:cf:e9:4c:f5:28:4a:3e:b8:31:87:2b:5f:1e:
1f:61:3f:c0:4f:44:71:bf:b1:7d:66:39:a4:9e:97:
d9:c8:04:c9:1f:a3:27:84:f4:65:7d:9b:4f:0f:02:
9a:f2:ae:ab:4b:1c:5b:42:a6:4b:2c:08:39:62:f3:
ac:3a:ac:4b:4a:9a:3a:f6:31:09:0b:54:9c:6a:1f:
a8:ef:06:45:af:81:19:94:43:94:cf:45:b6:7a:4f:
09:c7:9b:e3:71:68:87:67:0c:eb:42:e8:71:9a:d9:
f1:b7:9a:d2:76:69:c7:4a:b4:4c:4b:68:59:4d:4b:
ac:90:db:26:6d:1c:09:c4:14:5e:58:f6:80:79:48:
ea:cb:e5:6a:ab:c7:a9:bb:b9:01:8d:5b:8e:19:50:
08:3b:c2:61:fb:b8:93:7f:44:e5:03:c4:4b:37:1e:
f4:ae:eb:87:ca:7b:26:79:dc:7a:e4:66:81:4d:7b:
e7:ca:27:f7:65:d0:34:6d:ea:9f:82:d9:3b:2a:e2:
f4:c1:db:ba:be:ba:85:20:b4:b3:1a:83:3b:4f:3f:
2b:ea:f9:af:f6:a6:0e:03:2e:c1:c7:51:d3:5b:55:
26:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:57:CE:89:64:F6:E5:B3:00:E8:87:83:40:86:A2:FD:05:02:DB:0E
X509v3 Authority Key Identifier:
keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:0b:57:0c:c6:30:37:14:22:d8:f3:a8:ae:e8:ba:d5:f3:48:
7e:48:27:89:6c:ca:c2:ae:5d:03:97:9b:d8:69:fd:e9:27:f8:
02:3e:d9:7a:ef:ef:a7:fa:c3:8d:0b:b3:2c:c1:cc:72:7b:8f:
f3:48:d8:dd:df:e8:f2:d0:6d:f6:5f:0e:d8:c6:0f:4e:54:27:
dd:e5:68:ca:c1:2d:3f:a6:3c:00:e1:f3:c3:cd:fc:a6:f7:94:
fb:2e:0d:35:69:b3:9a:7c:3e:c3:2d:a5:e4:c7:ac:7b:cf:80:
4e:67:8f:f1:3c:16:5a:45:2f:54:46:ec:c1:cf:02:1f:48:6e:
e7:09:1c:8f:69:33:4c:85:86:0a:f6:e3:a1:ec:99:5c:0e:51:
3f:7f:b2:5d:f5:ef:79:2e:7d:36:f8:22:61:67:9f:a3:56:2f:
f7:f0:c8:3f:e7:c9:ee:81:88:66:23:78:55:6b:95:e7:44:71:
e2:d3:ac:49:70:bc:4e:db:41:9d:67:14:0b:b8:0e:11:a3:3a:
c0:ad:38:db:dd:7a:b6:ee:71:5b:11:76:d1:42:71:0f:6c:cf:
87:d5:a1:2e:9b:28:f1:c5:96:89:1c:ee:d5:40:51:55:57:76:
c6:a7:74:09:e7:d2:8d:39:e8:e7:7d:98:4b:9f:3f:47:9b:e7:
41:55:a1:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEY2NDYxMTAvBgNVBAUTKDBCOUIyQkZDMUM2QjJDMDk2Nzc2QUY3NTdEM0FGMTQ1
NDdFNDNFNzIwHhcNMjYwNDE2MTcwMjIzWhcNMjYwNDIzMTcwMjIzWjAYMRYwFAYD
VQQDEw02OWUxMTYxZi1jMzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv+RfYw01G1bgzxhj/OqG0ATucHSSa5LvDHwfjnIXPs/pTPUoSj64MYcrXx4f
YT/AT0Rxv7F9ZjmknpfZyATJH6MnhPRlfZtPDwKa8q6rSxxbQqZLLAg5YvOsOqxL
Spo69jEJC1Scah+o7wZFr4EZlEOUz0W2ek8Jx5vjcWiHZwzrQuhxmtnxt5rSdmnH
SrRMS2hZTUuskNsmbRwJxBReWPaAeUjqy+Vqq8epu7kBjVuOGVAIO8Jh+7iTf0Tl
A8RLNx70ruuHynsmedx65GaBTXvnyif3ZdA0beqfgtk7KuL0wdu6vrqFILSzGoM7
Tz8r6vmv9qYOAy7Bx1HTW1UmfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMNXzolk
9uWzAOiHg0CGov0FAtsOMB8GA1UdIwQYMBaAFAubK/wcaywJZ3avdX068UVH5D5y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjY0Ni9DRUNFOEM5QUY0
OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxBbG5kcTkxZlRyeFJVZmtQ
bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0M1c3JfQnhyTEFsbmRxOTFmVHJ4UlVma1BuSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RjY0Ni9DRUNFOEM5QUY0OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxB
bG5kcTkxZlRyeFJVZmtQbkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANAtXDMYwNxQi2POorui61fNIfkgniWzKwq5dA5eb2Gn96Sf4Aj7Zeu/vp/rD
jQuzLMHMcnuP80jY3d/o8tBt9l8O2MYPTlQn3eVoysEtP6Y8AOHzw838pveU+y4N
NWmzmnw+wy2l5Mese8+ATmeP8TwWWkUvVEbswc8CH0hu5wkcj2kzTIWGCvbjoeyZ
XA5RP3+yXfXveS59NvgiYWefo1Yv9/DIP+fJ7oGIZiN4VWuV50Rx4tOsSXC8TttB
nWcUC7gOEaM6wK042916tu5xWxF20UJxD2zPh9WhLpso8cWWiRzu1UBRVVd2xqd0
CefSjTno532YS58/R5vnQVWhOQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:36 2026 by rpki-client