
$ rpki-client -vvf rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
File: P5mfuMEae4Z_G_n5nKHCaglVK34.mft (raw, json)
Hash identifier: TDFaOTN/xJaZg1VI2UT+WI65hJoY9dVpbft+8CtGdks=
Subject key identifier: 41:DE:31:68:27:BE:8C:F6:F2:B5:46:E7:AF:67:35:1E:82:D3:21:58
Authority key identifier: 3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E
Certificate issuer: /CN=A917429C/serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E
Certificate serial: 0248
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
Manifest number: 0242
Signing time: Wed 19 Aug 2026 03:03:58 +0000
Manifest this update: Wed 19 Aug 2026 03:03:57 +0000
Manifest next update: Wed 26 Aug 2026 03:03:57 +0000
Files and hashes: 1: P5mfuMEae4Z_G_n5nKHCaglVK34.crl (hash: WLXbiQCEgISXOltja/0r+KCR0IizGXaDOGfgdHAsz9U=)
2: D41F53D48DC011EEB2B3600BC4F9AE02.roa (hash: tPyAwiQAg+johnabIh5EJJpG8jXtHq7a+F5Zf4Rm4WI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl
rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 584 (0x248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917429C, serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E
Validity
Not Before: Aug 19 03:03:57 2026 GMT
Not After : Aug 26 03:03:57 2026 GMT
Subject: CN=6a851d1e-975c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:3e:c5:2e:21:38:ff:eb:6d:26:89:30:98:
af:ad:11:da:76:3e:cb:25:fd:52:f2:0a:41:63:3d:
ae:79:6c:3d:7a:76:ff:85:10:63:97:3b:93:e3:0f:
21:2a:31:78:61:34:9e:19:9c:36:39:c9:16:b6:34:
16:2d:29:53:76:0b:c1:73:e5:f5:86:c4:bf:2c:7e:
41:26:15:e4:49:6e:f5:50:5f:3a:08:29:2c:07:86:
11:43:a1:06:cd:2e:69:5a:47:84:96:15:a9:f2:0c:
46:e4:a1:43:e6:4a:ed:77:42:46:05:2f:cc:24:fc:
aa:da:ce:90:d3:6c:76:52:15:8d:c1:b3:f0:2b:cb:
d6:9f:ab:97:c2:b3:37:f3:b7:98:82:22:97:f0:95:
b4:5c:d8:a9:1c:44:01:35:23:08:2b:d4:0c:e7:1a:
6a:1b:4a:43:a0:2d:24:cf:d1:1a:28:5c:fc:08:e7:
fb:de:81:42:3f:89:54:67:6a:5f:cb:be:53:f5:25:
34:05:2f:c2:43:92:b8:b8:97:34:3f:82:95:c4:ec:
04:0a:10:28:92:2e:72:70:56:13:fe:3c:64:35:11:
e4:8f:fe:af:76:98:6a:26:2f:c6:a4:91:31:03:9a:
ce:c3:0d:6b:f8:cc:e5:e5:41:4c:8c:a4:49:88:7d:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DE:31:68:27:BE:8C:F6:F2:B5:46:E7:AF:67:35:1E:82:D3:21:58
X509v3 Authority Key Identifier:
keyid:3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d8:a3:f2:ec:7d:5e:ed:ce:c1:d5:8b:26:8f:4c:24:f4:fb:
13:e9:de:0b:9b:66:e5:c7:55:e8:41:d7:99:4c:a4:99:85:70:
c9:61:4f:a6:3b:e1:c6:3a:6d:af:95:bf:5d:0e:82:2b:70:ec:
df:a6:f6:49:d5:da:22:3b:92:7d:42:28:09:7a:57:10:fe:bd:
93:13:7c:12:3a:91:eb:5f:e9:46:d9:af:1e:ee:26:04:85:ad:
27:e6:1b:f0:32:40:cb:5f:03:6d:36:cb:60:8c:8d:8b:dc:08:
c3:71:e1:e2:1a:08:25:ba:fd:84:9b:39:de:bd:d6:ac:5f:b7:
23:a0:de:88:1d:13:a7:53:0d:87:39:34:da:04:58:12:33:66:
1d:36:2b:bb:0a:f4:bc:68:71:85:67:02:4a:6b:2b:24:60:f6:
cb:66:6d:2a:d7:67:18:da:29:0a:9d:2b:61:63:bc:91:2f:03:
20:08:6e:39:8b:64:5c:a6:a2:e2:d7:65:7f:b2:64:83:e3:73:
43:af:25:b1:ff:b9:16:0a:32:7d:61:1f:41:82:a4:62:82:06:
48:68:08:ad:d5:06:39:ce:54:ad:0d:af:8b:88:ae:8a:98:eb:
f4:d0:d1:0c:ff:a9:59:87:eb:1a:62:a9:d1:d9:1f:77:91:30:
ff:7f:98:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:32 2026 by rpki-client