
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
File: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft (raw, json)
Hash identifier: 4bHSSom1YCZ7omRXgw/EFZTU19EAUBt61hmlTAg2dh4=
Subject key identifier: E5:1C:4D:0F:90:4D:09:CF:3F:25:E2:FC:7B:AE:DF:C5:B7:C3:6B:E1
Authority key identifier: AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F
Certificate issuer: /CN=A918B5FE/serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F
Certificate serial: 0762
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
Manifest number: 0747
Signing time: Sat 04 Apr 2026 21:32:28 +0000
Manifest this update: Sat 04 Apr 2026 21:32:27 +0000
Manifest next update: Sat 11 Apr 2026 21:32:27 +0000
Files and hashes: 1: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl (hash: lgKb2MwLCVIdwreuTqnj/0QnCekjrynW4gbpZcSs9jc=)
2: DBB4BB6A48F911EC9F04C439C4F9AE02.roa (hash: TW3Yzr4nVCh6fw/bwk2DNXvw9C9/OVS9zcojLveOPlk=)
3: DAE15A7248F911EC9F04C439C4F9AE02.roa (hash: yll6EleWhluFREKT8NzETIGMZoAw4Is6iNKhftN9k0s=)
4: DCC969B048F911EC9F04C439C4F9AE02.roa (hash: ja+InHtGIgo82Asz/+ZVF2gnztVHMmOvkEj/+OfWSAc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl
rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1890 (0x762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B5FE, serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F
Validity
Not Before: Apr 4 21:32:27 2026 GMT
Not After : Apr 11 21:32:27 2026 GMT
Subject: CN=69d1836b-12db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:f4:94:9e:c8:c5:23:3a:d9:2f:7c:54:4d:
b2:c4:65:80:30:ca:56:46:94:36:4c:7f:a0:e2:4b:
38:bd:80:30:82:fe:20:ad:ff:49:c9:95:c6:71:bc:
2a:f8:b9:5f:02:d9:23:d1:4e:7a:a0:c8:f2:c8:94:
70:a4:ef:70:e1:f1:1d:63:60:3c:46:7b:0e:bb:d6:
36:e6:2e:78:54:13:ab:e3:eb:27:1b:2c:73:b4:71:
d3:01:9b:83:de:99:21:6f:83:dd:17:23:d0:4a:b7:
a6:e4:79:af:3f:68:4e:bb:45:d9:b5:3d:5d:a0:d2:
bd:b7:02:e7:86:4a:0d:b2:d1:db:31:08:8a:fa:67:
e6:77:76:92:c3:0a:0c:71:46:b7:f1:29:45:35:91:
3d:de:5d:ab:d6:db:0d:6e:16:94:c3:b3:82:2c:9b:
55:4d:a8:47:a5:f0:9e:4b:c3:13:c4:e9:23:c2:45:
f6:2d:48:27:91:12:88:3e:27:46:d3:82:36:c7:4c:
13:d9:20:62:7b:6a:19:cb:9f:6d:89:82:9f:03:4a:
36:6a:7b:ca:7a:df:19:9d:ea:f6:96:cb:ec:12:d1:
d8:08:cc:77:78:22:8f:a1:ea:03:2b:b2:d8:48:72:
b4:6f:6c:84:c3:48:07:96:7b:55:c7:67:3d:92:95:
a0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1C:4D:0F:90:4D:09:CF:3F:25:E2:FC:7B:AE:DF:C5:B7:C3:6B:E1
X509v3 Authority Key Identifier:
keyid:AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:e0:52:20:6f:d5:ff:ad:eb:b2:39:d4:9b:be:19:24:b9:2c:
04:79:44:1a:21:50:ca:61:a2:ed:80:7a:e9:a6:bc:28:c3:91:
59:ad:14:d9:61:8b:e0:8f:45:2c:bc:17:75:41:33:eb:25:26:
08:b4:bd:0c:45:fb:f6:49:6c:03:83:8d:72:7c:94:6c:93:5a:
4b:8d:f9:2e:8f:f2:17:ae:eb:c8:bf:4a:0e:1e:a6:0f:d5:a8:
1b:92:3d:45:f6:c7:ef:94:70:ec:25:47:b7:55:3e:46:28:6d:
08:69:e4:c9:7c:83:e3:17:2e:52:5a:24:1e:69:2b:c1:e3:a4:
59:7c:ba:55:fe:c5:71:fa:91:7b:a0:20:4c:e6:30:d1:17:7b:
00:d8:20:dd:ef:d3:5c:dc:2c:fb:79:a6:56:59:61:61:a6:5d:
ad:02:05:57:99:69:60:08:b6:85:83:4d:d0:49:08:8b:70:2a:
92:da:f8:49:71:a3:d2:09:c1:d9:06:d6:a3:78:2c:48:ee:66:
4b:e7:f8:77:de:5a:91:ee:8e:fc:6e:5f:6b:dc:91:ab:e3:85:
3f:e5:6f:14:6a:0c:48:32:b4:28:31:e6:c2:bf:40:4c:5a:5b:
71:cc:05:9f:04:b4:89:ac:bf:5f:50:3d:24:6d:30:de:d5:80:
03:21:ff:f6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEI1RkUxMTAvBgNVBAUTKEFCOTA1RERDMEFGQkJEMTU0OUY2NkVGRTgxMTdBRTE1
MDAwQTVFMEYwHhcNMjYwNDA0MjEzMjI3WhcNMjYwNDExMjEzMjI3WjAYMRYwFAYD
VQQDEw02OWQxODM2Yi0xMmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq5b0lJ7IxSM62S98VE2yxGWAMMpWRpQ2TH+g4ks4vYAwgv4grf9JyZXGcbwq
+LlfAtkj0U56oMjyyJRwpO9w4fEdY2A8RnsOu9Y25i54VBOr4+snGyxztHHTAZuD
3pkhb4PdFyPQSrem5HmvP2hOu0XZtT1doNK9twLnhkoNstHbMQiK+mfmd3aSwwoM
cUa38SlFNZE93l2r1tsNbhaUw7OCLJtVTahHpfCeS8MTxOkjwkX2LUgnkRKIPidG
04I2x0wT2SBie2oZy59tiYKfA0o2anvKet8Zner2lsvsEtHYCMx3eCKPoeoDK7LY
SHK0b2yEw0gHlntVx2c9kpWgUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOUcTQ+Q
TQnPPyXi/Huu38W3w2vhMB8GA1UdIwQYMBaAFKuQXdwK+70VSfZu/oEXrhUACl4P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjVGRS8zMkMzMDAyODZB
OUUxMUVCQjY3NjIzMThDNEY5QUUwMi9xNUJkM0FyN3ZSVko5bTctZ1JldUZRQUtY
ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3E1QmQzQXI3dlJWSjltNy1nUmV1RlFBS1hnOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjVGRS8zMkMzMDAyODZBOUUxMUVCQjY3NjIzMThDNEY5QUUwMi9xNUJkM0FyN3ZS
Vko5bTctZ1JldUZRQUtYZzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwuBSIG/V/63rsjnUm74ZJLksBHlEGiFQymGi7YB66aa8KMORWa0U2WGL4I9F
LLwXdUEz6yUmCLS9DEX79klsA4ONcnyUbJNaS435Lo/yF67ryL9KDh6mD9WoG5I9
RfbH75Rw7CVHt1U+RihtCGnkyXyD4xcuUlokHmkrweOkWXy6Vf7FcfqRe6AgTOYw
0Rd7ANgg3e/TXNws+3mmVllhYaZdrQIFV5lpYAi2hYNN0EkIi3Aqktr4SXGj0gnB
2QbWo3gsSO5mS+f4d95ake6O/G5fa9yRq+OFP+VvFGoMSDK0KDHmwr9ATFpbccwF
nwS0iay/X1A9JG0w3tWAAyH/9g==
-----END CERTIFICATE-----
Generated at Mon Apr 6 03:38:13 2026 by rpki-client