
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
File: C5I347CGtYw82c5v1JrCYffVJaM.mft (raw, json)
Hash identifier: ferBLbW+hzMBkEkdt/QO1NSUYPPP2Kt60VESWYUozbY=
Subject key identifier: 89:EF:63:A4:23:C9:EA:8C:C1:93:63:BB:AB:3E:0D:C4:06:70:4B:C4
Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
Certificate issuer: /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Certificate serial: F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
Manifest number: E7
Signing time: Fri 17 Apr 2026 06:15:26 +0000
Manifest this update: Fri 17 Apr 2026 06:15:25 +0000
Manifest next update: Fri 24 Apr 2026 06:15:25 +0000
Files and hashes: 1: C5I347CGtYw82c5v1JrCYffVJaM.crl (hash: AXeuiAKs3XgpCFIyy6ghB2rd57byD1WZUwH1qeip2+8=)
2: B4F27262FA2911EFA783CE2DC4F9AE02.roa (hash: uufA5ZmNxri3hkizmrTV+/5I7T9shm+y03oLPhZQF5k=)
3: 9C9C1046F7CD11EF9245601CC4F9AE02.roa (hash: DZs/ioNjiGTQdREG+zE+daNHAc/dwChZtpeTTorEq9w=)
4: 24E20F9E6B7011F0ACA1BB56C4F9AE02.roa (hash: RLjdUAVnjKgzwqmaXAIPV1P+6YSNLAkKqfL9Zn2hSIQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:15:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Validity
Not Before: Apr 17 06:15:25 2026 GMT
Not After : Apr 24 06:15:25 2026 GMT
Subject: CN=69e1cffd-134c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:45:8b:ad:ac:98:32:3f:28:de:9c:e4:46:f7:
cd:13:e3:f1:25:30:42:6e:a6:60:03:ef:98:63:c4:
72:06:58:d7:dc:b1:4e:66:93:dd:76:31:b4:b4:6f:
ee:6c:eb:f6:05:82:31:8e:11:90:5a:de:7b:26:6f:
2b:b8:d5:4f:09:fd:10:28:1a:bd:a6:e1:03:ad:08:
1e:05:93:f0:4e:50:24:bd:a0:26:de:d4:c2:b6:ea:
35:80:42:f5:ca:37:cb:3b:8a:dc:24:5d:43:69:43:
9f:33:85:da:96:4b:d4:70:49:7b:c2:7d:2d:2d:21:
6d:94:8a:9d:ce:91:bf:70:2c:4b:df:49:68:3a:e7:
ee:b0:42:9b:03:ab:f5:52:80:e6:94:58:ad:98:87:
29:ff:b8:17:58:b8:f8:0c:51:f0:a3:24:02:88:c2:
73:fa:1f:72:d5:30:38:61:c0:8c:b8:c3:42:3e:38:
fe:2a:2d:31:7d:af:03:73:07:77:5d:02:6b:63:02:
d8:ff:48:e8:c6:2b:62:de:a1:20:93:42:62:3c:7f:
8f:77:da:dd:dc:5e:de:d3:df:b5:ea:07:a2:80:13:
0a:d2:1c:41:a1:fd:fe:33:fd:43:aa:ce:ce:b6:9b:
b6:66:92:11:70:90:9e:81:43:5c:da:62:c4:5d:12:
59:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EF:63:A4:23:C9:EA:8C:C1:93:63:BB:AB:3E:0D:C4:06:70:4B:C4
X509v3 Authority Key Identifier:
keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:bd:b9:1b:de:04:71:a8:bc:5f:b7:9d:f8:4c:b0:15:9d:ee:
36:b1:34:9c:50:e1:4b:8c:1b:f0:c0:27:9f:7b:8b:98:cc:2c:
5e:53:dc:66:43:63:58:5e:96:0a:e3:df:fb:43:60:78:e0:09:
88:0a:f8:de:18:f0:d3:ab:93:11:b2:2a:60:33:b7:15:df:08:
e9:08:77:95:67:bd:84:6d:5f:45:22:80:79:22:32:a6:fe:de:
7e:f5:79:c9:98:4d:91:46:31:a4:7d:98:ba:bf:c3:6a:02:d0:
2d:7d:f1:c3:67:91:79:e5:27:2f:a2:70:7b:3e:da:f2:be:a6:
4a:89:8f:e6:0b:9c:22:ba:b4:95:d6:8c:ed:a0:1e:88:e8:66:
cc:e1:0c:eb:26:54:ca:af:26:bc:72:9e:14:1a:1a:16:d2:d6:
8e:35:ed:23:00:99:7e:71:d3:a9:5d:3d:f7:6b:05:eb:ae:17:
e1:98:4d:a7:80:57:09:8b:6e:e4:e8:c0:9d:f2:54:30:c4:95:
04:84:d8:e9:9d:8e:ec:28:fe:df:b5:46:eb:fa:c5:4e:35:d7:
71:fa:3f:53:50:ae:8f:f5:c1:6f:5c:2d:5b:e9:75:8b:30:b8:
36:a2:55:77:7b:8a:28:e0:e5:0a:47:25:f5:00:2a:e5:e5:16:
1c:31:b0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:52:43 2026 by rpki-client