
$ rpki-client -vvf rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
File: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft (raw, json)
Hash identifier: iKUiMGOzjzrhUdz4KljG4N+zvyD9tSQDbH9onL47yUI=
Subject key identifier: 61:8E:FA:89:02:A8:F7:35:EE:C9:4E:56:C4:07:32:78:3A:28:05:F9
Authority key identifier: E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69
Certificate issuer: /CN=A916148F/serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569
Certificate serial: 032C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
Manifest number: 0327
Signing time: Sun 05 Apr 2026 00:50:38 +0000
Manifest this update: Sun 05 Apr 2026 00:50:37 +0000
Manifest next update: Sun 12 Apr 2026 00:50:37 +0000
Files and hashes: 1: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl (hash: HrgajBSphnCmq9vlq+EyL6f47gLG8M0DPBfZKkw/M+E=)
2: E757164C074511EDB229157DC4F9AE02.roa (hash: Bjnc4EakQapdCARIIa5nan+FIy1tiCXArToRM95Qc7Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl
rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:50:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 812 (0x32c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916148F, serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569
Validity
Not Before: Apr 5 00:50:37 2026 GMT
Not After : Apr 12 00:50:37 2026 GMT
Subject: CN=69d1b1de-d972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:30:61:5c:df:6e:e3:eb:fd:a8:54:b9:d5:ba:
ce:62:82:8a:76:19:58:b3:ae:7c:52:fc:6d:ce:6a:
a9:da:52:2b:c3:e2:db:20:bf:57:bc:67:0c:3b:5b:
40:99:96:20:d5:99:e1:4c:0a:a6:ba:26:94:82:93:
56:72:76:94:79:c0:3e:78:3a:f7:d4:2a:f5:8b:15:
f6:37:86:b1:6b:41:3a:b4:63:aa:4a:6b:1c:cf:61:
9e:9c:c1:0c:c7:6e:79:6b:79:b4:7f:32:28:2c:3d:
55:18:9f:a1:39:be:cd:6e:0f:5e:86:e7:4b:a3:18:
b8:48:e8:ca:b4:f2:fb:4e:bf:5b:ef:05:fe:c7:3f:
91:68:17:59:d0:51:5d:97:a5:c0:04:7a:50:60:0d:
f8:f2:c8:b2:c9:48:20:ab:22:61:8b:76:42:74:5f:
11:b3:4e:92:2e:cf:e4:1c:03:2f:8e:7d:31:90:87:
f2:e9:9e:ac:20:a5:f9:14:da:d7:bc:3c:cc:61:95:
07:4a:f6:ce:e9:08:8e:2b:f2:62:e0:f7:c9:ae:eb:
1d:1d:67:43:9e:5f:f8:14:f6:68:37:ac:a6:21:f8:
86:c5:29:cb:40:50:bd:fc:f4:d8:bd:e7:cd:60:00:
b4:84:0f:e5:61:1d:80:c1:f7:68:ab:15:ed:27:2d:
f4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8E:FA:89:02:A8:F7:35:EE:C9:4E:56:C4:07:32:78:3A:28:05:F9
X509v3 Authority Key Identifier:
keyid:E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:2e:88:81:eb:40:10:d3:de:b9:45:6f:e0:94:9b:bc:09:92:
ef:48:24:83:78:75:c1:5b:cf:5b:24:4b:82:0f:3d:63:b0:26:
a6:6f:18:1a:69:c5:e3:37:42:fa:2a:2f:d1:fd:ad:e1:96:8a:
d8:e7:23:c1:68:03:97:d3:85:e6:e5:3c:26:02:e0:27:ca:13:
4e:00:ba:0c:fb:97:1f:e6:8a:c3:ca:8e:74:9e:b6:3e:21:28:
4e:a1:13:4d:07:8b:63:04:cb:94:fc:bc:08:c6:d2:03:b1:8e:
0d:b3:c3:4b:2f:a7:25:f8:af:54:19:24:29:10:03:c0:b3:46:
ef:3b:97:60:48:e5:e1:0f:a0:c7:b9:63:ac:cb:87:5d:d1:f4:
f9:00:c4:12:f8:e4:77:62:df:49:74:96:d5:e6:a3:01:3d:af:
02:f6:6f:38:4f:96:45:fa:0e:99:11:a0:a8:1e:53:b5:5d:9e:
1a:45:2d:2d:0a:11:74:0f:55:dc:90:79:2b:9d:bc:01:af:1f:
00:51:51:a5:7c:89:82:bd:a0:31:fa:21:da:81:21:2b:03:93:
ca:7f:f8:e4:5a:b1:1e:85:bb:f2:73:63:1e:7c:69:8a:78:89:
6b:bd:5f:f0:ad:80:ae:2e:5c:6b:c1:53:dd:c9:80:4b:6d:9f:
e1:55:46:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:51 2026 by rpki-client