
$ rpki-client -vvf rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
File: k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft (raw, json)
Hash identifier: IqyznT7nVpYlHz5J1+RbiL94RJHxRKTqlxqlttzyyLs=
Subject key identifier: D5:7E:51:CF:57:75:FE:EC:58:CB:36:86:69:52:D7:3D:8C:EF:60:6E
Authority key identifier: 93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7
Certificate issuer: /CN=A917584F/serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7
Certificate serial: 05F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
Manifest number: 05EC
Signing time: Wed 20 May 2026 23:00:20 +0000
Manifest this update: Wed 20 May 2026 23:00:19 +0000
Manifest next update: Wed 27 May 2026 23:00:19 +0000
Files and hashes: 1: k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl (hash: G3/SZqePqsXmygRCnqMJP27fgCWL8GH8qcumO0C77Dc=)
2: CE00DA34FF4411EBAD3A632AC4F9AE02.roa (hash: 5KIGpWZKTRHwQtms3xYKU2Snxu8ukES0vK87z+NnMlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl
rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1523 (0x5f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917584F, serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7
Validity
Not Before: May 20 23:00:19 2026 GMT
Not After : May 27 23:00:19 2026 GMT
Subject: CN=6a0e3d03-c64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:65:b2:bd:8b:ed:55:79:f0:6d:64:97:ca:
f3:7b:26:a4:82:56:39:ec:a3:ab:1e:76:49:0f:25:
e6:42:a0:5a:21:ed:90:5f:6a:19:e6:5d:d6:17:25:
f7:b7:eb:37:10:2e:1c:47:f2:e4:e4:08:e2:3f:57:
60:e4:97:c7:54:c4:4b:7c:83:e6:c6:61:bc:c6:6f:
3c:1c:c3:3c:29:be:f2:fb:52:9c:cd:aa:f2:3d:ed:
e2:ac:e4:d4:85:af:97:b3:b9:27:23:28:32:4e:61:
33:a2:7f:f9:89:2a:26:40:16:ad:97:01:20:b2:55:
3c:51:4f:c0:81:af:30:53:f0:57:c8:15:e4:1e:5f:
ad:78:ec:e8:ec:64:d7:65:f4:67:a7:e1:93:ef:b5:
59:21:c2:c5:65:ba:1c:85:63:51:fe:ed:54:c8:cb:
ba:ca:06:10:12:4d:d5:f7:40:2c:3e:35:9e:bf:01:
35:af:bd:b3:86:fd:97:3f:38:7c:ae:d2:da:c3:06:
c5:2b:d3:9b:42:b0:f6:8c:ea:11:56:10:b0:6b:7e:
e7:07:85:35:cd:f9:98:3c:1f:73:91:34:8c:e0:86:
0a:bb:89:6e:e6:6c:d0:af:bc:ec:aa:8e:de:20:89:
bb:dd:44:2c:fe:98:9f:05:41:de:af:30:02:18:1e:
df:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7E:51:CF:57:75:FE:EC:58:CB:36:86:69:52:D7:3D:8C:EF:60:6E
X509v3 Authority Key Identifier:
keyid:93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ff:14:e6:c2:7b:ab:41:90:e5:8e:c4:c9:72:63:f8:cd:f2:
24:6e:54:85:9f:48:ed:71:e8:14:3b:eb:da:98:ca:ae:86:61:
8c:5e:e7:eb:fd:9a:d1:40:a7:6e:23:32:b8:06:f9:40:6b:52:
08:11:45:0d:3a:bd:0b:49:d8:68:f1:b5:8a:ee:9b:22:84:c4:
07:f4:b1:9e:df:4f:03:7f:cf:db:e5:54:6c:d5:b3:52:b1:6d:
ce:32:4b:e9:ee:89:88:1b:0c:27:ad:ed:d2:1f:65:3d:32:d5:
77:d5:9d:9c:fc:9b:30:d7:46:9e:a2:a4:f0:1b:42:7d:ed:56:
d9:f9:87:1e:f8:1e:03:b1:e2:21:60:fc:42:fc:b1:7b:6a:3c:
28:52:53:12:c4:f4:b7:72:e0:12:42:3e:4e:e4:e3:11:9a:03:
6e:bf:8f:33:7a:22:6d:e0:a9:2f:a8:94:a9:20:d9:9b:94:17:
ec:80:41:81:e9:b9:98:e2:80:79:5b:be:1d:4b:78:f1:eb:fb:
56:0d:d5:54:26:7e:6e:84:11:e5:05:e1:f8:86:7c:78:5d:eb:
eb:93:cc:92:09:1c:9b:6c:5c:45:89:ea:8b:c1:09:85:86:9a:
5d:db:9f:79:dc:4b:f4:41:6c:5f:52:99:12:1d:f9:1f:95:65:
f8:51:e3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:28:09 2026 by rpki-client