
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
File: 5rsDqligwnDrZrPq6yQI__q6Xsc.mft (raw, json)
Hash identifier: q2sBL9WikomwomA5vVR9G//9oxxjak56DjbunYOfTWM=
Subject key identifier: 24:1A:E2:CC:41:12:BE:B1:77:88:78:E3:F1:25:2F:27:DB:79:5E:D7
Authority key identifier: E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7
Certificate issuer: /CN=A914D2BF/serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7
Certificate serial: 024C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
Manifest number: 0246
Signing time: Mon 27 Apr 2026 02:20:43 +0000
Manifest this update: Mon 27 Apr 2026 02:20:42 +0000
Manifest next update: Mon 04 May 2026 02:20:42 +0000
Files and hashes: 1: 5rsDqligwnDrZrPq6yQI__q6Xsc.crl (hash: DMhld8O9UJlSrnIb3hAcUmNpi+J6FgPjAL7RfRF+hoA=)
2: AEF266ECD34811EDAD96D95DC4F9AE02.roa (hash: ftma0mej/dOtkA9i9qpY2iDBlCF8N3tlglYqa45f8z0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl
rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 02:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D2BF, serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7
Validity
Not Before: Apr 27 02:20:42 2026 GMT
Not After : May 4 02:20:42 2026 GMT
Subject: CN=69eec7fa-3a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e6:a3:5c:95:f3:76:7d:a4:49:c9:ac:b4:85:
10:2d:6d:51:f6:fc:0f:0f:3a:c0:f8:25:01:c8:65:
fc:6a:61:c5:b1:ed:1f:b3:fe:6c:ab:4a:d4:97:c3:
72:a8:25:6c:5d:bf:db:6a:b2:04:fc:27:ef:27:48:
6e:79:6e:c1:01:72:a2:a5:db:c2:c0:65:66:da:7c:
3b:b3:66:03:ae:0d:90:d7:f4:04:9d:90:06:20:73:
52:51:79:a7:c3:f4:eb:6e:a8:ab:31:24:3a:f5:f4:
4a:ca:86:6d:c8:35:e1:13:f9:ea:d8:71:10:92:49:
44:68:78:8c:51:c8:b8:fa:ae:aa:a6:be:71:aa:5c:
13:ea:f0:e5:09:04:b0:ab:07:45:be:22:ca:cb:c2:
e4:de:0f:ee:f9:59:32:e0:36:04:0d:7d:f8:6b:f7:
40:28:6d:73:89:73:06:5e:1b:96:c7:28:49:a4:4e:
ad:80:a3:e9:05:93:46:51:87:5b:9a:80:55:be:f9:
ba:42:fd:55:28:99:8d:0d:3c:5d:eb:24:7c:e0:b3:
a9:be:e6:d6:90:74:74:71:42:cf:e5:cd:4e:8b:b5:
5c:28:7b:1b:39:67:93:b1:48:20:cb:26:06:da:1c:
47:94:ac:c7:7a:cd:15:2b:d0:40:d5:40:9c:5f:83:
06:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1A:E2:CC:41:12:BE:B1:77:88:78:E3:F1:25:2F:27:DB:79:5E:D7
X509v3 Authority Key Identifier:
keyid:E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:e3:43:6a:ff:0b:99:cf:35:ff:ad:5c:e5:4b:24:85:43:df:
18:f5:de:df:10:46:00:18:f4:e9:9c:08:08:c8:af:39:9b:c5:
9c:de:cc:e4:13:9f:dc:fe:0b:19:48:74:3b:d4:af:53:f9:26:
7c:df:4b:d5:68:ba:e6:54:df:5c:c2:f2:89:99:66:c5:3c:ab:
e3:39:f6:15:76:1f:96:fe:30:c2:bb:02:bb:22:65:82:10:13:
98:15:91:df:98:71:61:d2:84:9c:96:45:0d:b6:ba:a8:ab:d1:
61:bf:6d:f7:b1:41:f5:71:d7:18:76:c9:1b:3f:45:ea:15:e0:
37:90:f6:b1:52:82:1b:40:0e:84:97:14:c7:b4:d4:1a:ed:b1:
19:02:80:b3:e0:14:c6:14:0b:d0:90:a1:d4:7e:a0:bf:7a:78:
c2:5a:97:1d:01:9a:4e:96:71:15:22:31:87:de:0b:3f:3e:44:
f4:c9:74:ff:b9:fc:18:c1:ee:8e:79:b8:cb:79:d8:9a:a3:bf:
39:42:9f:5f:b3:84:c0:13:76:dc:19:f1:94:7e:03:5c:bc:b9:
a8:b0:7e:84:2d:89:83:d9:5e:40:66:59:3a:66:ef:ff:d8:6c:
f1:5b:e5:41:ac:78:ce:2c:e7:72:3c:71:82:ba:c7:39:34:ad:
7f:c2:8d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:52:47 2026 by rpki-client