
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
File: MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft (raw, json)
Hash identifier: 8ULUFNxbUaBx9Rck+RS5PLfCCn/LQ9bWOfDTBQYEJlU=
Subject key identifier: 56:BA:D4:11:79:AE:4C:E8:79:B0:48:B8:DE:72:DF:45:77:AF:92:29
Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20
Certificate issuer: /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
Certificate serial: 020C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
Manifest number: 01F1
Signing time: Tue 05 May 2026 03:17:00 +0000
Manifest this update: Tue 05 May 2026 03:17:00 +0000
Manifest next update: Tue 12 May 2026 03:17:00 +0000
Files and hashes: 1: MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl (hash: a3zNAKxEotOvBwnygcVs8S8tZza2HyBLja7W5sLX0GI=)
2: 1B2EC2A457E411EEB143C80EC4F9AE02.roa (hash: 8JV502SLk8QbZyaGCPLTxSnSD1WOF++tIWExjZSLMdQ=)
3: 1AB7C58C57E411EEB143C80EC4F9AE02.roa (hash: 1RzsjB3B/c1zgVm8/5Sg1Xe89XFvfc6vQnq4tvEitnY=)
4: 5EF938889E9E11EE80C94682C4F9AE02.roa (hash: Pt4/aeZJmmxaKw58FeByKfcr60LvOJZSjrmtvVkGyg8=)
5: 1E541192D5A111EE9D73FA44C4F9AE02.roa (hash: 6VryhfiIF2VBEa3XnAENzfKNyDYTfUs9xynBu6kvnA4=)
6: 22613D48AC7311EE8A97A86FC4F9AE02.roa (hash: LHB5pGY8dTTpWRgeoK0nlLC3xPEqarqRqlE/1vamRUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl
rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 524 (0x20c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
Validity
Not Before: May 5 03:17:00 2026 GMT
Not After : May 12 03:17:00 2026 GMT
Subject: CN=69f9612c-e87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:56:36:e4:65:fc:fc:b4:4a:d4:29:c0:c1:
e6:30:73:52:49:0e:89:11:c8:97:57:46:b4:84:24:
e3:77:27:32:84:0a:c4:05:3d:a4:d6:e8:80:0a:99:
c6:c7:b6:b0:71:3e:ba:6d:93:fb:f0:c6:88:32:76:
8a:51:61:6e:27:42:df:d8:b2:35:61:11:af:72:90:
8e:61:09:2d:db:8a:42:9f:15:0e:ff:14:a9:51:2b:
59:dc:46:c2:66:4e:05:e9:c1:08:57:8d:31:d4:16:
ed:a5:44:2b:06:d2:a4:f4:89:26:6b:9e:40:15:2c:
de:95:93:e7:71:63:21:9f:65:31:3c:8e:c8:f9:f5:
b2:03:3e:62:34:70:a0:1a:36:bb:1a:30:78:e8:10:
d0:37:1c:4e:0c:98:fb:14:aa:39:01:25:98:d2:71:
a3:a9:45:e2:ae:8b:f6:34:ab:ab:1f:a9:96:f2:d3:
45:29:e6:9e:66:9a:cc:c9:b7:7f:b1:fe:03:2b:d6:
d9:55:e5:df:dd:42:a0:aa:36:88:14:0d:86:15:6e:
f2:2e:22:c6:ed:a0:dc:d6:22:0d:4f:28:40:80:d2:
d8:1c:d0:44:bb:e8:49:4f:df:8a:b7:b9:c0:27:e8:
03:50:cb:13:40:9c:eb:23:41:30:ef:d3:55:66:d0:
0f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BA:D4:11:79:AE:4C:E8:79:B0:48:B8:DE:72:DF:45:77:AF:92:29
X509v3 Authority Key Identifier:
keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:5f:12:44:ae:6c:42:d5:98:d4:03:c1:bc:82:60:2c:03:5d:
49:1f:66:42:6f:ff:2e:06:3c:3d:ca:f1:a2:b8:a9:e5:b1:65:
fb:9b:d5:33:b9:dd:55:22:10:e0:35:af:a5:9c:37:b3:5b:11:
8a:25:e6:5a:c2:10:2b:ea:f8:d0:f8:39:af:d6:f3:ad:db:58:
c7:2e:0a:68:6e:11:66:c8:b1:6d:3a:dd:a9:d5:97:2a:5a:77:
db:d8:fd:4b:9e:8c:27:9c:03:c5:1c:99:99:96:b3:14:cd:ff:
af:76:d8:92:94:56:f8:56:63:66:23:03:91:ac:51:99:b3:39:
6d:0b:6a:11:91:e9:6d:33:a0:7a:e9:13:25:e1:d6:7a:12:27:
b5:7a:64:1e:b5:1c:5b:8f:a6:8a:bc:a0:75:5a:be:44:21:19:
75:15:33:29:64:47:64:d2:62:df:fe:10:da:7b:17:d3:6f:e2:
10:64:0f:a5:c3:57:08:33:81:01:9d:7f:d8:cd:91:16:54:d3:
c1:25:89:c9:c3:2e:7f:3e:47:fe:a2:f4:20:a0:36:bd:88:52:
7d:d6:3c:fe:54:81:c5:ce:91:30:ab:aa:12:19:e5:02:9a:1c:
fc:f6:eb:35:9a:f4:0d:11:3e:6e:15:35:9b:92:67:56:73:88:
26:14:6b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:20:05 2026 by rpki-client