
$ rpki-client -vvf rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
File: m5TObjVVCnQlu0QWLfN8v74FPCU.mft (raw, json)
Hash identifier: W53RQX5yCnMICB6foWqBm5OPIMfjXgy68Z+qCJcvhio=
Subject key identifier: AD:3C:37:A7:52:F5:D1:4D:4A:31:71:FC:A9:63:81:A4:F9:D3:72:55
Authority key identifier: 9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25
Certificate issuer: /CN=A91776C9/serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25
Certificate serial: 0219
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
Manifest number: 020E
Signing time: Wed 29 Apr 2026 03:32:25 +0000
Manifest this update: Wed 29 Apr 2026 03:32:24 +0000
Manifest next update: Wed 06 May 2026 03:32:24 +0000
Files and hashes: 1: m5TObjVVCnQlu0QWLfN8v74FPCU.crl (hash: XLvL+LEtDApcb5Wt+3reD2REyXvZZD6Y8XFHgc38HME=)
2: C9819D5E705711EFBDEF9265C4F9AE02.roa (hash: 7EElla54PME6t43EGMTvu4HFDw83uuSq/ww5cJrQdjM=)
3: C872E06C705711EFBDEF9265C4F9AE02.roa (hash: 6fOOVMWHz8uhdua83reqWb8mHIqUK8rXDkUTcJOKXR0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl
rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 03:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 537 (0x219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91776C9, serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25
Validity
Not Before: Apr 29 03:32:24 2026 GMT
Not After : May 6 03:32:24 2026 GMT
Subject: CN=69f17bc9-cde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2a:1e:89:5c:c4:e0:db:d9:49:a3:2c:b6:71:
dd:78:69:61:eb:51:b8:e6:4a:12:05:e2:c6:d6:fc:
2f:51:94:a7:b4:09:e5:bd:7d:b3:60:b3:79:ec:16:
83:2a:8b:a1:02:c8:4b:ce:f2:96:c5:5b:3d:9b:76:
a5:77:5b:cf:12:41:aa:87:fa:ea:42:c6:d8:5f:9c:
cc:30:4d:fd:83:32:6d:f5:a9:50:af:5a:78:cc:e4:
54:8f:1c:18:fc:05:59:28:d9:ea:50:f1:22:3c:33:
5a:b3:2c:b1:8b:a6:80:30:a4:da:79:7f:12:63:89:
2d:bf:1b:6b:b4:42:03:ee:3b:2e:90:81:79:8c:e0:
af:cc:81:63:9e:5f:71:33:86:f9:7e:a8:46:92:9e:
6f:9c:34:75:be:7a:dc:fc:74:6f:a0:46:ae:6e:56:
e6:88:c8:87:fa:1f:ef:ab:7f:15:58:1e:63:6b:8f:
92:e7:d6:b6:49:0b:dd:78:26:63:d7:75:8a:30:9a:
68:54:54:10:d7:cb:5f:a7:6f:05:1c:5f:d9:2f:f8:
39:ec:da:37:68:18:f5:2a:3f:00:3b:4e:fd:53:1e:
ad:37:a9:17:64:65:f7:03:52:50:9d:91:0a:39:51:
90:ed:cb:2c:94:73:eb:0c:a6:f1:1a:e7:13:0e:ed:
2f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3C:37:A7:52:F5:D1:4D:4A:31:71:FC:A9:63:81:A4:F9:D3:72:55
X509v3 Authority Key Identifier:
keyid:9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:4d:c3:5d:93:ee:e6:45:08:af:a8:89:86:1e:6a:75:c1:47:
10:06:fa:66:d8:4e:72:bd:01:c6:5d:14:20:cb:b3:79:04:29:
7e:32:82:b0:8e:4f:67:bd:15:79:22:5b:2f:c7:ab:0b:9b:e2:
17:c3:91:a6:02:49:db:6e:98:12:42:67:2b:d3:85:ba:32:2a:
d3:a8:9a:01:4d:24:f8:cf:ab:42:be:dc:88:7e:fd:cb:3c:9d:
ea:13:12:42:51:7b:77:ad:5d:e8:d6:e3:6e:2f:52:83:df:6a:
35:83:d7:98:e7:f6:88:f6:7d:e3:bf:a6:8b:33:fa:ab:d9:16:
49:6b:3a:d7:56:40:82:79:25:61:20:37:62:d6:69:62:84:51:
c2:32:ad:69:6c:4a:7f:9b:fc:61:fb:26:31:f1:05:7c:31:fa:
9f:68:31:70:41:a4:1f:1e:c0:93:1d:9f:a1:61:34:61:c8:3d:
bb:59:b6:26:c2:0a:19:01:39:18:e4:2e:15:63:5c:9c:a7:3d:
72:20:b9:05:f3:07:71:09:fa:7b:fb:8c:88:e1:47:8d:bd:76:
b3:d9:37:51:1f:03:99:6b:42:b5:57:f0:b2:cb:ea:08:18:06:
dc:fb:1b:36:7e:3d:46:4e:cc:a1:38:fc:fc:40:fc:37:03:a5:
f6:e3:53:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 16:31:50 2026 by rpki-client