
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
File: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft (raw, json)
Hash identifier: cknhPKvuxU/adM1gh5SXDOvDtTV2HLe0Ymm3g9UJq7I=
Subject key identifier: 51:94:80:6B:83:2A:AC:38:00:64:FB:09:85:CC:2C:E0:CA:EC:B6:45
Authority key identifier: AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F
Certificate issuer: /CN=A918B5FE/serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F
Certificate serial: 0779
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
Manifest number: 075E
Signing time: Wed 20 May 2026 21:43:14 +0000
Manifest this update: Wed 20 May 2026 21:43:14 +0000
Manifest next update: Wed 27 May 2026 21:43:14 +0000
Files and hashes: 1: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl (hash: Ahzh/LcR8jdaWJK7AtLv422MjpRIjeXExJig8wGwjRI=)
2: DAE15A7248F911EC9F04C439C4F9AE02.roa (hash: yll6EleWhluFREKT8NzETIGMZoAw4Is6iNKhftN9k0s=)
3: DBB4BB6A48F911EC9F04C439C4F9AE02.roa (hash: TW3Yzr4nVCh6fw/bwk2DNXvw9C9/OVS9zcojLveOPlk=)
4: DCC969B048F911EC9F04C439C4F9AE02.roa (hash: ja+InHtGIgo82Asz/+ZVF2gnztVHMmOvkEj/+OfWSAc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl
rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1913 (0x779)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B5FE, serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F
Validity
Not Before: May 20 21:43:14 2026 GMT
Not After : May 27 21:43:14 2026 GMT
Subject: CN=6a0e2af2-9d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e3:ea:2b:d4:09:dc:b4:9f:c2:66:dc:92:73:
24:f1:ad:a1:19:e0:cd:0c:cc:e5:2d:d2:a8:be:37:
51:a4:68:7f:21:6c:c1:d1:d0:6b:21:ee:6c:11:a2:
07:ed:4b:41:70:88:f5:e6:8d:5f:6f:ed:41:30:94:
a0:f6:0f:8a:2d:11:4e:76:d1:e2:9a:31:57:38:fc:
04:96:04:85:14:ff:a1:c5:73:31:9d:14:50:e6:85:
0f:4f:0b:a3:d1:11:aa:37:5a:eb:f9:00:eb:f7:60:
0c:17:9f:6f:9e:b9:6b:c2:1b:a4:8b:aa:8a:a1:bb:
eb:40:68:b6:aa:cc:ef:cb:76:8f:5c:c2:12:8f:16:
c3:2b:46:7f:ed:07:47:40:6d:a2:70:32:4a:04:d1:
ae:92:e0:38:cb:18:cc:e5:0b:97:1d:aa:b1:48:29:
64:45:e6:a1:25:df:13:26:32:32:8a:25:96:7e:3c:
3b:46:70:5e:e5:94:f5:04:4f:8d:89:51:b9:0c:a7:
fc:77:dc:a3:b6:ae:0d:ee:f8:9a:e1:44:dd:0f:1e:
f9:4b:a6:25:de:9f:8d:14:2c:76:7f:bc:d0:f3:af:
62:fe:ff:42:07:f0:05:8e:7e:6d:90:7e:86:18:71:
dd:0f:b8:45:75:e4:5a:cf:72:ce:eb:2a:9c:34:a0:
86:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:94:80:6B:83:2A:AC:38:00:64:FB:09:85:CC:2C:E0:CA:EC:B6:45
X509v3 Authority Key Identifier:
keyid:AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:07:66:49:0f:f5:23:03:f8:ae:53:df:00:b0:aa:52:33:d4:
45:e4:b5:07:bc:9e:81:ac:30:bd:be:46:98:3f:5c:01:2a:64:
49:a8:68:e9:c8:69:c3:82:3f:d7:0c:ed:0f:d8:e6:45:63:3f:
1f:c7:59:e2:8d:4b:42:93:f4:e3:0d:64:01:ef:2b:19:90:5e:
e6:f1:8f:52:8b:72:9f:6a:d0:99:1d:56:56:c7:f2:ac:75:c7:
2d:0d:cc:65:ea:1f:68:bb:ec:29:0b:d9:13:fb:80:d6:3c:91:
af:d3:c6:99:4d:fc:84:19:dc:8b:f1:40:22:6e:d3:24:b4:5c:
54:25:ef:17:5b:4d:e0:4b:d8:e0:41:a1:4e:cf:09:26:26:62:
b9:a0:24:09:6f:8d:1b:f6:5e:53:2c:5f:28:94:37:12:dc:7d:
24:54:9c:63:13:49:00:dc:15:13:bd:1d:ed:93:c7:17:85:f5:
f7:76:07:2d:15:b9:68:b0:f1:0a:fd:4e:84:e4:32:6e:52:6b:
ea:e9:0b:8e:8b:0a:62:ee:3b:d9:0c:9e:41:66:fa:8a:fd:0b:
00:b8:3f:1a:46:f9:a4:5d:38:45:ea:96:08:f4:04:c9:10:67:
d6:f6:c4:a0:44:ea:b0:45:0b:a2:71:ef:85:6b:ab:a0:ef:79:
bd:8e:7a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:18:41 2026 by rpki-client