
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft
File: sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft (raw, json)
Hash identifier: sVs3xVm/y4J+EnYwYa3bMF/3vFzYOivF0BNRsi6DG9o=
Subject key identifier: 89:DE:98:97:DB:1A:A5:4D:9E:AD:76:42:B1:A5:AA:D2:9E:34:68:74
Authority key identifier: B2:9E:45:31:16:74:5C:87:4B:F0:F0:B4:72:45:98:2A:71:D5:26:B5
Certificate issuer: /CN=A911FE83/serialNumber=B29E453116745C874BF0F0B47245982A71D526B5
Certificate serial: 3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft
Manifest number: 3A
Signing time: Fri 15 May 2026 08:43:34 +0000
Manifest this update: Fri 15 May 2026 08:43:34 +0000
Manifest next update: Fri 22 May 2026 08:43:34 +0000
Files and hashes: 1: sp5FMRZ0XIdL8PC0ckWYKnHVJrU.crl (hash: gPV5fdCUi7za+FLP5XCgho0dHRRdyiJLlTSVSqNEXAg=)
2: 1CF20536001311F1AC4D12CC406F56BC.roa (hash: g4Ud8ofVkhlMNmXk1DVd80+pMPQpIN+9NWS+U7ei8zU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.crl
rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 08:43:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FE83, serialNumber=B29E453116745C874BF0F0B47245982A71D526B5
Validity
Not Before: May 15 08:43:34 2026 GMT
Not After : May 22 08:43:34 2026 GMT
Subject: CN=6a06dcb6-3d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:f8:ab:8e:a0:1b:7b:a8:96:d2:ba:4f:c9:
ad:33:09:aa:57:34:f8:a4:15:c2:5a:4c:90:4b:41:
01:f7:59:4e:f0:e3:d9:df:7c:7f:2b:09:9a:3a:59:
05:c1:29:3d:ef:e7:3f:cc:96:36:6f:9d:74:10:40:
93:64:f6:10:f9:50:2e:95:4b:aa:12:7c:32:e9:b6:
b6:34:b5:82:a6:7a:66:6f:ef:70:4e:7c:52:d9:0c:
8f:d3:a0:ad:1a:3d:10:8d:22:8e:5a:62:b7:80:ee:
b6:77:2e:af:a0:46:03:f8:61:ba:49:23:60:e7:e0:
0d:bc:37:2c:a4:0a:5f:3f:5e:52:8a:7c:0a:92:c0:
4c:ab:fb:2c:51:bc:6c:72:50:9c:e5:ec:4c:c4:fd:
27:29:00:ab:2d:37:17:f3:26:de:e7:89:09:99:7d:
c5:f7:55:db:a7:6c:1f:2f:d4:61:f4:6d:50:2d:e3:
ab:c4:73:d4:b6:d0:1f:8a:9c:8c:81:cb:ed:49:cb:
52:ca:19:a8:00:b9:c4:e0:2f:7a:bc:7c:c1:40:48:
5a:e6:fc:9d:d7:c8:06:27:93:03:bb:5e:bf:6e:37:
24:9e:ab:75:ce:7a:9b:59:c4:5a:70:b2:d3:e2:d6:
59:42:ee:80:5c:ec:c0:ea:2b:c3:d6:5d:94:04:a3:
69:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DE:98:97:DB:1A:A5:4D:9E:AD:76:42:B1:A5:AA:D2:9E:34:68:74
X509v3 Authority Key Identifier:
keyid:B2:9E:45:31:16:74:5C:87:4B:F0:F0:B4:72:45:98:2A:71:D5:26:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:59:b7:85:59:1e:3a:e6:7f:0b:0a:cf:0f:15:60:65:8f:cf:
d3:12:35:c1:d8:5f:66:3c:38:3a:6e:af:2c:f2:7a:77:a8:82:
96:87:5a:b7:00:71:28:bb:1a:74:cc:b0:52:2a:49:61:92:b1:
38:4b:57:d2:d7:92:7a:94:b1:37:5a:2a:1f:d5:8a:ba:4e:46:
27:17:aa:e7:39:3c:11:b7:14:79:f7:8d:23:c2:d7:0a:d0:17:
bf:38:6e:8c:9f:61:3c:bc:83:98:18:92:a3:91:7a:2c:51:0d:
11:55:39:9d:b7:01:1e:95:b9:b5:2c:ae:b4:a0:b4:3e:d1:50:
69:f0:5f:57:03:e1:7c:c6:e1:54:55:ab:5d:d8:8d:7b:41:22:
26:5b:90:ab:67:20:4f:58:e4:bf:c3:c7:6f:56:2c:c8:2a:f7:
5b:31:fe:13:5a:fa:37:63:e0:dd:6f:b4:44:8c:7c:36:a1:85:
27:37:e6:df:3f:96:eb:3c:30:65:33:65:e6:55:36:8d:75:d2:
f4:98:bd:f8:4c:74:57:18:e4:ed:dc:2a:0e:90:0f:cb:8b:3a:
3c:93:f6:8c:b1:3a:0d:38:25:4f:d8:bc:0c:db:62:b9:ff:57:
43:73:70:b2:4d:e2:2f:d5:b4:eb:4f:d0:36:c8:5d:9a:fc:6c:
e8:ec:be:6f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
RkU4MzExMC8GA1UEBRMoQjI5RTQ1MzExNjc0NUM4NzRCRjBGMEI0NzI0NTk4MkE3
MUQ1MjZCNTAeFw0yNjA1MTUwODQzMzRaFw0yNjA1MjIwODQzMzRaMBgxFjAUBgNV
BAMTDTZhMDZkY2I2LTNkOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBrvirjqAbe6iW0rpPya0zCapXNPikFcJaTJBLQQH3WU7w49nffH8rCZo6WQXB
KT3v5z/MljZvnXQQQJNk9hD5UC6VS6oSfDLptrY0tYKmemZv73BOfFLZDI/ToK0a
PRCNIo5aYreA7rZ3Lq+gRgP4YbpJI2Dn4A28NyykCl8/XlKKfAqSwEyr+yxRvGxy
UJzl7EzE/ScpAKstNxfzJt7niQmZfcX3VdunbB8v1GH0bVAt46vEc9S20B+KnIyB
y+1Jy1LKGagAucTgL3q8fMFASFrm/J3XyAYnkwO7Xr9uNySeq3XOeptZxFpwstPi
1llC7oBc7MDqK8PWXZQEo2k/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUid6Yl9sa
pU2erXZCsaWq0p40aHQwHwYDVR0jBBgwFoAUsp5FMRZ0XIdL8PC0ckWYKnHVJrUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGRTgzL0U3RUIyNkIwMDAx
MjExRjFBRkY0MEFDQjQwNkY1NkJDL3NwNUZNUlowWElkTDhQQzBja1dZS25IVkpy
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvc3A1Rk1SWjBYSWRMOFBDMGNrV1lLbkhWSnJVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG
RTgzL0U3RUIyNkIwMDAxMjExRjFBRkY0MEFDQjQwNkY1NkJDL3NwNUZNUlowWElk
TDhQQzBja1dZS25IVkpyVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCPWbeFWR465n8LCs8PFWBlj8/TEjXB2F9mPDg6bq8s8np3qIKWh1q3AHEouxp0
zLBSKklhkrE4S1fS15J6lLE3Wiof1Yq6TkYnF6rnOTwRtxR5940jwtcK0Be/OG6M
n2E8vIOYGJKjkXosUQ0RVTmdtwEelbm1LK60oLQ+0VBp8F9XA+F8xuFUVatd2I17
QSImW5CrZyBPWOS/w8dvVizIKvdbMf4TWvo3Y+Ddb7REjHw2oYUnN+bfP5brPDBl
M2XmVTaNddL0mL34THRXGOTt3CoOkA/Lizo8k/aMsToNOCVP2LwM22K5/1dDc3Cy
TeIv1bTrT9A2yF2a/Gzo7L5v
-----END CERTIFICATE-----
Generated at Sun May 17 03:32:39 2026 by rpki-client