
$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
File: s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft (raw, json)
Hash identifier: UUwaZbe+SWYS4p5KASUZMMbbj4qxiJdEKTAC0xwvWc8=
Subject key identifier: AE:2F:E3:E7:DE:13:DC:F2:33:06:16:9E:BC:DF:9F:96:58:76:4A:26
Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
Certificate issuer: /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Certificate serial: 01F6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
Manifest number: 01E4
Signing time: Fri 17 Jul 2026 04:36:49 +0000
Manifest this update: Fri 17 Jul 2026 04:36:49 +0000
Manifest next update: Fri 24 Jul 2026 04:36:49 +0000
Files and hashes: 1: s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl (hash: daIzHlYPAbB8MAnI7LTUg3IFux7C4k2SAXPrN08X0Kg=)
2: A97CBD42A06611EFA888B57DC4F9AE02.roa (hash: 4V1R4yBz9L+Ygkp9Jd1O9idd1/44LPhkeQiPf1Qbp1Q=)
3: 762CACD0B04311EF95390327C4F9AE02.roa (hash: cvBldBadb8nJSATgwrsmCmmppZB2HYAM+GSD2SpFaCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl
rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 04:36:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502 (0x1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917530D, serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Validity
Not Before: Jul 17 04:36:49 2026 GMT
Not After : Jul 24 04:36:49 2026 GMT
Subject: CN=6a59b161-59db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:32:1f:3d:fb:8b:81:f7:32:f6:55:63:10:ff:
47:cd:7d:aa:0b:10:d4:4b:09:2e:03:30:88:80:a4:
ca:54:fa:8e:17:40:98:ed:04:c5:a1:e2:d9:bc:4f:
20:0c:cf:a4:23:bc:a8:6b:0f:d3:c3:f9:cf:2b:c8:
ba:04:e6:57:e6:1e:e0:55:04:68:91:c7:71:0c:5c:
7b:f0:5f:43:69:2b:71:cb:69:fc:dc:1e:c0:5a:f4:
17:04:8a:f1:26:d0:68:2f:dd:23:44:32:9f:bd:9e:
75:7d:12:99:3e:28:68:f5:6f:21:c1:62:2d:70:c1:
3c:7d:95:bc:5a:08:70:8b:37:a2:82:1f:9e:84:65:
95:2a:12:36:a9:37:a4:d9:8a:95:3a:05:a6:01:d4:
b4:ba:2e:f8:e1:2f:2f:ee:c3:f6:30:42:94:fb:83:
74:52:91:82:78:06:d7:31:70:3c:68:d8:e4:c9:7a:
6c:e1:f9:4b:e1:0c:c8:b8:bc:66:4c:52:90:62:be:
0e:45:ea:21:b1:b2:92:3c:89:da:5a:ab:c7:48:61:
d9:dd:65:98:14:35:1b:d6:6c:63:92:57:b0:15:df:
f8:c1:6b:49:9c:d0:69:aa:dc:7d:81:c4:c2:51:4b:
b7:51:4d:ea:fc:0c:fc:a6:60:6f:6f:2a:da:2e:5c:
b9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2F:E3:E7:DE:13:DC:F2:33:06:16:9E:BC:DF:9F:96:58:76:4A:26
X509v3 Authority Key Identifier:
keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:73:4f:8a:65:f3:96:b6:95:62:31:6e:5d:6a:0d:a8:02:d6:
62:f2:f2:ce:f1:3f:6e:5b:22:6e:cb:02:d6:96:20:84:a2:e2:
a0:84:3d:ed:da:c2:d8:c4:c1:77:87:57:87:aa:c5:db:40:46:
27:fa:95:b3:00:72:35:ef:c8:bf:63:e0:11:71:31:a4:62:4f:
9f:6a:da:91:f4:dd:18:96:c1:fa:87:5c:89:bf:a6:9a:f7:36:
cd:7c:cb:ca:3d:6d:ce:a5:8c:69:cd:23:23:00:22:85:8c:aa:
3b:ca:f7:c7:a8:8d:52:48:60:bf:1b:9f:bc:6d:00:28:a3:91:
31:15:1f:53:81:bd:94:bc:f7:f2:12:64:f3:61:cb:03:e0:42:
6d:6f:e8:17:f2:6a:cd:a3:fc:41:56:59:d7:4b:67:68:a9:6a:
9d:bf:21:29:36:2a:3a:a5:50:30:ae:52:a4:9d:6a:08:63:46:
e1:27:3e:99:d0:96:1e:58:20:cb:88:d0:47:33:4c:e1:37:d2:
93:37:b4:3f:84:2c:bf:d9:33:8e:97:de:78:87:1a:00:c3:e9:
d1:68:be:da:14:36:a9:df:2d:7a:01:0c:6d:e1:fa:f6:a6:ed:
03:f0:97:06:c5:03:79:08:33:d8:82:3d:fe:f2:49:2e:e8:ef:
6f:23:53:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:24:14 2026 by rpki-client