
$ rpki-client -vvf rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
File: 5K6ANyqGeYe7Kgq74RCrgENw1eM.mft (raw, json)
Hash identifier: D0aB028f6Pq38qhejoxfqUznCr8zYJdVbprjx3FbDNw=
Subject key identifier: 59:48:29:9A:80:C8:64:A8:50:9B:B1:13:E8:6A:1A:5F:11:8F:8B:95
Authority key identifier: E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
Certificate issuer: /CN=A917452D/serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Certificate serial: 03B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
Manifest number: 0331
Signing time: Sat 07 Mar 2026 01:05:13 +0000
Manifest this update: Sat 07 Mar 2026 01:05:13 +0000
Manifest next update: Sat 14 Mar 2026 01:05:13 +0000
Files and hashes: 1: 5K6ANyqGeYe7Kgq74RCrgENw1eM.crl (hash: ETqyOk6k4jk+EBj11b+oDhapRabbPGUDFLsZop7eaD0=)
2: 10B04C9853D411EFB53AD61CC4F9AE02.roa (hash: TaXp1xs0fHIGcbbMRsW0b96QsUKlV9OQZhZUz5rKIOE=)
3: 7D96BB10A96B11F09DD07C12C4F9AE02.roa (hash: 2RTgLoy0RD3Ypi83mkCGJfdMp3piRyK+gquTLVUemeE=)
4: AA71F05C60EF11EF8D645D72C4F9AE02.roa (hash: swmukQ/6inpZ4FJ1TMTK1/37WsZOejfr5bfE8ReGGHI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl
rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 01:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 944 (0x3b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917452D, serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Validity
Not Before: Mar 7 01:05:13 2026 GMT
Not After : Mar 14 01:05:13 2026 GMT
Subject: CN=69ab79c9-ef9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:87:95:12:f0:b5:51:88:76:04:de:d7:05:61:
e7:66:fd:bb:2c:b2:45:3f:9a:48:ba:a4:fd:73:64:
32:22:97:2a:eb:8d:c0:7c:87:77:a2:6c:92:2a:a0:
ba:d3:bf:15:16:ba:2a:29:e2:88:c6:74:32:ae:00:
ab:52:70:82:01:c0:9d:0d:75:e8:72:17:f0:1b:7c:
14:56:fd:69:ac:f0:2f:86:d4:32:d6:c1:95:f8:98:
bf:23:d4:10:0f:46:ca:9c:5e:11:f4:c0:1a:56:c3:
f6:f1:63:fc:2c:08:92:1b:76:dd:15:d3:47:b0:c8:
37:b7:5b:3b:9b:04:fa:86:c9:d0:c3:52:51:f6:17:
7f:65:88:28:33:d2:4b:c5:61:6c:d9:83:c8:9e:47:
7b:13:d6:df:60:38:72:23:21:4c:85:e4:ad:81:3e:
93:a9:da:e8:a0:75:02:8e:d1:4b:99:af:b5:5a:84:
a7:ad:15:aa:5b:b0:bb:32:b1:08:46:02:de:18:7f:
38:0b:2d:b5:42:0d:d8:7b:eb:d5:61:0d:53:40:45:
62:cc:8c:30:3b:29:f1:37:58:54:7d:db:77:fd:21:
61:ce:3d:ce:61:40:7e:75:fa:08:cb:d4:de:62:ce:
7a:67:b0:e2:b6:4f:a0:44:92:08:b0:72:4f:ec:e2:
69:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:48:29:9A:80:C8:64:A8:50:9B:B1:13:E8:6A:1A:5F:11:8F:8B:95
X509v3 Authority Key Identifier:
keyid:E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:61:ab:09:29:14:8a:8e:b5:d9:3c:55:b3:3d:64:31:10:27:
79:e8:63:da:bc:94:00:fa:a2:21:68:02:db:84:e5:11:9c:f2:
27:10:e7:a4:89:6d:83:d5:dc:f6:c3:ff:47:1c:c9:41:15:6b:
3d:16:fd:ca:75:4f:ab:bf:de:05:cc:7a:e7:e2:59:01:2f:52:
df:de:5f:4f:84:95:98:88:8d:1f:06:8f:36:e7:a4:f3:e1:0a:
a3:8e:4a:19:2a:d5:41:7d:d0:ba:06:47:3d:e6:be:09:ff:aa:
85:cb:ff:93:9a:a5:52:1c:26:e6:50:c5:6b:e3:d9:a6:5a:e6:
80:0c:8c:50:ce:6b:49:39:66:6c:84:fb:cd:48:46:b2:37:2b:
14:8c:df:ce:5f:5e:a1:bd:ad:18:a8:32:3d:ac:5a:23:47:b2:
1b:f0:b3:16:73:90:2a:8a:59:ae:1e:c3:11:80:c7:53:19:69:
af:4a:50:e1:2a:28:49:94:13:d6:93:c6:4e:6f:9b:3b:45:73:
59:ec:46:d7:bc:0a:33:c0:61:6a:07:07:a6:27:79:6b:9c:9f:
8f:ce:94:53:f3:8b:1d:a2:41:98:94:86:bc:32:45:05:6b:bc:
85:45:81:4e:2c:b1:fd:43:85:03:30:17:29:ee:81:0c:ed:14:
03:7c:5f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 18:23:36 2026 by rpki-client