
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
File: 5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft (raw, json)
Hash identifier: vXDSoBF+1IB3G7vzaddlHwF0GQBK8q2KEZcsaTCgoGs=
Subject key identifier: A2:1D:A8:C1:66:70:72:0F:82:2A:2F:9F:89:0B:2E:31:71:87:3E:36
Authority key identifier: E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8
Certificate issuer: /CN=A9115122/serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8
Certificate serial: 023F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
Manifest number: 023A
Signing time: Thu 21 May 2026 02:34:33 +0000
Manifest this update: Thu 21 May 2026 02:34:32 +0000
Manifest next update: Thu 28 May 2026 02:34:32 +0000
Files and hashes: 1: 5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl (hash: kLxNWaGiot006GasMoTU2tHfdPEgW0uySi4Ukx2bpHs=)
2: D4B97082EF2211EDB7EFE882C4F9AE02.roa (hash: QTvbuosrX5jsBzMxv5G1as9+EkdAYiScKyomhZlaqBU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl
rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:34:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 575 (0x23f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115122, serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8
Validity
Not Before: May 21 02:34:32 2026 GMT
Not After : May 28 02:34:32 2026 GMT
Subject: CN=6a0e6f39-e097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:2c:c0:cb:21:31:91:ec:99:d5:62:07:42:
a4:ed:a7:b3:f7:76:ae:3a:d1:c3:38:c3:64:83:5a:
7c:c2:8c:41:b6:bd:27:68:a6:f2:38:66:51:56:c2:
e0:40:26:94:50:22:7f:f3:0a:e5:a1:e4:44:51:a0:
5f:df:fb:cc:fe:5d:1d:ae:22:b4:02:9a:e9:63:58:
dc:b7:cc:58:04:0d:4f:ab:8a:75:03:02:24:82:82:
8a:07:82:21:a7:1d:a5:a7:fd:2b:4b:22:ba:36:49:
fc:f9:97:3e:a5:39:a8:f7:6a:76:d3:d6:9a:f7:0e:
e7:a3:20:4c:f5:6c:fb:48:29:d2:f0:6c:2a:97:e9:
3b:6b:10:3f:c0:9b:68:5f:e6:68:47:8c:7b:0c:ae:
07:f4:e6:1f:fc:ec:41:2d:e1:1e:7b:0d:87:28:fa:
f6:94:ba:96:a0:fc:7a:28:1c:a7:52:34:80:12:38:
28:18:38:c5:c2:e3:f0:5c:f0:a2:22:fe:8f:30:ff:
50:6a:d8:64:fc:8e:04:5f:3e:2d:b6:da:b7:c5:8a:
6d:93:05:fe:35:d3:90:7a:18:4a:29:a8:f1:ea:bb:
d4:a4:99:22:96:81:9a:c7:34:95:21:53:fe:a1:b6:
a0:29:6b:ae:65:99:89:e3:49:a6:74:a5:fb:01:97:
22:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1D:A8:C1:66:70:72:0F:82:2A:2F:9F:89:0B:2E:31:71:87:3E:36
X509v3 Authority Key Identifier:
keyid:E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:4c:a4:b8:7a:fa:8d:8f:6e:e6:3a:41:e5:7d:7e:51:d9:f8:
0b:11:2f:1d:1d:5c:34:99:b2:0a:27:1d:9a:e0:09:9e:0e:1e:
21:0b:64:7d:a1:af:8c:3e:b2:72:6c:70:70:17:df:dd:a2:5e:
95:fe:8c:9d:da:f8:b1:71:c1:47:73:43:41:c4:2f:f7:cb:26:
10:8a:06:a2:03:9a:1d:d0:30:9f:4e:df:69:39:67:6e:8c:41:
95:90:76:bb:56:e5:40:cc:14:7b:7a:11:72:20:34:7d:e3:ac:
a8:6d:c1:d2:f1:d9:2a:52:9d:ca:4e:35:2c:62:0a:d9:28:01:
48:2e:c3:c0:ca:c6:f0:7e:59:2e:b4:cb:d9:99:e5:d5:8b:f7:
6a:4f:dd:93:f6:75:60:5a:d7:39:79:da:13:66:a8:7b:66:2e:
d5:4c:6a:1d:df:a6:ee:55:0e:dd:c7:d4:4c:21:c1:99:3d:25:
46:ce:dc:7e:09:8a:48:37:6b:20:dc:d3:5c:2e:01:61:ff:08:
76:6e:81:d9:12:d3:3d:cc:3e:7c:52:41:a5:e1:97:42:6a:8e:
9b:31:c0:8a:3f:50:27:0d:f2:b3:e9:3d:51:9a:d8:40:80:d3:
7c:ce:b1:c3:3a:b9:e1:d1:96:9d:7e:9e:1b:fe:b7:7c:49:80:
f6:f9:94:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:17:42 2026 by rpki-client