
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
File: 5rsDqligwnDrZrPq6yQI__q6Xsc.mft (raw, json)
Hash identifier: MFiWXYNPSqbZPPKQrIEo2M7NFqrre2P8tsQ05nsFtAY=
Subject key identifier: AF:5E:C7:7A:FC:5E:77:C3:1C:18:DA:96:CB:A2:57:26:13:0E:08:82
Authority key identifier: E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7
Certificate issuer: /CN=A914D2BF/serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7
Certificate serial: 0232
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
Manifest number: 022D
Signing time: Fri 13 Mar 2026 01:55:16 +0000
Manifest this update: Fri 13 Mar 2026 01:55:15 +0000
Manifest next update: Fri 20 Mar 2026 01:55:15 +0000
Files and hashes: 1: 5rsDqligwnDrZrPq6yQI__q6Xsc.crl (hash: NwV6SrCJYKJcPEuGGWhqgHQr2ksXa8ADgykFlgBuCpg=)
2: AEF266ECD34811EDAD96D95DC4F9AE02.roa (hash: hl4G0niDRAkI8guzsrGAz/HUW/iq4sTuXVVyCv6WIqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl
rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 01:55:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562 (0x232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D2BF, serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7
Validity
Not Before: Mar 13 01:55:15 2026 GMT
Not After : Mar 20 01:55:15 2026 GMT
Subject: CN=69b36e84-b53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:13:b1:7c:30:3a:f8:e3:96:7b:7e:2c:87:28:
b6:ad:fc:39:39:37:2d:45:a0:50:af:91:be:57:8e:
38:87:60:ed:ab:14:e5:5d:29:af:11:87:aa:a9:aa:
19:e5:a6:0c:87:34:2b:de:c5:d2:ce:2a:6c:99:3f:
35:d5:f3:a2:87:51:50:59:11:f3:ac:08:63:23:9f:
3d:f1:0b:88:ea:1a:cb:f0:6c:f9:85:c8:2f:8b:98:
7c:05:0d:c3:75:cf:67:fa:f1:8a:9d:20:bd:c5:d3:
8e:09:e0:35:84:63:d3:34:62:a9:60:34:4a:95:e9:
5c:64:7f:51:6d:de:df:d7:ed:98:6a:7d:25:c6:29:
4f:3b:5b:2c:11:59:1c:b9:2c:e4:70:6b:21:ef:76:
93:27:a3:5e:25:fc:9d:a1:3a:9c:dd:7c:56:2e:a7:
e6:26:1b:0e:61:97:c4:52:c8:2e:65:be:d5:bd:a4:
61:4d:15:a5:48:26:9a:71:97:77:f1:82:4e:af:ec:
c6:12:12:1b:db:b1:3f:f6:18:05:32:62:01:fe:b1:
16:5d:ef:9e:94:41:d6:30:18:14:1d:dd:85:f2:0d:
d6:30:b3:17:11:a4:78:15:62:39:43:31:95:db:41:
43:97:66:37:b9:34:b2:ad:b9:0d:21:ac:65:96:16:
46:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5E:C7:7A:FC:5E:77:C3:1C:18:DA:96:CB:A2:57:26:13:0E:08:82
X509v3 Authority Key Identifier:
keyid:E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:85:dc:72:c3:15:00:53:1c:8d:34:4c:20:2e:5c:5c:9d:e7:
25:8f:9e:37:d3:dc:6d:1f:17:60:a7:7f:66:1e:16:cc:a7:14:
41:d0:f2:cb:03:b6:4b:ea:85:0b:ff:6e:8e:a4:6f:aa:b0:19:
9e:14:4e:70:93:30:6b:db:3e:15:f6:65:cb:07:4b:8c:60:40:
ef:f1:18:f6:49:e4:c3:fb:7f:eb:7c:10:61:b9:2e:24:e6:30:
db:14:7f:4c:ea:15:04:f0:5a:1e:e4:f0:84:df:fa:69:da:a0:
f0:50:dc:34:a8:98:ff:e1:35:d4:12:52:aa:22:28:0e:aa:4d:
ac:32:90:59:63:0f:36:5b:6f:aa:e1:3c:9a:44:01:39:c0:69:
2c:71:75:8a:56:c5:00:14:28:58:2b:df:f1:fc:49:14:77:18:
33:e7:cb:e4:d7:8f:f9:af:04:a0:a1:fa:65:56:fd:fd:ee:5d:
62:a3:ee:e9:e1:2a:d7:87:6a:e6:76:e5:3e:2a:fa:cc:50:86:
d2:b6:bb:ec:26:8a:2c:93:5b:67:da:bf:58:12:09:d4:48:2f:
a7:c8:f2:f9:34:b4:95:fe:bb:9e:0a:fc:4e:d1:a1:b5:37:82:
55:02:1d:01:3d:4a:4e:2b:18:74:d4:4e:cb:bf:65:0b:e1:d7:
d2:81:88:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 21:06:39 2026 by rpki-client