
$ rpki-client -vvf rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft
File: 5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft (raw, json)
Hash identifier: mdt5CtMbMpQmgwktrlUJ7SNVWchk267Ke0RMcDpWvwU=
Subject key identifier: 1F:A6:96:2E:B7:74:3C:E7:04:01:94:9D:8F:55:C8:FA:FA:8C:69:C1
Authority key identifier: E4:58:EA:30:40:09:87:3C:88:84:AF:89:AA:93:1D:48:BA:85:9C:D0
Certificate issuer: /CN=A91529FC/serialNumber=E458EA304009873C8884AF89AA931D48BA859CD0
Certificate serial: 074A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft
Manifest number: 0729
Signing time: Mon 06 Apr 2026 21:36:00 +0000
Manifest this update: Mon 06 Apr 2026 21:36:00 +0000
Manifest next update: Mon 13 Apr 2026 21:36:00 +0000
Files and hashes: 1: 5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl (hash: XWb4VIN3MPmrxoSKoExyLY/hEx+sJye1WhlozTbmvV4=)
2: 78ACE25C7FD811ECB5AA233AC4F9AE02.roa (hash: ad/IMuIcQJVnfvBAZiAISr8PuPV2aVB3x3OVq7eXORo=)
3: 44E8364E7FDB11EC8A268343C4F9AE02.roa (hash: Xm2UbzC8JcbcQaKl1BwOz8Aimyt0wB8QVDQl3a8IBfI=)
4: B440BFA6324C11ED94FD883AC4F9AE02.roa (hash: xmNlNCsfvMmHsdcmX4KVkYV3wcWZ95ED3GAYee+h//Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl
rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 21:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1866 (0x74a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91529FC, serialNumber=E458EA304009873C8884AF89AA931D48BA859CD0
Validity
Not Before: Apr 6 21:36:00 2026 GMT
Not After : Apr 13 21:36:00 2026 GMT
Subject: CN=69d42740-e04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2e:18:d7:72:33:bd:8c:63:bb:2e:78:e1:e5:
d2:a4:21:8b:fe:6c:36:3e:1b:bf:67:ab:7c:1f:c2:
f3:42:f7:dd:bb:3e:7a:63:bb:1b:66:fa:ce:89:5c:
16:8e:2a:1e:8b:81:3f:66:6f:56:30:c1:48:38:63:
42:80:c3:0b:f5:83:c4:1a:a3:7f:38:d6:6f:be:da:
ea:a7:3f:d0:70:12:c7:5e:25:39:58:f5:85:6a:c7:
70:fb:2f:3e:2f:d3:f2:6b:3f:ac:8c:33:13:d5:74:
f3:bb:2c:92:02:43:0c:7f:9a:53:dd:a6:5c:9b:81:
cd:e0:0f:75:c9:af:16:16:a3:5b:5c:92:b2:68:f6:
f8:17:60:7a:5a:9c:09:42:e0:d7:1a:19:4d:d4:d1:
93:e6:20:b7:62:55:a0:19:d9:26:f7:9d:b5:d3:f6:
68:c8:22:96:75:f5:56:08:58:61:19:06:cc:b5:0e:
b7:56:8f:94:69:aa:fe:23:a4:9d:23:fb:0a:1b:b4:
73:9f:fc:79:3f:fe:1e:82:22:20:a5:83:fd:e2:dd:
27:3f:3c:1f:04:bc:6b:b7:0c:eb:5a:90:25:a4:9b:
b7:c9:6c:f9:cf:c6:59:30:2a:17:e4:5e:bb:ee:89:
5d:3c:91:b1:d2:43:85:07:fe:14:d3:cf:1e:fd:31:
5e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A6:96:2E:B7:74:3C:E7:04:01:94:9D:8F:55:C8:FA:FA:8C:69:C1
X509v3 Authority Key Identifier:
keyid:E4:58:EA:30:40:09:87:3C:88:84:AF:89:AA:93:1D:48:BA:85:9C:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:76:0e:5b:72:81:f1:cd:46:a7:4e:ad:24:87:1f:48:20:0f:
9f:2b:71:e0:6f:12:ac:ff:f0:ed:2a:04:ec:d6:1c:fd:89:09:
10:1c:a7:bf:6f:09:19:13:79:c3:64:06:f5:01:f9:7e:dc:5c:
98:5a:08:68:4c:c3:60:8f:28:ec:07:b4:1a:9a:57:db:89:b6:
3a:8b:fe:db:01:6d:2c:21:96:ea:6e:f7:02:eb:a8:5d:bd:6f:
2b:17:ab:76:c0:85:49:b3:9c:1f:75:49:c0:c8:55:a2:a3:ce:
40:85:88:af:78:cd:74:b0:c3:b9:13:82:3b:46:63:a7:7b:df:
4b:f7:5b:41:c2:2b:68:40:b3:fa:67:d3:e6:cc:2b:be:9c:13:
37:d8:b0:ec:c5:1b:de:84:b9:16:42:73:72:62:7f:f7:74:3f:
40:27:15:1a:a5:be:c7:72:9c:e7:5d:85:7e:04:67:f6:d9:92:
cc:f8:24:6c:bb:68:68:32:3c:c7:78:76:0d:c9:4e:46:d7:86:
84:e0:d1:f0:59:a7:fc:17:23:48:be:00:a8:90:04:82:90:39:
29:f9:97:3f:80:6e:d6:40:12:bf:30:67:ef:2e:1a:44:17:a6:
0a:e5:4b:7e:3e:a5:66:49:b0:f5:a0:01:02:29:fc:08:5d:93:
46:e7:0f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:59:40 2026 by rpki-client