
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft
File: 5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft (raw, json)
Hash identifier: 7NfvsJFnt1BjXnOqB+y6LgeW9nUH3JxjjVDuXXolh5s=
Subject key identifier: 76:3F:94:29:05:D0:69:E9:8E:92:39:85:A2:3C:34:1F:84:42:DE:72
Authority key identifier: E4:62:3C:FD:44:3E:62:32:F2:6C:23:E8:1F:DF:97:58:B2:6F:3B:2C
Certificate issuer: /CN=A914F3BA/serialNumber=E4623CFD443E6232F26C23E81FDF9758B26F3B2C
Certificate serial: 0866
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft
Manifest number: 0861
Signing time: Wed 20 May 2026 20:46:24 +0000
Manifest this update: Wed 20 May 2026 20:46:24 +0000
Manifest next update: Wed 27 May 2026 20:46:24 +0000
Files and hashes: 1: 5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl (hash: dzYdWSUBzvQfS9lw7Wt6X8jPNOZGejM7/Iqov6e5gVM=)
2: D0D7EE48343211EFBF2C280DC4F9AE02.roa (hash: QBK2bfGdjPwo4v2ooL/I9Tsc0fhNTGv9YxWDlUwdQKI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl
rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:46:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2150 (0x866)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F3BA, serialNumber=E4623CFD443E6232F26C23E81FDF9758B26F3B2C
Validity
Not Before: May 20 20:46:24 2026 GMT
Not After : May 27 20:46:24 2026 GMT
Subject: CN=6a0e1da0-302e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:87:d1:47:8f:d9:59:dd:b3:4c:f4:9b:b2:
80:d0:69:87:2e:af:ba:96:47:c6:93:65:cb:5c:f3:
9a:ed:00:15:05:2b:07:5a:00:b3:62:d7:1c:29:51:
1e:2d:3a:c0:ec:8d:7a:06:6a:7b:de:50:7a:fc:a0:
34:dc:08:b7:00:e8:24:80:18:a4:aa:aa:84:87:65:
15:3c:b7:e8:37:ed:e4:f4:0c:e7:00:c2:a9:06:ad:
6e:3a:36:2c:92:ec:e0:fc:d8:96:a8:db:b8:19:83:
93:4b:3c:4b:08:b4:6d:f3:da:b0:d0:9c:0a:dd:42:
cf:49:54:06:7c:f2:d1:fc:29:d4:a7:53:f8:49:a4:
be:98:96:c6:a4:85:e6:f8:3b:0b:c6:44:04:a8:2d:
90:7c:ed:ff:4b:3b:51:0b:bf:e6:c3:88:9d:7f:92:
aa:92:4a:b2:f6:81:6c:5c:e0:8a:82:74:69:d5:ab:
86:4d:c1:ab:10:b8:a6:91:fa:f9:e0:7f:2d:83:7d:
4a:df:32:bb:af:5b:ca:cf:4f:11:94:6f:69:0f:b7:
5e:70:5e:13:bd:43:53:16:34:88:40:f7:1a:9d:ce:
05:5c:ce:32:e5:b2:43:b7:df:63:50:0b:b3:17:c7:
ae:be:2b:f5:31:d0:1d:fe:30:2d:7a:cf:83:d2:15:
ab:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3F:94:29:05:D0:69:E9:8E:92:39:85:A2:3C:34:1F:84:42:DE:72
X509v3 Authority Key Identifier:
keyid:E4:62:3C:FD:44:3E:62:32:F2:6C:23:E8:1F:DF:97:58:B2:6F:3B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:a6:a1:1c:36:a9:da:01:65:45:d9:30:da:e6:b3:d8:3c:38:
ce:b1:c5:12:93:5d:6e:71:5e:38:46:12:df:ca:43:41:7a:7c:
23:67:53:0a:9a:6b:82:0a:b0:e8:4f:33:be:c3:d7:69:de:30:
16:b9:6c:9e:1a:be:22:41:a0:43:09:7f:b9:5f:11:e1:0c:42:
cb:6a:e7:53:91:84:b0:e3:11:7f:34:53:fb:c0:2a:e9:d0:d0:
d4:fe:7f:85:60:6c:72:f6:d5:42:16:c1:d1:ce:7d:e8:34:50:
62:f9:a9:be:e9:6d:ed:8e:c4:9b:2e:8a:6c:23:e3:35:0a:e8:
38:c8:6b:42:48:d6:4b:fe:7f:93:8e:96:3c:1b:90:11:32:1d:
4d:25:57:3c:80:24:34:c9:93:e5:8f:ec:e4:c3:42:0a:35:98:
3a:f4:a9:5a:3c:a5:dd:55:84:5b:99:6d:ca:05:5c:d3:0e:ec:
32:49:89:ce:7c:0c:91:29:32:51:3f:9f:cc:93:d2:20:65:a6:
cb:47:9c:4e:88:0c:32:e0:ac:fd:60:7e:ff:6d:94:33:d6:03:
77:61:fa:dc:49:4d:f5:dd:68:a5:b1:36:33:f8:8d:d9:ac:54:
36:04:0f:e1:35:02:bf:75:74:04:78:94:58:96:b8:73:8e:93:
5b:65:40:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:57 2026 by rpki-client