
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft
File: 5G4YncjpEKGrvi42TdCBd1zkhGA.mft (raw, json)
Hash identifier: fKYGqeBnFeDCnr93zzrwwRfMnwgcshNXqpfVgPAzHbg=
Subject key identifier: 16:03:6A:88:FD:2D:5C:A1:CB:BC:5C:BD:43:5A:05:DD:D3:96:98:84
Authority key identifier: E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60
Certificate issuer: /CN=A9135B44/serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460
Certificate serial: 02B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft
Manifest number: 02AA
Signing time: Sun 05 Apr 2026 01:13:54 +0000
Manifest this update: Sun 05 Apr 2026 01:13:53 +0000
Manifest next update: Sun 12 Apr 2026 01:13:53 +0000
Files and hashes: 1: 5G4YncjpEKGrvi42TdCBd1zkhGA.crl (hash: ettGV8fd6Zz3eV3c2iYXfEJvp4yS7M4e852zSUcWD3A=)
2: D4B06AAA3A6E11ED8266115DC4F9AE02.roa (hash: +rxJJCYqUTC1n9Vg6VPME8EdAjnNnPLt5eoyIH6NFFo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl
rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:13:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690 (0x2b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135B44, serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460
Validity
Not Before: Apr 5 01:13:53 2026 GMT
Not After : Apr 12 01:13:53 2026 GMT
Subject: CN=69d1b752-f01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8c:d1:a3:b5:b3:be:0a:58:47:85:14:35:a6:
f2:e9:5d:ef:a7:10:b4:a9:f3:29:6b:cd:bf:08:93:
b9:59:91:00:fa:82:07:97:4b:37:5a:8e:20:cf:12:
b3:6f:92:6e:60:06:a2:7f:0a:3e:94:d9:9d:52:25:
12:32:a1:40:77:fe:f0:06:1a:e3:b3:b1:57:8d:d9:
d6:7f:1e:7f:bc:bb:13:a3:93:62:8d:f0:c0:df:7e:
38:7c:68:04:3a:06:c1:ee:f5:31:fd:52:2e:b4:52:
0d:d5:85:4e:30:54:ae:14:f2:b6:b6:66:db:7f:57:
bf:04:65:8f:e5:75:4c:df:a6:be:c0:f8:0a:c8:07:
68:12:e9:55:0d:a8:76:84:0f:02:d2:19:ae:67:01:
f5:85:90:95:b1:c5:1a:76:8b:8b:78:91:f6:0c:b2:
b1:2c:09:ae:d5:c6:ec:75:03:0e:58:80:6e:12:3f:
9f:de:fe:39:93:ec:41:00:a3:c1:c7:42:7c:8e:49:
ce:1b:bb:a9:b8:c9:4f:42:ca:8e:58:0f:1b:a8:2d:
50:ae:52:a7:fb:a4:7e:a4:3c:30:4e:65:3f:e6:95:
09:d7:b5:83:40:6d:40:04:1f:10:f7:c4:0c:37:66:
d2:88:1c:ae:f0:4c:5c:d5:ab:fc:d3:74:3a:d2:b3:
a1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:03:6A:88:FD:2D:5C:A1:CB:BC:5C:BD:43:5A:05:DD:D3:96:98:84
X509v3 Authority Key Identifier:
keyid:E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:1c:ea:b7:fc:35:86:b1:ca:11:75:60:a3:f3:08:f8:0e:da:
78:77:40:0a:8e:1f:87:27:41:24:36:ca:82:cc:b2:02:67:49:
8e:a8:25:25:0a:39:40:d0:ae:1c:45:8d:ad:dd:c9:cf:18:93:
d1:fb:20:03:96:67:db:6c:03:ba:cf:06:0d:0d:e5:14:d1:d8:
a5:6c:87:dc:75:7e:85:8f:ee:bf:bd:2a:b1:a6:34:4d:d7:50:
0c:dc:49:8f:4b:ca:35:ec:08:61:dc:46:d7:68:db:7b:93:b5:
75:4c:4c:cb:58:6a:d4:0e:c7:92:c4:42:80:fa:0e:ee:58:3d:
77:e3:0b:f7:fa:87:80:8a:fa:1c:ef:b8:de:2c:87:e4:95:6b:
99:c5:46:3e:6b:a3:6e:01:57:7b:f2:9a:9f:2d:9e:03:86:98:
1c:7f:de:08:3a:64:d9:a1:78:24:cb:9d:78:57:dd:0e:e2:c4:
70:13:f6:ac:14:82:fe:8e:25:56:3c:f9:d8:d6:a4:4e:f3:88:
50:82:99:f3:db:f5:a4:1f:d6:2b:00:b6:e8:ba:e1:c2:79:f6:
bb:0b:48:41:d1:fb:33:35:cd:dd:cc:f2:9b:c2:24:6b:80:0b:
51:a4:fd:c4:47:1f:4a:24:75:b1:c4:53:4e:d3:ca:a0:29:6a:
35:37:ae:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:41:16 2026 by rpki-client