
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
File: 5vEsD995brDfK2AuWsQsy4OyLhg.mft (raw, json)
Hash identifier: 7A8QMfy3oEkBXdhtQav8MkHKuzfGISLBoAhcet9pnOc=
Subject key identifier: 44:67:8B:01:A9:A7:46:EA:51:1D:28:48:EE:5F:8A:B6:F1:5A:17:43
Authority key identifier: E6:F1:2C:0F:DF:79:6E:B0:DF:2B:60:2E:5A:C4:2C:CB:83:B2:2E:18
Certificate issuer: /CN=A914E3B7/serialNumber=E6F12C0FDF796EB0DF2B602E5AC42CCB83B22E18
Certificate serial: 3527
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
Manifest number: 3524
Signing time: Sat 04 Apr 2026 15:06:31 +0000
Manifest this update: Sat 04 Apr 2026 15:06:31 +0000
Manifest next update: Sat 11 Apr 2026 15:06:31 +0000
Files and hashes: 1: 5vEsD995brDfK2AuWsQsy4OyLhg.crl (hash: BeQclIY0PPCk0MyMo14oW2XoStfNbqYplSAciz0hIpM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.crl
rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:06:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13607 (0x3527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E3B7, serialNumber=E6F12C0FDF796EB0DF2B602E5AC42CCB83B22E18
Validity
Not Before: Apr 4 15:06:31 2026 GMT
Not After : Apr 11 15:06:31 2026 GMT
Subject: CN=69d128f7-b2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:81:a5:c8:62:ef:71:1b:68:cf:72:28:dd:
e1:f8:4b:2b:a6:cd:b5:dd:f7:6c:04:d5:ca:02:52:
b9:f3:41:40:21:c5:59:fe:55:2f:f7:f0:c7:1a:7f:
79:0c:f5:55:87:09:f9:c9:0a:52:dd:ca:77:21:15:
87:aa:5a:0e:49:1c:65:e4:8f:ac:78:1e:dc:57:1d:
b6:34:68:44:89:5a:56:5f:de:19:25:de:18:c3:84:
0d:30:de:7f:87:b9:03:96:00:d3:88:30:11:31:25:
14:ee:46:41:86:8c:3c:9e:de:72:45:47:73:2d:19:
c8:15:b1:6c:75:a9:d6:57:c5:6b:22:92:e7:5b:cc:
c3:aa:be:e3:30:35:0d:97:19:cb:6b:b7:b5:3d:8a:
fd:6b:15:2f:02:0a:30:dc:dc:1d:79:f9:de:4b:f0:
ed:49:c5:39:f2:19:4d:06:39:ac:5b:6a:28:bb:66:
7c:ca:e5:5f:b1:79:00:ea:94:5d:59:37:bb:84:c6:
36:4a:d6:f6:cb:58:aa:fd:1f:f7:11:a2:6b:2f:c3:
cf:10:55:97:12:81:f7:27:27:a2:f7:81:a6:49:33:
ae:97:df:64:c2:41:de:bc:aa:6c:33:55:90:d5:1d:
26:c4:80:34:a4:64:a3:ef:81:3c:c5:a5:02:99:48:
96:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:67:8B:01:A9:A7:46:EA:51:1D:28:48:EE:5F:8A:B6:F1:5A:17:43
X509v3 Authority Key Identifier:
keyid:E6:F1:2C:0F:DF:79:6E:B0:DF:2B:60:2E:5A:C4:2C:CB:83:B2:2E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:91:e5:78:c5:30:60:44:f0:94:ad:d3:ee:7a:7d:e2:b3:6c:
fd:db:46:6f:f5:fa:1a:60:14:0c:1a:fd:5b:5f:c7:5e:db:02:
ec:67:a9:dd:69:34:39:19:6a:8d:b5:cc:c1:7f:95:94:08:0f:
c7:9f:0c:a6:1f:7a:c6:37:91:42:b0:52:0e:6f:04:94:ef:2c:
e7:d9:31:55:cd:55:30:0f:6b:e4:42:20:d8:36:29:84:72:54:
79:10:fd:2b:59:23:58:fd:70:40:7d:cd:bc:f6:e7:88:ec:9e:
06:b6:6c:a7:b5:d3:09:75:01:90:bd:2f:42:cf:9c:ee:3d:d5:
e9:36:e5:f6:61:c7:25:6a:8b:6d:c7:a3:95:5a:8b:39:f4:40:
4f:d0:37:e1:e1:c4:d4:ce:89:5a:32:bf:c9:e3:be:31:92:4f:
82:68:c4:01:4d:78:26:88:4d:cc:dc:16:41:82:8f:7e:51:bc:
88:79:aa:b2:e0:91:50:d4:b7:33:7a:1a:dc:3a:b1:27:05:82:
3b:18:c6:8c:f4:86:2e:67:2a:1d:7e:91:c8:d8:47:80:1c:81:
02:af:42:20:a6:92:9f:a3:32:82:dd:4f:ff:e9:2d:d1:8f:a4:
66:95:7a:1e:4c:2c:cd:28:3a:2e:4a:54:6e:b3:6f:4d:b7:ae:
e9:f2:87:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:35 2026 by rpki-client