
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
File: 5rsDqligwnDrZrPq6yQI__q6Xsc.mft (raw, json)
Hash identifier: lF/d7nYEJejdYmtFgXQsv8gWwRZvl8z8BNE5oE2nP+c=
Subject key identifier: 03:58:AE:8F:6E:15:2F:28:88:EF:8C:87:8F:9C:09:09:34:56:8B:C1
Authority key identifier: E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7
Certificate issuer: /CN=A914D2BF/serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7
Certificate serial: 0292
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
Manifest number: 028C
Signing time: Wed 09 Sep 2026 02:07:56 +0000
Manifest this update: Wed 09 Sep 2026 02:07:55 +0000
Manifest next update: Wed 16 Sep 2026 02:07:55 +0000
Files and hashes: 1: 5rsDqligwnDrZrPq6yQI__q6Xsc.crl (hash: FXmLXb1LHmEEvfbYLAl5dVHiX9prEla1c4x5hxieAH0=)
2: AEF266ECD34811EDAD96D95DC4F9AE02.roa (hash: ftma0mej/dOtkA9i9qpY2iDBlCF8N3tlglYqa45f8z0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl
rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 02:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D2BF, serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7
Validity
Not Before: Sep 9 02:07:55 2026 GMT
Not After : Sep 16 02:07:55 2026 GMT
Subject: CN=6aa0bf7b-8993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6b:7c:2a:40:ea:f9:45:6b:e1:e3:14:36:5c:
7e:06:35:ed:7a:8e:42:e3:de:68:3a:19:6a:f4:15:
ee:2d:c7:48:ec:af:9f:8f:e4:58:dd:45:79:6b:c3:
68:48:23:f0:49:6a:e1:9c:0f:0b:e9:e2:44:87:76:
f8:42:49:33:e7:88:a8:b5:e8:ae:8a:2b:5d:da:78:
0a:d0:3b:91:96:11:72:8f:9c:7d:27:23:6d:ce:90:
fb:36:0e:3b:ce:75:28:3c:d2:7b:68:9f:2b:45:84:
69:a4:99:4b:25:f6:22:88:af:05:9a:76:9b:3d:25:
72:b2:b0:0e:eb:52:59:40:ba:eb:58:65:38:12:32:
cb:e0:9a:f5:3c:e5:26:68:be:fc:84:29:19:6b:6f:
2c:b1:7a:f4:55:14:80:c7:cc:dd:dd:34:4c:6d:93:
8c:f4:86:6f:83:03:4c:90:a8:de:7a:35:48:a6:57:
8e:de:e6:34:84:7d:4e:e0:26:6e:b0:85:18:22:2e:
ec:39:b0:95:0a:00:7d:74:5f:9a:a9:01:e5:ed:cb:
b7:d1:59:5f:3a:ae:48:60:ba:be:85:c7:98:16:2e:
8e:41:b5:9b:b5:ca:70:e2:01:e2:d2:e9:69:a5:fc:
63:c9:b2:da:17:04:ab:3a:0e:52:a5:be:2a:60:43:
9d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:58:AE:8F:6E:15:2F:28:88:EF:8C:87:8F:9C:09:09:34:56:8B:C1
X509v3 Authority Key Identifier:
keyid:E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f2:49:74:8d:6e:ef:47:3f:08:4a:20:0f:c9:92:7b:bb:da:
bf:5b:e8:b1:0f:1e:d0:9f:7f:23:a1:5f:b4:56:5b:ca:e9:0c:
b8:d6:94:62:f0:af:1f:7f:e4:96:c2:93:74:d1:33:bc:a2:02:
a5:71:ea:10:3f:19:a7:dd:27:f9:8e:87:ee:85:d6:d5:46:e1:
c4:e7:c2:c0:51:c1:68:30:0f:20:40:7d:4c:56:06:23:e1:cb:
25:92:02:23:3e:19:c4:6e:d0:7b:24:72:ec:8a:9a:54:01:bf:
02:59:96:06:1c:35:d1:1f:5b:6a:0c:46:4c:32:6b:4f:b3:ec:
74:bb:43:13:bb:5a:e3:87:e0:d1:0c:a2:3b:44:a9:c3:7c:fe:
62:90:86:77:3f:9f:f3:84:a6:a7:b5:2e:12:3f:d9:da:0c:2e:
02:a3:c7:68:f2:4a:5d:60:43:3a:35:81:7f:c0:27:3c:6d:04:
4a:6f:e5:ad:a0:31:db:f9:d9:1e:81:ca:7c:00:44:40:ac:e4:
c1:98:3e:62:c2:4e:87:c5:12:2b:9f:24:05:60:de:fa:ec:31:
ca:80:16:c4:d4:5c:42:a4:74:de:75:65:a0:5a:5c:64:3e:75:
43:61:f6:50:3b:5a:8f:77:e3:61:ee:e4:13:8c:5a:2f:c1:13:
40:41:62:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:02:01 2026 by rpki-client