
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.mft
File: p5fXmDuLOcgGaBZGSJrT0fCeD9s.mft (raw, json)
Hash identifier: JHeKg5ae2JFr5tW9TsjKhoPu+p+aLnl9lKSx7UP+VUk=
Subject key identifier: 66:4C:F6:58:E5:93:70:5A:FC:60:E5:36:D1:72:EB:4B:4D:B0:B7:32
Authority key identifier: A7:97:D7:98:3B:8B:39:C8:06:68:16:46:48:9A:D3:D1:F0:9E:0F:DB
Certificate issuer: /CN=A916A78A/serialNumber=A797D7983B8B39C806681646489AD3D1F09E0FDB
Certificate serial: 44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5fXmDuLOcgGaBZGSJrT0fCeD9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.mft
Manifest number: 3E
Signing time: Tue 07 Jul 2026 09:50:45 +0000
Manifest this update: Tue 07 Jul 2026 09:50:44 +0000
Manifest next update: Tue 14 Jul 2026 09:50:44 +0000
Files and hashes: 1: p5fXmDuLOcgGaBZGSJrT0fCeD9s.crl (hash: 5vqRkRtDg7xqtdXaZ/f/5gIzIm5FQDzb9rpL4rl02S8=)
2: 0997DA40251811F19187E6B0C0833773.roa (hash: EBehWsJCDzKDmD+oQkR35+7/S/sLkeR1I1PxlnGdMJA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.crl
rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5fXmDuLOcgGaBZGSJrT0fCeD9s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:50:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A78A, serialNumber=A797D7983B8B39C806681646489AD3D1F09E0FDB
Validity
Not Before: Jul 7 09:50:44 2026 GMT
Not After : Jul 14 09:50:44 2026 GMT
Subject: CN=6a4ccbf5-9ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:24:8b:5d:10:90:44:45:08:ba:d9:04:d7:7b:
9b:b6:f4:c2:7e:60:6f:1c:fa:a0:21:2d:60:62:3b:
36:67:cf:26:89:ff:ad:4b:a1:7c:1e:ac:1a:02:5f:
39:d4:d4:87:79:d5:76:d6:95:4d:d0:22:9b:61:c9:
88:7f:5e:a8:c8:de:e5:c0:89:c1:ba:c5:3f:f1:8f:
92:0b:ea:ef:39:f9:e7:09:a9:01:e5:a1:46:27:43:
6e:19:66:63:26:61:32:37:39:d7:c8:26:11:c8:82:
32:46:32:46:dd:d1:98:bc:22:7e:03:d9:4e:98:cb:
1c:52:02:e1:eb:c0:cc:b6:e8:35:dc:ff:e9:c8:fe:
6d:85:72:d0:21:e4:f0:e5:8f:95:73:cd:b2:02:39:
e6:b4:1a:60:10:aa:f5:1e:53:4a:74:4e:c7:3f:e3:
db:c5:19:53:f9:63:9c:65:dc:fe:4f:11:31:39:1e:
f1:3d:4b:f8:0f:30:d7:cf:90:85:af:04:92:a3:a9:
07:e9:17:7a:cc:02:92:51:2a:52:4b:c2:b0:1f:4c:
c8:f3:18:ae:0c:9c:17:2e:c2:4a:0e:fc:a6:8c:3f:
f7:1a:26:45:30:74:20:96:81:e5:39:0d:b9:30:de:
d7:8a:9d:c3:9c:a1:ae:e3:46:bc:12:6b:b0:2c:2e:
0f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4C:F6:58:E5:93:70:5A:FC:60:E5:36:D1:72:EB:4B:4D:B0:B7:32
X509v3 Authority Key Identifier:
keyid:A7:97:D7:98:3B:8B:39:C8:06:68:16:46:48:9A:D3:D1:F0:9E:0F:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5fXmDuLOcgGaBZGSJrT0fCeD9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:5e:d0:6c:35:b5:f3:ca:a2:e3:9c:55:43:ae:ae:7e:7f:9e:
32:9f:ca:9c:fe:f8:33:3c:07:2f:2e:26:82:e4:fc:69:ba:6a:
b7:41:dc:37:b4:c4:04:65:72:25:3d:e0:54:51:f0:31:28:8e:
5d:9e:da:93:dd:e4:d9:2c:da:e9:ad:dc:cb:00:73:ae:0d:4c:
b4:70:f2:86:54:fa:7d:3d:4c:21:23:42:3e:59:fb:10:08:5a:
99:25:b5:2e:99:ff:bf:6a:ed:1c:0e:dd:77:a7:50:dd:66:25:
a2:61:be:f9:e0:2d:13:44:5d:90:72:e2:ab:9e:84:8e:bb:b7:
cd:d8:47:34:40:d9:1a:f6:9f:70:b3:f3:58:78:89:cf:31:35:
76:a6:01:0a:7d:24:9f:71:87:f9:06:56:b9:83:74:33:51:81:
92:8a:f3:05:25:c8:45:7a:3f:56:5a:73:8f:2d:92:c9:74:28:
ab:b8:9c:d0:a0:f3:cd:7f:2c:71:bc:c5:69:01:5b:a7:0a:5c:
80:43:e6:41:4d:69:8e:cb:61:c3:17:7e:73:6d:4c:c3:82:7d:
50:73:7b:f2:93:94:79:c9:c2:4f:31:a6:51:cb:d1:3f:14:27:
5f:08:59:21:04:84:1b:98:6b:19:22:f0:dd:14:d7:b7:53:ef:
c6:76:d6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:03:27 2026 by rpki-client