
$ rpki-client -vvf rpki.apnic.net/member_repository/A912ACD6/56BFFE22001211F1978FFDC9406F56BC/5sF0BEUF4LBMHTBYk7ecuB_qun0.mft
File: 5sF0BEUF4LBMHTBYk7ecuB_qun0.mft (raw, json)
Hash identifier: hSEjTwLna92zGdPa/kOAYTaAKZwWyE3pZGE0Uc8P8Ro=
Subject key identifier: 49:51:38:81:88:7F:55:38:59:2E:3C:E0:77:99:B0:EE:93:5B:0D:BB
Authority key identifier: E6:C1:74:04:45:05:E0:B0:4C:1D:30:58:93:B7:9C:B8:1F:EA:BA:7D
Certificate issuer: /CN=A912ACD6/serialNumber=E6C174044505E0B04C1D305893B79CB81FEABA7D
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sF0BEUF4LBMHTBYk7ecuB_qun0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912ACD6/56BFFE22001211F1978FFDC9406F56BC/5sF0BEUF4LBMHTBYk7ecuB_qun0.mft
Manifest number: 20
Signing time: Sun 29 Mar 2026 08:32:14 +0000
Manifest this update: Sun 29 Mar 2026 08:32:13 +0000
Manifest next update: Sun 05 Apr 2026 08:32:13 +0000
Files and hashes: 1: 5sF0BEUF4LBMHTBYk7ecuB_qun0.crl (hash: LW4tOrdm2XSLUAWDfHrNT+6NISeQI/tXxxK+TKmi7OA=)
2: 8A8A7DFE001211F1B63766CA406F56BC.roa (hash: yCqHIUEE3e4z0qNBb008BgOrOVMaTHnm3rYi25K/1gA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912ACD6/56BFFE22001211F1978FFDC9406F56BC/5sF0BEUF4LBMHTBYk7ecuB_qun0.crl
rsync://rpki.apnic.net/member_repository/A912ACD6/56BFFE22001211F1978FFDC9406F56BC/5sF0BEUF4LBMHTBYk7ecuB_qun0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sF0BEUF4LBMHTBYk7ecuB_qun0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 08:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912ACD6, serialNumber=E6C174044505E0B04C1D305893B79CB81FEABA7D
Validity
Not Before: Mar 29 08:32:13 2026 GMT
Not After : Apr 5 08:32:13 2026 GMT
Subject: CN=69c8e38d-ec60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ab:70:6a:31:79:a1:39:0b:4e:e0:b1:f0:1c:
ef:14:c5:fc:bc:cf:9c:8c:6e:60:20:04:59:ab:cf:
4f:84:0b:6d:bf:94:46:45:93:8a:87:ca:44:6d:23:
f4:c1:29:87:42:84:12:ea:4e:bc:8e:2e:49:ed:16:
12:8b:7d:51:c1:64:ae:ca:ca:b3:d5:ae:95:a3:2f:
34:e2:a0:b3:dd:95:db:4a:92:4e:20:d8:32:16:39:
74:98:d9:16:dc:72:24:dd:ba:80:33:03:42:a7:56:
11:c4:13:ea:f1:9e:62:d4:ba:c8:5d:18:65:40:41:
95:d4:87:30:3d:79:15:b7:a8:b5:0c:e0:28:36:c9:
c7:04:ee:d1:3a:30:76:6d:7b:c9:24:03:88:a7:c0:
20:f7:99:59:5f:f9:7c:bd:62:39:20:e8:b6:0c:6a:
ce:49:b1:88:97:0b:7d:61:e8:01:27:87:cc:6d:e7:
ad:8c:46:59:82:43:31:d7:84:4e:53:f7:b8:c8:f8:
33:33:ff:85:a7:0c:44:12:01:81:26:cf:92:e9:ea:
63:7b:19:aa:85:00:a5:db:97:8f:cb:12:5c:4b:c6:
35:c9:af:e8:6a:35:7c:7b:f5:54:4d:3f:8f:c1:5e:
75:bd:ce:86:f5:61:2c:f7:17:ed:a8:86:47:ad:e7:
60:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:51:38:81:88:7F:55:38:59:2E:3C:E0:77:99:B0:EE:93:5B:0D:BB
X509v3 Authority Key Identifier:
keyid:E6:C1:74:04:45:05:E0:B0:4C:1D:30:58:93:B7:9C:B8:1F:EA:BA:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912ACD6/56BFFE22001211F1978FFDC9406F56BC/5sF0BEUF4LBMHTBYk7ecuB_qun0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sF0BEUF4LBMHTBYk7ecuB_qun0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ACD6/56BFFE22001211F1978FFDC9406F56BC/5sF0BEUF4LBMHTBYk7ecuB_qun0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:2f:be:bb:66:47:05:81:bd:95:76:42:69:38:f8:d7:ec:52:
e2:f9:5c:b7:a7:f5:cb:36:e9:61:9b:1f:ad:d4:9c:c8:9f:fb:
34:53:52:a1:b0:ad:f2:80:2d:98:6b:31:2a:d0:fc:f2:1c:4a:
fd:19:42:07:29:2b:33:fe:58:f5:e5:46:98:68:c5:c0:b1:93:
61:ed:18:7a:8f:cc:50:db:59:25:18:01:26:8c:e3:14:d9:99:
5a:a8:70:10:80:b0:b9:26:3a:b6:aa:f4:70:93:6f:7e:8b:c0:
e6:95:91:9a:8c:35:7a:9b:22:cd:4b:34:c4:8e:b4:a5:13:56:
08:a0:4b:8c:ff:12:cb:25:57:f8:ad:52:c2:21:83:f8:3d:c5:
ef:0c:38:aa:57:45:92:af:f0:c8:33:b6:15:4f:31:a7:45:3a:
68:60:df:cd:6a:90:54:d7:3f:73:71:5f:45:80:ee:67:3e:e9:
53:9a:ba:55:b3:c5:76:aa:08:10:f0:14:77:62:3b:0e:6a:5c:
f5:61:8b:05:9c:0e:01:72:cb:b3:95:40:74:ec:fc:e6:ec:57:
ec:a3:e1:30:51:d5:46:e8:c0:41:45:07:97:33:57:29:a1:cc:
6c:83:e9:ab:92:96:a9:0f:80:0b:b5:86:f8:55:ab:49:e5:e6:
47:d4:12:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 13:20:28 2026 by rpki-client