
$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
File: s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft (raw, json)
Hash identifier: ib4Lg0NJQYfvrRU7ZeuHr+LepcsaMNuFLfOkwwPohY4=
Subject key identifier: E1:30:8B:41:CC:7F:53:D6:E5:0D:40:C5:BE:AE:E2:F3:3E:58:24:8D
Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
Certificate issuer: /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Certificate serial: 01E0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
Manifest number: 01CE
Signing time: Mon 01 Jun 2026 04:37:47 +0000
Manifest this update: Mon 01 Jun 2026 04:37:46 +0000
Manifest next update: Mon 08 Jun 2026 04:37:46 +0000
Files and hashes: 1: s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl (hash: N0hB33XT/DCtS9gnBix5QguMvTgyAE0kHUUewNKcyX4=)
2: 762CACD0B04311EF95390327C4F9AE02.roa (hash: cvBldBadb8nJSATgwrsmCmmppZB2HYAM+GSD2SpFaCg=)
3: A97CBD42A06611EFA888B57DC4F9AE02.roa (hash: 4V1R4yBz9L+Ygkp9Jd1O9idd1/44LPhkeQiPf1Qbp1Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl
rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 04:37:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480 (0x1e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917530D, serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Validity
Not Before: Jun 1 04:37:46 2026 GMT
Not After : Jun 8 04:37:46 2026 GMT
Subject: CN=6a1d0c9b-1201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:05:97:d2:3f:5f:d0:6d:5b:4a:b2:0a:c7:1e:
ec:5f:79:e9:69:ad:78:87:5d:fc:e4:31:63:e4:e3:
e3:4b:a9:d2:07:ca:ca:6b:f4:85:8c:2f:e2:3d:25:
91:f2:c6:5f:95:51:73:11:c3:0f:32:87:9d:cd:17:
5b:53:e8:ca:c2:6c:16:f6:5f:b1:10:46:69:cc:66:
45:3f:44:a7:61:d0:99:d8:63:83:17:40:8a:f0:72:
f2:83:e5:dc:58:56:e5:df:29:cf:24:f4:9e:45:5c:
a0:e3:7f:70:10:e4:b1:90:be:8b:c3:4d:b6:f5:9c:
34:b3:2b:42:0d:9b:e9:77:01:d4:49:81:ba:24:90:
2b:2e:84:d7:26:83:6d:71:40:49:30:94:19:9c:97:
26:9b:a7:31:4c:33:15:f0:51:1a:a6:e6:cd:7f:05:
54:6a:54:54:83:c6:f7:61:a8:21:cf:dd:36:7a:e7:
08:42:00:ab:cd:63:6a:2c:8c:de:67:07:f7:43:39:
8d:b9:b0:d4:fb:06:de:ad:4b:3e:8e:48:59:58:59:
5e:93:bc:39:b7:26:da:51:bd:c1:07:a0:e9:76:f6:
90:8b:5e:f5:5f:a9:79:ee:fd:4d:83:7e:77:a3:23:
49:79:ad:0f:e5:d2:c7:af:73:53:8c:f4:c0:a2:f3:
6d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:30:8B:41:CC:7F:53:D6:E5:0D:40:C5:BE:AE:E2:F3:3E:58:24:8D
X509v3 Authority Key Identifier:
keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0a:51:86:66:29:67:d6:e0:63:5e:20:26:ba:51:51:3d:4b:
7f:f5:fa:03:74:e0:6a:c7:41:8a:23:92:f3:9a:21:64:b9:05:
54:75:cd:ab:17:cc:37:5a:76:25:b9:8b:c9:65:d1:6f:e5:67:
b8:c0:a5:d5:d8:d4:b2:ee:70:6e:37:f5:b7:e5:c6:3c:16:eb:
3c:ce:7c:8d:7d:3b:8b:4f:ae:64:55:11:2b:73:21:c2:4c:9c:
b4:cc:a1:2a:3e:10:8d:d4:0c:f5:f9:b4:9c:88:d9:8b:53:54:
ec:b5:8f:d1:58:87:38:ca:74:64:0f:05:0f:76:95:6d:3e:a7:
75:af:b1:fa:bc:9e:88:d0:2b:b5:0f:64:d2:99:6f:05:2c:4b:
c3:d5:e5:c6:f8:65:8b:70:7d:06:77:b3:d7:37:e5:bf:10:57:
7f:db:a3:75:ef:c3:d8:bc:d0:70:58:24:3e:db:10:34:da:ef:
71:9c:9b:b6:86:96:59:e0:f2:3e:75:5c:bc:29:23:a9:9f:fc:
b9:50:34:75:bf:21:52:3d:96:54:47:cf:14:db:53:34:ff:a8:
67:77:07:0a:50:76:dd:e1:1d:22:ae:3f:96:2f:83:ac:56:9b:
34:de:1a:b8:c8:c7:97:75:31:6d:46:4d:36:8a:ab:96:fe:5e:
af:b8:19:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:42 2026 by rpki-client