
$ rpki-client -vvf rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft
File: 5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft (raw, json)
Hash identifier: BU/x/curhhJKvWq/ltWn+h/3GEIeDWBrvvImbfNxhBk=
Subject key identifier: 25:5E:60:D8:5E:9A:D5:52:55:FC:8C:61:91:7D:59:F7:66:31:B2:EE
Authority key identifier: E6:A5:4B:AD:7D:17:6E:44:47:A9:E9:4F:24:48:03:27:C1:B4:0C:9E
Certificate issuer: /CN=A91293F4/serialNumber=E6A54BAD7D176E4447A9E94F24480327C1B40C9E
Certificate serial: 0A41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft
Manifest number: 0A2B
Signing time: Sat 04 Apr 2026 19:33:59 +0000
Manifest this update: Sat 04 Apr 2026 19:33:59 +0000
Manifest next update: Sat 11 Apr 2026 19:33:59 +0000
Files and hashes: 1: 5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl (hash: YyOxN2itA2rX5zL2h2Ahus5HH5NdSopYG5oRJVpCZI4=)
2: 3E730FA28E8111EAB2038B6BC4F9AE02.roa (hash: vSaXKWRBXUPLPn7+Q/yDSX8ApY9DTLpiFPD4ogaWMGI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl
rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2625 (0xa41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91293F4, serialNumber=E6A54BAD7D176E4447A9E94F24480327C1B40C9E
Validity
Not Before: Apr 4 19:33:59 2026 GMT
Not After : Apr 11 19:33:59 2026 GMT
Subject: CN=69d167a7-f914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b9:8f:a8:15:cc:f2:cb:3a:d3:6f:b3:78:22:
32:31:68:ac:4a:3a:76:1b:a8:07:9a:99:f6:5d:03:
7e:03:da:d8:b2:69:7c:55:03:2b:30:e6:e8:21:c2:
39:92:31:13:93:a0:62:64:7c:6b:4c:69:d2:e3:98:
a1:52:74:a2:32:0e:27:1e:d1:5d:87:cf:47:d8:fe:
b5:81:30:36:a0:0e:41:61:0e:11:37:72:0b:4c:0a:
21:0d:26:dc:5d:79:9b:9d:00:0d:e2:4a:58:36:e0:
81:dd:e0:78:17:d0:83:dc:05:db:4b:b2:13:47:8b:
b7:11:78:9e:d7:2e:cf:22:61:0a:73:3f:e6:30:85:
f3:2d:cd:a5:78:59:ac:09:07:03:81:d9:eb:ee:c6:
7f:0a:36:d0:c6:18:2f:03:0c:7e:37:f6:d2:ce:cd:
ee:24:0c:9c:9c:f0:4a:69:f5:5d:8f:0c:55:fc:4b:
3e:86:b5:b1:17:c3:9c:0c:d3:30:47:9f:4b:d1:be:
c2:82:e3:ea:29:94:74:ac:20:3d:0f:28:83:bf:b0:
f7:01:51:99:fe:0f:82:04:03:23:cc:14:92:ca:6c:
fc:ae:d8:f5:1f:5e:a6:f3:ee:df:79:4e:9c:79:50:
f7:51:40:27:d5:ee:04:7f:c8:5e:29:19:ec:65:0f:
da:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5E:60:D8:5E:9A:D5:52:55:FC:8C:61:91:7D:59:F7:66:31:B2:EE
X509v3 Authority Key Identifier:
keyid:E6:A5:4B:AD:7D:17:6E:44:47:A9:E9:4F:24:48:03:27:C1:B4:0C:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d9:5e:23:fd:bf:c1:15:37:c2:45:51:7e:bb:9e:cd:5f:02:
52:da:a1:b8:dc:de:a6:be:e3:85:c5:df:c2:b7:e9:fd:d7:fc:
f2:ec:a0:d1:0c:c9:e7:2c:25:c6:ad:13:55:84:cf:c2:81:2b:
1a:40:e4:0c:1f:be:f7:1f:01:ec:a9:3b:92:a4:8f:93:4c:19:
e9:f5:aa:d7:e7:48:91:0b:0d:b8:ec:16:d3:dc:aa:7f:23:00:
c4:40:8f:58:7b:d5:c1:8c:15:c0:67:9f:89:15:78:bb:74:1f:
bc:25:b9:71:87:f5:d3:61:6a:f6:c1:62:b4:a0:36:31:e3:6d:
53:a2:23:fd:31:7f:8d:9c:53:4d:28:14:7f:fd:29:aa:e2:20:
a9:0f:8a:dc:25:41:ae:73:21:ef:25:54:c3:af:f3:0f:65:08:
fa:e3:c9:81:84:f6:1c:ce:8a:b6:96:40:d1:82:c7:62:7e:95:
cc:51:dc:f8:44:8b:b1:82:27:2f:9f:1f:08:ae:13:12:c7:8b:
7d:e6:af:02:65:81:cb:5c:9b:49:3d:c0:b4:c5:36:ce:21:f2:
9d:08:08:aa:de:59:b0:8c:6c:db:72:56:fc:f9:90:17:1d:8c:
06:a4:5f:ab:0a:f3:f7:0b:f8:4a:e7:ca:3a:0a:c3:21:58:c5:
19:b0:33:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjkzRjQxMTAvBgNVBAUTKEU2QTU0QkFEN0QxNzZFNDQ0N0E5RTk0RjI0NDgwMzI3
QzFCNDBDOUUwHhcNMjYwNDA0MTkzMzU5WhcNMjYwNDExMTkzMzU5WjAYMRYwFAYD
VQQDEw02OWQxNjdhNy1mOTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0bmPqBXM8ss602+zeCIyMWisSjp2G6gHmpn2XQN+A9rYsml8VQMrMOboIcI5
kjETk6BiZHxrTGnS45ihUnSiMg4nHtFdh89H2P61gTA2oA5BYQ4RN3ILTAohDSbc
XXmbnQAN4kpYNuCB3eB4F9CD3AXbS7ITR4u3EXie1y7PImEKcz/mMIXzLc2leFms
CQcDgdnr7sZ/CjbQxhgvAwx+N/bSzs3uJAycnPBKafVdjwxV/Es+hrWxF8OcDNMw
R59L0b7CguPqKZR0rCA9DyiDv7D3AVGZ/g+CBAMjzBSSymz8rtj1H16m8+7feU6c
eVD3UUAn1e4Ef8heKRnsZQ/aGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCVeYNhe
mtVSVfyMYZF9WfdmMbLuMB8GA1UdIwQYMBaAFOalS619F25ER6npTyRIAyfBtAye
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTNGNC8xRjY5NUVFQzhF
N0YxMUVBQTk1ODRDNjdDNEY5QUUwMi81cVZMclgwWGJrUkhxZWxQSkVnREo4RzBE
SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVxVkxyWDBYYmtSSHFlbFBKRWdESjhHMERKNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTNGNC8xRjY5NUVFQzhFN0YxMUVBQTk1ODRDNjdDNEY5QUUwMi81cVZMclgwWGJr
UkhxZWxQSkVnREo4RzBESjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAttleI/2/wRU3wkVRfruezV8CUtqhuNzepr7jhcXfwrfp/df88uyg0QzJ5ywl
xq0TVYTPwoErGkDkDB++9x8B7Kk7kqSPk0wZ6fWq1+dIkQsNuOwW09yqfyMAxECP
WHvVwYwVwGefiRV4u3QfvCW5cYf102Fq9sFitKA2MeNtU6Ij/TF/jZxTTSgUf/0p
quIgqQ+K3CVBrnMh7yVUw6/zD2UI+uPJgYT2HM6KtpZA0YLHYn6VzFHc+ESLsYIn
L58fCK4TEseLfeavAmWBy1ybST3AtMU2ziHynQgIqt5ZsIxs23JW/PmQFx2MBqRf
qwrz9wv4SufKOgrDIVjFGbAzLw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 14:00:07 2026 by rpki-client