
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft
File: 5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft (raw, json)
Hash identifier: XMjKFayX+S+pYVmRrTdk8wKnDn3+zQi01lC+wzxV6KY=
Subject key identifier: BD:12:D2:83:F8:05:09:94:2D:45:0F:07:47:BB:E3:AC:90:03:2C:87
Authority key identifier: E6:0E:21:41:D7:1D:B9:FC:89:FA:BF:B5:FD:AD:03:72:DF:A3:37:D0
Certificate issuer: /CN=A917B633/serialNumber=E60E2141D71DB9FC89FABFB5FDAD0372DFA337D0
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft
Manifest number: 012F
Signing time: Thu 21 May 2026 05:37:34 +0000
Manifest this update: Thu 21 May 2026 05:37:34 +0000
Manifest next update: Thu 28 May 2026 05:37:34 +0000
Files and hashes: 1: 5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl (hash: d0Vbhj8o0ellaiXyzmvMvzpsdKPUoJosOH+Snrg/aN4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl
rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B633, serialNumber=E60E2141D71DB9FC89FABFB5FDAD0372DFA337D0
Validity
Not Before: May 21 05:37:34 2026 GMT
Not After : May 28 05:37:34 2026 GMT
Subject: CN=6a0e9a1e-2f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:42:a6:30:f3:aa:43:4a:00:28:c3:8d:a8:c2:
cc:2a:fb:2c:80:91:1a:69:70:5f:67:2f:c7:1d:cf:
9e:2f:a3:b1:ac:8f:ca:e1:d5:37:c3:8a:78:c9:4c:
a8:24:b8:00:4d:5d:84:ed:da:39:7b:af:3a:55:84:
24:2e:b0:f1:5d:b5:f7:fb:9f:92:f9:0b:c3:46:a3:
dc:00:b5:b1:c2:15:f9:65:4d:e8:8e:8a:32:c9:1c:
36:b1:f9:f2:49:a0:b2:d6:3e:e7:13:b3:3e:ce:5b:
90:e8:51:6e:67:07:a8:7b:6f:1f:7d:0b:f1:2f:79:
2f:84:31:87:1e:19:e6:db:fe:32:cd:17:8f:3e:ca:
cc:3f:2f:9a:8a:59:55:10:24:cf:be:a9:a5:fb:86:
6b:1b:af:ee:09:f5:b9:da:cf:17:d6:32:93:c1:86:
19:a3:a6:4c:b2:54:4c:cb:f5:91:2f:2f:24:a7:38:
d9:ab:a3:a8:a9:bc:42:45:b9:0b:74:11:57:27:2c:
f7:df:76:15:78:82:5b:60:ca:b6:ab:78:77:8f:d3:
62:d6:e6:a1:97:be:74:26:60:94:ef:c3:44:c4:5d:
22:b7:11:4a:55:2e:c8:ea:ae:df:96:04:44:0e:26:
48:5c:28:d5:48:6f:4e:19:a4:9d:4c:df:89:9b:62:
63:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:12:D2:83:F8:05:09:94:2D:45:0F:07:47:BB:E3:AC:90:03:2C:87
X509v3 Authority Key Identifier:
keyid:E6:0E:21:41:D7:1D:B9:FC:89:FA:BF:B5:FD:AD:03:72:DF:A3:37:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:0a:12:c8:3d:ee:e5:3e:e5:03:85:97:64:65:ee:6d:dd:8f:
56:b8:75:e7:2a:e5:02:cc:7c:6c:34:48:21:16:7e:b8:0a:86:
72:ee:c1:10:94:08:76:1e:6a:6c:22:db:50:d1:4d:49:ed:dd:
91:97:a5:f2:f7:77:40:1e:5a:1c:ed:5a:be:3f:d7:47:7e:79:
cf:09:75:ca:b4:d8:25:41:58:76:0e:fa:08:63:8f:03:bf:be:
69:c4:b6:5a:a9:8c:bd:38:81:b8:fe:7b:ae:63:ed:87:e9:a7:
32:80:4b:f1:63:a6:1e:eb:3f:a9:e2:4f:ba:1d:9a:2e:60:29:
c9:cc:a7:57:bb:3f:c2:9b:95:e6:18:be:a4:5c:00:3f:3b:4b:
88:80:93:a8:11:16:18:2f:c2:23:9e:1d:45:1e:81:d2:0d:05:
c5:17:0d:da:53:ec:b0:de:3e:7f:0e:5b:81:09:a1:bd:4c:7d:
04:75:78:e8:81:fd:c5:7a:98:f8:74:38:ff:4c:4d:88:5f:e1:
5d:5e:8b:09:5c:24:79:cd:ce:d6:41:4a:0a:f5:f2:bb:cd:dd:
e9:9f:4a:e5:81:37:1b:c1:11:54:0e:9e:10:cd:e4:32:f9:ea:
c1:ab:8b:42:46:24:71:0b:b4:47:28:29:b7:69:bc:ac:8a:fd:
26:e2:85:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:01 2026 by rpki-client