
$ rpki-client -vvf rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
File: P5mfuMEae4Z_G_n5nKHCaglVK34.mft (raw, json)
Hash identifier: ZBUKQw6e2xluI+3d62P9VmZviCy37Jpdqa6okp/c4IY=
Subject key identifier: 4B:9F:83:21:A7:AE:E1:0A:C5:89:99:46:EA:E8:26:AA:FC:1B:AD:72
Authority key identifier: 3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E
Certificate issuer: /CN=A917429C/serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E
Certificate serial: 0218
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
Manifest number: 0213
Signing time: Thu 21 May 2026 02:59:35 +0000
Manifest this update: Thu 21 May 2026 02:59:35 +0000
Manifest next update: Thu 28 May 2026 02:59:35 +0000
Files and hashes: 1: P5mfuMEae4Z_G_n5nKHCaglVK34.crl (hash: VOodOsQhl3j5Cm9nX4FJ7wpO4BQhRtA7/++UBiyYn28=)
2: D41F53D48DC011EEB2B3600BC4F9AE02.roa (hash: +o/nFF9YcRFxpnVGXo6IbySuNz1oT8+gBrDzhbaViHc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl
rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 536 (0x218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917429C, serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E
Validity
Not Before: May 21 02:59:35 2026 GMT
Not After : May 28 02:59:35 2026 GMT
Subject: CN=6a0e7517-a2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f2:cf:3c:64:cf:36:78:b9:1e:83:c7:6b:40:
1f:94:25:42:90:68:d4:68:50:1a:a0:92:b7:33:bb:
78:ac:ac:24:0b:17:1b:24:4b:43:4a:6b:58:2d:2e:
a5:4e:84:c4:9d:18:4e:96:03:f6:0f:5e:4d:d0:01:
19:8f:9b:9e:53:e2:04:2e:47:52:8b:52:0e:1c:b8:
7c:8c:9f:9b:b8:62:f7:d9:12:85:f4:80:22:e7:bb:
64:0a:9a:f9:0f:e3:ad:fd:81:d2:07:50:2e:61:2a:
88:5c:18:72:7e:19:ea:49:c9:49:08:8e:36:bb:13:
7d:18:62:2f:08:10:e3:d6:d3:67:24:72:82:08:2e:
b7:61:9a:66:fc:42:eb:ab:51:d9:34:84:b5:89:80:
07:9c:a2:cb:3f:56:da:45:0f:20:9b:ea:c2:63:dd:
46:30:a6:48:00:b9:a3:58:88:d9:62:96:a0:27:cd:
a2:9d:e1:3b:10:20:f8:cb:4d:bf:56:2a:60:f7:a1:
85:9d:96:dc:12:16:61:ab:b2:a9:ee:5d:54:ee:ec:
9e:ae:ee:c5:ca:e0:33:b7:30:38:fb:a8:f6:38:e3:
07:0f:3f:c0:6f:d2:41:2f:67:e6:20:7a:c5:7c:42:
98:a8:5b:78:aa:6f:94:40:32:cc:cb:5e:ea:f4:18:
86:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9F:83:21:A7:AE:E1:0A:C5:89:99:46:EA:E8:26:AA:FC:1B:AD:72
X509v3 Authority Key Identifier:
keyid:3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:c7:73:a2:82:f6:e0:4e:d1:d2:04:9b:c5:45:f5:43:ca:ec:
f6:6b:2c:aa:2f:bb:bc:8c:97:b2:d9:8c:69:d3:28:41:0e:b2:
97:87:7d:40:51:7f:f4:a7:36:e7:cc:1e:19:75:60:cf:6d:50:
89:f9:cf:e5:50:7e:73:1d:f4:e5:7d:8c:98:6c:9e:6c:57:64:
64:20:9f:12:ba:75:be:7d:3b:54:b9:cd:99:f7:fe:d3:c0:63:
20:58:7d:8a:f8:c7:70:95:a7:95:a2:00:b0:30:79:0c:90:57:
1b:07:a2:c6:cb:a2:3a:93:6a:f8:ed:5e:2b:d2:d6:0e:bf:32:
e6:7e:b1:50:46:a3:40:2c:e5:92:01:0b:b8:73:40:f1:09:e1:
b4:21:42:4f:77:00:47:48:0e:ed:7d:11:e4:c5:f5:ac:05:ad:
81:16:01:a5:ff:e2:e4:64:c9:92:79:ec:b3:ad:57:e8:ff:a4:
49:03:7a:bf:ba:c4:c3:70:2b:a0:5d:81:77:0e:33:84:67:a4:
e0:e5:4a:c4:c4:b8:01:99:c1:b1:82:e5:53:81:26:94:fa:c5:
91:31:95:16:9e:69:59:fa:ed:65:e5:75:5a:39:84:6c:ac:b0:
62:d0:44:eb:b9:99:ce:f7:4a:d2:d7:88:c6:d6:61:96:bc:eb:
e7:bf:b1:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQyOUMxMTAvBgNVBAUTKDNGOTk5RkI4QzExQTdCODY3RjFCRjlGOTlDQTFDMjZB
MDk1NTJCN0UwHhcNMjYwNTIxMDI1OTM1WhcNMjYwNTI4MDI1OTM1WjAYMRYwFAYD
VQQDEw02YTBlNzUxNy1hMmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkvLPPGTPNni5HoPHa0AflCVCkGjUaFAaoJK3M7t4rKwkCxcbJEtDSmtYLS6l
ToTEnRhOlgP2D15N0AEZj5ueU+IELkdSi1IOHLh8jJ+buGL32RKF9IAi57tkCpr5
D+Ot/YHSB1AuYSqIXBhyfhnqSclJCI42uxN9GGIvCBDj1tNnJHKCCC63YZpm/ELr
q1HZNIS1iYAHnKLLP1baRQ8gm+rCY91GMKZIALmjWIjZYpagJ82ineE7ECD4y02/
Vipg96GFnZbcEhZhq7Kp7l1U7uyeru7FyuAztzA4+6j2OOMHDz/Ab9JBL2fmIHrF
fEKYqFt4qm+UQDLMy17q9BiG1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEufgyGn
ruEKxYmZRuroJqr8G61yMB8GA1UdIwQYMBaAFD+Zn7jBGnuGfxv5+ZyhwmoJVSt+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDI5Qy8wRjE3MkREMjMw
MjgxMUVFOTM0QThEMENDNEY5QUUwMi9QNW1mdU1FYWU0Wl9HX241bktIQ2FnbFZL
MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1A1bWZ1TUVhZTRaX0dfbjVuS0hDYWdsVkszNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NDI5Qy8wRjE3MkREMjMwMjgxMUVFOTM0QThEMENDNEY5QUUwMi9QNW1mdU1FYWU0
Wl9HX241bktIQ2FnbFZLMzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVsdzooL24E7R0gSbxUX1Q8rs9mssqi+7vIyXstmMadMoQQ6yl4d9QFF/9Kc2
58weGXVgz21QifnP5VB+cx305X2MmGyebFdkZCCfErp1vn07VLnNmff+08BjIFh9
ivjHcJWnlaIAsDB5DJBXGweixsuiOpNq+O1eK9LWDr8y5n6xUEajQCzlkgELuHNA
8QnhtCFCT3cAR0gO7X0R5MX1rAWtgRYBpf/i5GTJknnss61X6P+kSQN6v7rEw3Ar
oF2Bdw4zhGek4OVKxMS4AZnBsYLlU4EmlPrFkTGVFp5pWfrtZeV1WjmEbKywYtBE
67mZzvdK0teIxtZhlrzr57+xlw==
-----END CERTIFICATE-----
Generated at Thu May 21 14:13:41 2026 by rpki-client