
$ rpki-client -vvf rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft
File: 5IPa-2wrg71IK24pCn5AU1W1Ltk.mft (raw, json)
Hash identifier: u0vzxal1Xy3YxVRt1zABQ+SPDjUYtAsfGenVDWGNKRI=
Subject key identifier: B3:82:9B:9A:0F:37:20:7C:D9:EE:86:B9:F0:36:01:BF:AA:96:13:FB
Authority key identifier: E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9
Certificate issuer: /CN=A919136B/serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9
Certificate serial: 1105
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft
Manifest number: 10F6
Signing time: Thu 16 Apr 2026 17:13:29 +0000
Manifest this update: Thu 16 Apr 2026 17:13:29 +0000
Manifest next update: Thu 23 Apr 2026 17:13:29 +0000
Files and hashes: 1: 5IPa-2wrg71IK24pCn5AU1W1Ltk.crl (hash: P5+xj31djzEc7fHbJQz4G5inbT7hcAln72SPwcJ+aEU=)
2: 99B6039C215311EA86E1E020C4F9AE02.roa (hash: xBQzJokUINHvwXbjCEGs5dFY9Pxy3Whg47fTfEwk4/Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl
rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:13:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4357 (0x1105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919136B, serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9
Validity
Not Before: Apr 16 17:13:29 2026 GMT
Not After : Apr 23 17:13:29 2026 GMT
Subject: CN=69e118b9-59df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:21:e3:cc:52:61:89:41:60:67:3a:c2:17:
10:3a:ae:b5:d6:dc:53:9f:77:a0:52:6b:65:32:89:
97:8b:0c:4c:6d:c9:82:f8:21:da:00:f1:46:ff:fb:
b8:c6:b2:22:d0:53:55:1a:49:b9:25:0f:b6:bf:e7:
61:05:e4:e2:ac:77:22:81:3d:7d:72:45:98:5e:bc:
b9:45:22:3f:b9:f7:b7:35:34:3e:79:3c:aa:ef:d0:
b6:9c:61:e8:41:49:52:5d:93:4b:ff:21:67:a5:6b:
2b:7f:55:f3:c9:12:5b:2e:9e:af:e0:f0:a1:16:57:
31:a3:4a:09:03:48:83:6e:3a:e3:df:b3:5a:14:2f:
e5:0b:f9:7d:4c:c9:a9:4c:4f:44:9a:46:ac:da:d9:
37:69:8a:dd:f5:15:e3:b0:e6:ed:1a:b1:aa:bb:96:
d4:66:51:25:29:04:2e:ea:16:9d:45:7a:8c:b1:66:
eb:13:57:8c:ac:97:dd:9d:3c:56:81:4f:ae:54:46:
d8:94:12:38:33:b0:29:d5:8f:d1:cd:82:d1:43:da:
77:9b:76:bf:75:5b:7a:d5:5f:7b:81:ed:bf:89:bf:
96:f0:fb:96:27:16:97:ff:cb:56:ea:71:82:27:60:
ef:d0:c0:f5:83:9c:4f:7b:cc:51:2f:9d:8c:90:50:
23:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:82:9B:9A:0F:37:20:7C:D9:EE:86:B9:F0:36:01:BF:AA:96:13:FB
X509v3 Authority Key Identifier:
keyid:E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:62:a4:9c:6e:bc:20:52:8b:71:09:3d:69:c0:0b:46:1b:d9:
bd:56:6e:84:48:3a:83:71:2f:1c:0e:a6:07:c3:a9:f7:15:80:
e5:54:6f:da:d9:c4:2a:df:00:41:33:2f:75:54:ea:c4:03:b9:
0c:4f:fc:ca:d9:fe:1f:2f:f5:56:be:8b:01:32:78:84:fb:bb:
7a:72:cd:3e:b1:a9:2b:18:d6:bb:3a:c3:71:c2:cb:d2:99:fa:
48:45:a4:b5:bd:b6:b9:5f:40:8c:55:d9:ab:9f:eb:c0:20:93:
b1:82:6e:4c:fd:95:06:a4:b0:ce:02:68:24:2c:6d:fb:3d:bc:
3e:da:1a:ab:00:d9:36:dc:e9:22:5d:0c:c4:b1:ee:af:f4:29:
96:1a:0f:e7:11:fc:27:5b:2d:c9:5c:ab:6f:99:94:83:12:cb:
02:a7:47:7e:a4:a0:de:c0:95:e8:ed:d5:62:ad:0e:db:ef:62:
24:ae:b2:f2:aa:92:97:24:fb:0e:26:19:95:22:ea:62:9f:84:
86:58:06:06:d4:22:16:b1:4e:ed:ca:d0:dd:5a:5f:bc:a0:5c:
99:ab:15:f5:f3:e1:06:42:f2:51:51:26:63:e2:fd:ae:8f:74:
ed:3d:86:6f:a7:1a:b6:df:6f:be:13:ff:5b:b0:59:83:b1:39:
f9:c8:5c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:15:35 2026 by rpki-client