
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft
File: t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft (raw, json)
Hash identifier: Olo6kUpjHlMQtuUvFujwBbkm/hR1PfnFhXlbSxRisac=
Subject key identifier: 23:D3:BA:31:34:89:73:EA:23:97:33:00:0F:9A:76:91:9E:10:B1:3A
Authority key identifier: B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E
Certificate issuer: /CN=A917F8F2/serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E
Certificate serial: 08DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft
Manifest number: 08C9
Signing time: Sat 04 Apr 2026 20:13:17 +0000
Manifest this update: Sat 04 Apr 2026 20:13:16 +0000
Manifest next update: Sat 11 Apr 2026 20:13:16 +0000
Files and hashes: 1: t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl (hash: YJKp7vL+6zisoNCr+sYX/Oc6K0e9+bw9znNHPzACmrc=)
2: B78B5CB6D65F11EA8B30486EC4F9AE02.roa (hash: OYXjXOF1OK74nQrn1QIRacdZBRoGnG2hFU6B9gjBscs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl
rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2267 (0x8db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F8F2, serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E
Validity
Not Before: Apr 4 20:13:16 2026 GMT
Not After : Apr 11 20:13:16 2026 GMT
Subject: CN=69d170dc-8314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f5:76:5b:db:e6:ea:98:e0:3d:b7:47:2d:a3:
c5:68:a2:d3:03:45:59:0d:a4:65:5f:6e:a5:38:9d:
a7:32:e4:37:a1:37:cf:60:ef:0e:04:db:98:4b:9e:
4b:11:ec:8b:57:1e:74:60:6f:cd:fe:ce:7f:01:68:
3b:e9:53:b3:03:99:b5:cf:44:ec:e2:ee:b3:ec:91:
9c:ef:4e:d1:c1:55:8a:23:e4:b7:3a:57:b7:eb:55:
a2:8a:da:86:91:53:1a:42:b5:d1:9a:ca:cb:06:82:
b7:6f:0d:15:0f:dc:a0:ba:c6:79:96:83:20:be:cf:
c4:fa:2a:c0:b4:3c:4f:f8:b7:fe:60:68:9d:b8:54:
89:d0:0e:d7:f7:ae:e4:7d:6e:d1:9a:a1:00:ca:92:
0e:36:5e:aa:52:fb:14:e5:35:73:f8:72:99:3e:fe:
07:ee:9e:1a:c1:f7:f3:ce:3e:84:ce:c5:33:53:64:
f0:1f:1e:dd:b8:f8:17:31:01:03:fe:16:b4:25:58:
6a:70:99:d6:74:dd:d9:8e:b0:fb:93:ce:8a:84:f1:
a6:3e:bc:e8:e3:4b:d2:f8:3c:1f:09:19:00:c6:48:
ce:6f:2c:bd:ac:dd:99:80:2b:d0:79:34:5c:97:16:
53:5d:f1:ee:02:11:35:90:e3:64:2b:84:ce:51:11:
96:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D3:BA:31:34:89:73:EA:23:97:33:00:0F:9A:76:91:9E:10:B1:3A
X509v3 Authority Key Identifier:
keyid:B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e4:28:af:80:61:2a:e6:87:a9:2b:e8:2f:cb:e2:db:57:56:
d3:9e:30:85:eb:55:54:7c:2a:26:0b:9e:76:41:06:f4:5b:1b:
96:8c:8d:0d:a1:37:eb:e3:80:40:73:8b:4f:5f:29:fb:d8:17:
90:95:dc:08:61:c1:24:c6:b0:7a:c4:53:51:70:d0:83:a5:5c:
4e:9d:79:c4:bb:82:49:fc:dd:95:92:3b:ca:55:d0:87:d3:24:
f3:0b:29:12:60:6c:27:f6:ba:fd:92:f8:16:08:f1:21:09:15:
5e:37:59:7e:5e:ca:6d:fe:0f:be:e9:09:76:f3:e2:c9:d2:7f:
ae:df:2b:f1:66:13:51:fd:74:d1:a5:47:d0:4f:18:17:3f:ff:
5a:ac:76:1a:2f:4b:c4:a3:4c:36:10:25:0c:b7:8e:fd:96:79:
4e:c6:fb:4c:94:ab:9e:ef:75:c4:56:34:6f:56:4d:59:e5:ff:
1a:15:e1:cd:46:da:de:30:9f:35:98:e7:d6:67:c8:01:81:a2:
49:e7:0b:60:4a:7a:53:b1:6f:64:ec:26:c3:68:d8:4d:9f:33:
6b:55:fd:d7:51:f0:4c:2e:4b:33:83:50:4b:ac:37:da:9a:81:
e2:19:62:1c:e2:33:21:8a:cd:a3:c4:0f:8f:ae:9c:50:bc:99:
01:cf:e5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:04 2026 by rpki-client