
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft
File: _5Lsi9gN-r3TbmPJr0ynqG3ealc.mft (raw, json)
Hash identifier: Pp1qbKyzUiqeHD0gWgLD8TzS8sZ+K7Pu/IwyoKJ5QyI=
Subject key identifier: 84:34:11:B9:74:58:F7:15:F1:56:3B:3C:AD:90:95:CF:BC:E2:77:03
Authority key identifier: FF:92:EC:8B:D8:0D:FA:BD:D3:6E:63:C9:AF:4C:A7:A8:6D:DE:6A:57
Certificate issuer: /CN=A917D82E/serialNumber=FF92EC8BD80DFABDD36E63C9AF4CA7A86DDE6A57
Certificate serial: 3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft
Manifest number: 39
Signing time: Tue 19 May 2026 08:32:09 +0000
Manifest this update: Tue 19 May 2026 08:32:09 +0000
Manifest next update: Tue 26 May 2026 08:32:09 +0000
Files and hashes: 1: _5Lsi9gN-r3TbmPJr0ynqG3ealc.crl (hash: i1nv38PNLiaARiCNYNlTO8Q8IR5/UQGiXa2zm+wOESA=)
2: 472DDE380B2111F19BE0F4953F3D8C67.roa (hash: sCTj5r8qqEXu3bvLoN64PVkesO/DVMq2io4GoK3oYbs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.crl
rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D82E, serialNumber=FF92EC8BD80DFABDD36E63C9AF4CA7A86DDE6A57
Validity
Not Before: May 19 08:32:09 2026 GMT
Not After : May 26 08:32:09 2026 GMT
Subject: CN=6a0c2009-f42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:1c:c2:08:9a:48:d6:5c:fa:7e:9d:50:35:
86:5e:4b:18:fb:43:c9:d8:70:b7:a2:06:a1:c9:3e:
85:98:65:ff:85:bd:79:a4:97:9a:bc:69:db:b9:6b:
5c:75:fc:aa:df:52:a1:fb:88:33:5e:d2:91:13:06:
c8:94:c1:5f:c3:b6:ff:1e:56:8f:4e:24:26:2c:b9:
d6:d3:17:b0:48:f7:fe:23:46:1d:a8:90:d4:88:76:
d6:4f:04:42:35:c3:9a:47:c8:e8:82:62:ec:06:78:
1e:f6:35:4b:5d:99:0c:36:37:16:9a:22:f6:71:8d:
da:01:64:b1:73:0e:0c:4c:ee:7e:9d:63:2f:76:5c:
ae:9d:3f:b1:73:5f:a3:0a:eb:28:84:a4:2b:54:46:
c8:0d:46:c2:dc:a6:88:40:40:a0:4a:71:05:72:27:
5b:ec:e3:78:e3:60:09:35:37:68:6a:12:e3:01:37:
4d:b4:27:de:76:32:c0:0b:65:12:81:02:a5:92:8e:
e9:d5:bb:37:85:d4:c0:6d:e6:04:0f:49:a1:a7:19:
c8:fe:fb:07:30:96:78:1b:95:9e:4b:9f:43:2e:28:
6f:a2:65:71:b3:3d:64:8e:64:f1:85:e1:c7:29:ee:
a1:b3:c1:c5:a4:48:98:0b:7e:7a:49:51:56:0c:90:
42:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:34:11:B9:74:58:F7:15:F1:56:3B:3C:AD:90:95:CF:BC:E2:77:03
X509v3 Authority Key Identifier:
keyid:FF:92:EC:8B:D8:0D:FA:BD:D3:6E:63:C9:AF:4C:A7:A8:6D:DE:6A:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c6:8d:12:c4:82:fe:70:12:45:ef:f4:2a:65:d3:18:54:d3:
a4:17:0b:7e:44:8d:e5:4a:6f:32:bb:a8:11:59:33:48:b8:30:
73:56:9b:b8:ea:be:9d:8d:31:f5:0c:28:9e:75:20:e6:20:4e:
32:6a:88:bf:41:4b:42:e2:5b:bc:56:5e:30:b2:02:a9:a9:a4:
62:24:b3:7a:31:72:19:60:93:38:e4:2d:81:5a:9b:8a:30:f2:
cb:17:99:59:ac:87:a3:7a:d4:9e:85:c5:cd:7f:db:09:d6:ae:
26:9c:17:6f:88:94:c7:dc:1c:ad:6b:a3:0a:e5:0e:18:24:ea:
f3:9a:8e:ce:94:81:ef:42:8b:e6:57:d0:a6:90:f0:d6:6b:fd:
eb:e3:44:0e:9e:b4:86:ec:c8:8d:1b:32:62:ba:a7:7d:af:fa:
b6:2b:24:82:e3:2f:af:55:52:fb:9a:26:40:c4:be:0b:45:aa:
43:99:a0:95:61:ec:d1:8d:a4:5a:7a:fb:d9:f2:9a:c6:5a:bb:
68:bf:d0:c8:43:89:dd:f3:fb:e1:31:63:a9:2a:83:c7:82:59:
e3:ef:5e:5d:2a:48:4a:23:aa:f5:8c:cd:d1:92:4a:57:d3:ce:
a5:cb:7d:c5:2f:c3:46:f6:12:67:fe:ab:8c:7d:27:7b:b3:e4:
06:e2:c4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:40 2026 by rpki-client