
$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft
File: 54D6N3e4HUz2o1QG6lz0vk9l6fo.mft (raw, json)
Hash identifier: USPS73UBd5T42fMw6mflcwnmeVUADgrmAPx7AwEZrps=
Subject key identifier: 1D:DD:BF:58:07:73:AD:49:97:0F:84:9E:72:39:46:F4:8A:0F:05:C7
Authority key identifier: E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA
Certificate issuer: /CN=A917530D/serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA
Certificate serial: 01AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft
Manifest number: 01A5
Signing time: Sun 05 Apr 2026 03:40:19 +0000
Manifest this update: Sun 05 Apr 2026 03:40:19 +0000
Manifest next update: Sun 12 Apr 2026 03:40:19 +0000
Files and hashes: 1: 54D6N3e4HUz2o1QG6lz0vk9l6fo.crl (hash: yxrRY0chSrD2/OICvjlPNm3VqIfS8sgGvOBqXDgdTRs=)
2: 1032223CBC2B11EE9E04192FC4F9AE02.roa (hash: SEbrYLAi3GrkF0o5kvdL6QfJ3Jg6QtG0T39uuWSgUvY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl
rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917530D, serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA
Validity
Not Before: Apr 5 03:40:19 2026 GMT
Not After : Apr 12 03:40:19 2026 GMT
Subject: CN=69d1d9a3-77aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:ab:b9:67:00:29:fb:bb:59:97:49:03:86:
94:71:46:8f:9c:d3:6c:4e:2a:46:4e:66:cf:b6:45:
aa:49:c1:e8:88:1d:bd:02:c2:ac:6d:d0:49:83:a9:
13:2b:77:63:a4:3f:62:28:d4:1c:f0:54:72:6e:9a:
90:7b:57:98:d6:82:19:35:79:3d:17:5f:ec:1d:7d:
3d:90:32:c3:2d:94:09:15:7e:29:8a:ec:f2:f4:d7:
c8:13:52:cb:05:a5:73:0f:f9:74:69:2b:05:79:9d:
54:7f:e9:07:dc:f4:9f:2f:f7:e9:13:b4:22:df:35:
98:7a:55:ca:2b:10:01:bd:b1:7d:87:4a:cd:d9:05:
73:37:91:01:d8:5b:7e:db:16:58:05:a9:a7:72:14:
a8:86:eb:fd:da:f1:49:5b:7f:11:26:8a:9f:c8:6a:
80:8f:4b:44:9b:90:cc:f5:ff:2c:e4:de:2b:0a:8d:
38:31:21:76:aa:33:fc:a2:f0:8d:0f:6c:21:3b:67:
d5:73:a1:40:5f:10:84:7e:b7:12:dc:e1:5a:8b:8e:
22:59:74:34:64:1a:8c:ab:37:fe:c4:23:fb:76:61:
e6:23:3c:bc:67:cb:51:2c:fd:35:52:7a:66:67:f0:
46:d9:0b:a1:fe:b2:a8:fb:70:ae:ee:8c:06:4b:f6:
fd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DD:BF:58:07:73:AD:49:97:0F:84:9E:72:39:46:F4:8A:0F:05:C7
X509v3 Authority Key Identifier:
keyid:E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:06:9b:f8:cd:7c:03:da:b2:6d:2a:59:e4:1b:47:04:9b:f4:
25:9b:70:51:6c:56:ac:e6:8e:38:29:82:b1:2f:40:08:61:d7:
e5:f1:50:84:ac:fe:d5:98:5e:31:32:38:de:f2:4d:05:ee:51:
9b:1b:09:6c:2e:cb:fe:ed:05:12:35:90:a9:20:60:c8:76:a2:
51:d6:1c:0e:b4:55:18:32:37:f3:b3:7d:77:82:55:41:75:87:
f7:ad:1e:b6:58:94:ff:13:95:13:6e:b4:11:04:52:11:b1:bc:
99:35:e4:8f:68:9a:6e:db:d6:80:1b:1e:b8:bc:f2:46:3c:c1:
78:82:5d:60:1b:cb:c7:93:28:6c:f7:22:68:9f:af:d8:f6:2b:
0f:68:88:8e:1d:9b:5b:10:10:51:b3:1a:b4:50:fc:66:aa:8e:
e4:b6:56:f8:1c:76:fa:12:e6:7e:c0:6e:f2:bd:af:e7:65:56:
86:1f:55:cf:07:94:5b:62:05:95:45:50:da:fa:82:d3:7d:c4:
e6:cd:57:39:e7:4d:aa:01:52:f0:93:f0:f0:66:79:97:1e:1d:
74:a6:a1:48:26:42:85:4d:17:5f:e2:66:73:9a:98:33:8e:65:
0b:df:21:bc:6a:66:33:1a:b5:13:e9:5b:6d:e6:5f:70:cd:0c:
ff:0c:85:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:59:07 2026 by rpki-client