
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
File: 5vEsD995brDfK2AuWsQsy4OyLhg.mft (raw, json)
Hash identifier: 4gRbdK6KrELe/2VPOIFmBUxY+5yU3PwJYEJN+tus1WU=
Subject key identifier: 69:B7:F5:2A:1F:31:3C:B2:18:C0:73:AC:88:2A:57:97:9B:97:2A:4A
Authority key identifier: E6:F1:2C:0F:DF:79:6E:B0:DF:2B:60:2E:5A:C4:2C:CB:83:B2:2E:18
Certificate issuer: /CN=A914E3B7/serialNumber=E6F12C0FDF796EB0DF2B602E5AC42CCB83B22E18
Certificate serial: 356D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
Manifest number: 356A
Signing time: Tue 18 Aug 2026 15:10:53 +0000
Manifest this update: Tue 18 Aug 2026 15:10:52 +0000
Manifest next update: Tue 25 Aug 2026 15:10:52 +0000
Files and hashes: 1: 5vEsD995brDfK2AuWsQsy4OyLhg.crl (hash: FuqSfhOw7nkcpXc+f5uc8iZlFOuqA0gbPecPLwTnnqk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.crl
rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 15:10:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13677 (0x356d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E3B7, serialNumber=E6F12C0FDF796EB0DF2B602E5AC42CCB83B22E18
Validity
Not Before: Aug 18 15:10:52 2026 GMT
Not After : Aug 25 15:10:52 2026 GMT
Subject: CN=6a8475fc-54a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:14:c2:b2:de:8a:5c:7b:e9:13:a8:cc:d4:64:
a0:49:da:59:9b:87:9a:6f:5c:8f:f2:ff:6a:03:3c:
3e:f4:8d:c0:87:94:d7:85:a0:1d:c9:9f:a1:4d:c2:
92:4f:e0:fa:d0:f4:17:d7:0f:5c:60:ca:ae:9e:13:
d5:b0:ea:eb:92:8d:25:cb:77:28:e0:39:fe:57:ce:
58:91:3d:98:78:a5:2b:52:4d:6e:42:f7:34:7b:18:
a4:b2:da:b3:d9:b0:26:15:ff:70:b2:89:d6:da:a9:
71:2b:b2:da:8d:85:76:da:e1:58:2b:ca:aa:18:de:
34:4b:02:cb:0a:f1:fa:ca:1e:24:b0:62:05:e0:dc:
d8:30:e4:20:00:d1:27:d1:22:e3:5c:52:fb:d2:28:
15:b8:3d:3e:35:3d:42:0e:5c:cd:5b:86:d4:e1:ad:
77:9b:22:42:0d:51:b1:fb:98:9a:5a:a6:b6:54:a3:
54:f0:11:cd:fe:ba:e7:ba:57:32:69:a7:97:d8:1d:
cd:88:17:6b:e3:dc:0c:0a:0e:f7:7e:ca:75:be:d6:
c9:6f:3b:fa:2c:5b:df:6b:9a:4d:da:ca:41:79:7a:
87:81:93:6b:88:7d:f9:9d:84:f5:b3:f1:80:08:ed:
72:de:27:e4:a8:b1:44:cd:c2:50:54:fd:bf:14:58:
70:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B7:F5:2A:1F:31:3C:B2:18:C0:73:AC:88:2A:57:97:9B:97:2A:4A
X509v3 Authority Key Identifier:
keyid:E6:F1:2C:0F:DF:79:6E:B0:DF:2B:60:2E:5A:C4:2C:CB:83:B2:2E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:4d:6c:0f:58:0d:28:89:60:10:1e:04:96:8b:c4:ee:21:b6:
3e:07:ea:9f:f1:8c:84:01:a2:df:2b:91:d2:5b:72:91:e7:1a:
79:0d:18:89:8b:3c:c8:4f:da:3a:67:64:22:2c:25:86:9b:e3:
df:86:fc:3e:7a:3a:f5:03:90:9a:0a:55:0a:1e:a9:0c:18:82:
77:85:99:95:df:9b:4f:b8:0c:59:fe:13:d4:f6:a0:7d:73:d1:
50:5d:90:89:09:1a:79:8b:ba:15:c3:b1:d2:75:4a:ea:28:e4:
52:8e:7f:36:fd:88:98:c1:35:a9:ed:5e:6b:6b:46:67:0b:cf:
f5:b1:3b:a2:aa:50:b7:58:2a:bb:28:a4:d7:fa:05:00:47:9e:
d1:90:18:5c:f6:99:93:ae:64:0e:cd:2e:7c:93:2e:0f:f0:f7:
08:c3:de:15:a1:e0:82:08:49:50:38:b9:77:cc:37:eb:79:ae:
4e:5d:46:a4:93:47:a5:12:4f:c6:ea:7a:77:37:ee:8e:cf:82:
85:ae:ec:75:ca:8b:3d:79:11:f0:ae:55:01:80:7f:d0:12:a2:
d8:c0:ae:a5:7d:f7:3e:b3:23:9d:1a:a9:7a:59:64:97:65:ca:
73:22:d1:bf:66:16:8d:6a:0d:76:c1:a6:d2:57:c4:80:2d:bf:
1b:53:c3:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUzQjcxMTAvBgNVBAUTKEU2RjEyQzBGREY3OTZFQjBERjJCNjAyRTVBQzQyQ0NC
ODNCMjJFMTgwHhcNMjYwODE4MTUxMDUyWhcNMjYwODI1MTUxMDUyWjAYMRYwFAYD
VQQDEw02YTg0NzVmYy01NGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmxTCst6KXHvpE6jM1GSgSdpZm4eab1yP8v9qAzw+9I3Ah5TXhaAdyZ+hTcKS
T+D60PQX1w9cYMqunhPVsOrrko0ly3co4Dn+V85YkT2YeKUrUk1uQvc0exikstqz
2bAmFf9wsonW2qlxK7LajYV22uFYK8qqGN40SwLLCvH6yh4ksGIF4NzYMOQgANEn
0SLjXFL70igVuD0+NT1CDlzNW4bU4a13myJCDVGx+5iaWqa2VKNU8BHN/rrnulcy
aaeX2B3NiBdr49wMCg73fsp1vtbJbzv6LFvfa5pN2spBeXqHgZNriH35nYT1s/GA
CO1y3ifkqLFEzcJQVP2/FFhw/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGm39Sof
MTyyGMBzrIgqV5eblypKMB8GA1UdIwQYMBaAFObxLA/feW6w3ytgLlrELMuDsi4Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTNCNy85RkFFODRGQTFE
QTQxMUUyQUMyQkFGOUEwOEIwMkNEMi81dkVzRDk5NWJyRGZLMkF1V3NRc3k0T3lM
aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzV2RXNEOTk1YnJEZksyQXVXc1FzeTRPeUxoZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTNCNy85RkFFODRGQTFEQTQxMUUyQUMyQkFGOUEwOEIwMkNEMi81dkVzRDk5NWJy
RGZLMkF1V3NRc3k0T3lMaGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOk1sD1gNKIlgEB4ElovE7iG2Pgfqn/GMhAGi3yuR0ltykecaeQ0YiYs8yE/a
OmdkIiwlhpvj34b8Pno69QOQmgpVCh6pDBiCd4WZld+bT7gMWf4T1PagfXPRUF2Q
iQkaeYu6FcOx0nVK6ijkUo5/Nv2ImME1qe1ea2tGZwvP9bE7oqpQt1gquyik1/oF
AEee0ZAYXPaZk65kDs0ufJMuD/D3CMPeFaHggghJUDi5d8w363muTl1GpJNHpRJP
xup6dzfujs+Cha7sdcqLPXkR8K5VAYB/0BKi2MCupX33PrMjnRqpellkl2XKcyLR
v2YWjWoNdsGm0lfEgC2/G1PD0g==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:55 2026 by rpki-client