
$ rpki-client -vvf rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
File: 5K6ANyqGeYe7Kgq74RCrgENw1eM.mft (raw, json)
Hash identifier: ccY4YWsksckjs39GAokm+5LidS92lgAalixsTZPeRQA=
Subject key identifier: 9B:B9:B9:E7:40:14:5E:22:9E:90:F3:63:1E:6B:54:D4:1F:12:70:8B
Authority key identifier: E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
Certificate issuer: /CN=A917452D/serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Certificate serial: 03C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
Manifest number: 0348
Signing time: Tue 21 Apr 2026 01:15:18 +0000
Manifest this update: Tue 21 Apr 2026 01:15:17 +0000
Manifest next update: Tue 28 Apr 2026 01:15:17 +0000
Files and hashes: 1: 5K6ANyqGeYe7Kgq74RCrgENw1eM.crl (hash: kJtEGeN5ZB0b4gDtQ4kCigGFPH+vaeQsjyvROq8xOVs=)
2: 10B04C9853D411EFB53AD61CC4F9AE02.roa (hash: TaXp1xs0fHIGcbbMRsW0b96QsUKlV9OQZhZUz5rKIOE=)
3: 7D96BB10A96B11F09DD07C12C4F9AE02.roa (hash: 2RTgLoy0RD3Ypi83mkCGJfdMp3piRyK+gquTLVUemeE=)
4: AA71F05C60EF11EF8D645D72C4F9AE02.roa (hash: swmukQ/6inpZ4FJ1TMTK1/37WsZOejfr5bfE8ReGGHI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl
rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 01:15:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 967 (0x3c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917452D, serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Validity
Not Before: Apr 21 01:15:17 2026 GMT
Not After : Apr 28 01:15:17 2026 GMT
Subject: CN=69e6cfa6-fec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:df:e6:ec:e3:d9:07:23:92:b4:9a:55:f1:b5:
aa:fc:e3:ed:e1:62:8e:ac:f1:41:ba:df:b5:3e:bb:
6f:84:bb:fd:ad:b8:73:55:05:e9:8d:2f:83:86:c6:
12:35:32:8d:87:38:6e:c5:29:47:5e:e5:61:14:a0:
fd:ef:9c:38:a0:4f:f2:9a:16:a9:47:17:d3:02:b7:
55:17:58:5f:00:50:e9:51:76:2a:ac:40:dd:78:22:
36:95:d4:fb:bf:61:1b:ff:41:fb:82:f9:f1:f7:9f:
ba:8b:3c:4a:7d:98:13:44:86:07:0e:c2:33:37:50:
78:21:75:82:9a:0f:bd:4c:b9:04:ae:9b:c9:06:99:
6a:c7:5f:d3:c5:9c:b4:df:37:5b:ec:d1:2f:72:ad:
57:31:7d:8e:ba:a1:f4:1a:d9:35:71:77:e0:4f:9b:
ff:c7:b5:55:87:b9:93:80:02:1b:bc:ab:b1:0b:70:
26:c9:55:6b:36:54:a2:f2:75:95:b1:d6:cf:99:18:
8a:01:24:60:02:43:d3:70:f2:be:1a:21:12:ec:4e:
d8:93:d3:50:e2:30:b7:11:2d:af:78:84:91:2d:c4:
3b:21:17:12:96:75:b1:8c:e0:e2:b1:cf:c8:fa:f3:
9b:30:d1:d3:81:a3:3b:a3:fb:d7:7f:9a:de:21:7b:
72:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B9:B9:E7:40:14:5E:22:9E:90:F3:63:1E:6B:54:D4:1F:12:70:8B
X509v3 Authority Key Identifier:
keyid:E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f5:ac:2a:85:47:7d:59:97:60:16:31:f1:5a:35:bc:60:d9:
65:a9:96:83:08:02:d1:3e:a9:58:cf:38:01:39:cc:10:e3:81:
ea:e0:43:41:10:f9:f9:2f:98:07:fd:b5:94:55:4b:2a:91:71:
df:24:01:cb:69:0b:78:e6:5b:d2:28:21:1c:da:c8:cb:3b:27:
1e:d1:cd:9f:e9:3e:55:c5:67:56:35:48:f1:4b:1b:d5:65:6f:
72:90:65:0f:35:f4:a5:c9:26:4e:17:df:9e:6b:76:35:2e:c6:
00:bb:e2:b3:75:53:64:7f:89:06:78:c9:b1:7c:16:e0:98:32:
5b:26:53:95:3c:ea:18:31:22:96:d0:90:c9:5e:7e:70:b7:f2:
93:00:80:a0:68:be:60:f4:6e:c1:c8:68:1f:3b:7e:bf:32:00:
d5:bf:4a:48:23:d4:c0:24:2b:d9:63:dd:fb:0a:bf:80:5d:be:
1c:a5:7b:ac:5a:ce:58:99:15:51:71:c5:36:37:37:bf:6e:63:
2e:56:4d:d8:dc:99:7c:fa:e4:19:89:0d:1d:9e:82:e0:14:26:
e6:47:10:cd:cd:c7:6b:90:dc:1e:3a:47:17:c7:c2:79:4f:9f:
f4:a3:92:a2:30:c8:9c:4d:a2:3b:dc:47:5e:71:66:0f:5e:df:
90:4f:c0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:09:41 2026 by rpki-client