
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
File: o5TKy9vYxM31SvFn4m1WJKUk4u4.mft (raw, json)
Hash identifier: 49zNGRUBIQvftuq5YshEdkpmKRPPMoGVHp0GHjacQtc=
Subject key identifier: AA:2A:7A:78:35:6D:B5:96:CC:D9:14:40:56:43:DC:9C:D5:7C:E9:48
Authority key identifier: A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE
Certificate issuer: /CN=A918D7A4/serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE
Certificate serial: 0180
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
Manifest number: 017A
Signing time: Thu 21 May 2026 04:43:05 +0000
Manifest this update: Thu 21 May 2026 04:43:04 +0000
Manifest next update: Thu 28 May 2026 04:43:04 +0000
Files and hashes: 1: o5TKy9vYxM31SvFn4m1WJKUk4u4.crl (hash: 8Z79kqZdKjxxVHmZhXLtXsWmUb+xp9FvAwoxL8Ql9oA=)
2: 8D61B05219AE11EFB41EAC2CC4F9AE02.roa (hash: E+4dNZzrdNIAmtr7QQVR714FjR1jDehtxZlaTTYgGhM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl
rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:43:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384 (0x180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D7A4, serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE
Validity
Not Before: May 21 04:43:04 2026 GMT
Not After : May 28 04:43:04 2026 GMT
Subject: CN=6a0e8d58-2324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:83:f9:ae:ca:ae:9a:d0:63:ce:b7:fc:ea:97:
6e:bb:8e:55:77:45:42:84:6c:80:21:9d:43:ad:97:
42:e8:08:85:97:be:c9:f3:f8:e0:d6:b6:4d:06:da:
11:37:f1:d8:a7:dc:8a:64:0b:f4:9b:44:46:58:76:
2f:14:f2:28:52:1b:1f:74:22:02:f1:b9:15:21:3c:
84:46:09:b1:92:30:52:7b:02:e6:e1:e8:ac:16:57:
c0:05:de:8b:11:62:ff:c4:ad:ec:1e:3d:75:1a:68:
46:99:34:b6:50:e9:26:65:0b:8f:6a:2c:6d:60:c2:
a5:8a:a7:bd:d9:4c:15:4d:0f:b2:c1:11:ef:a1:6a:
45:2e:18:92:08:87:82:73:6c:c6:c9:17:a5:35:7a:
f4:c3:81:cc:75:72:b4:33:0e:d5:ca:82:a9:e2:62:
66:49:95:8a:7b:62:1a:f4:b3:11:4b:4a:7d:94:dc:
28:42:d5:b4:24:f7:6f:4c:9e:86:2a:6c:f0:de:ae:
9d:d9:f9:20:30:54:ef:b2:2d:f1:31:a5:5f:3e:f4:
4a:05:eb:ad:ce:bb:2f:ff:97:21:89:2d:a6:91:23:
94:46:de:c8:da:ef:41:75:48:75:ac:37:ee:3d:b8:
ee:93:3f:d1:7c:ec:a3:c8:b2:58:7d:18:90:05:57:
90:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2A:7A:78:35:6D:B5:96:CC:D9:14:40:56:43:DC:9C:D5:7C:E9:48
X509v3 Authority Key Identifier:
keyid:A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:57:ea:35:bb:49:f0:80:bc:26:34:07:5f:89:81:01:24:36:
69:81:d8:26:66:10:1a:a2:5b:31:09:1a:7e:be:0f:e0:c5:ea:
c0:d6:71:59:b4:33:e7:07:01:be:55:4f:2e:d6:ad:77:48:15:
08:91:c1:61:a6:1d:ee:2d:6f:73:00:e7:ab:46:cd:a6:4c:8c:
a2:e6:9f:47:fa:84:09:73:4f:45:06:ba:dc:f4:1e:32:be:5e:
3b:c3:6e:db:cf:76:2a:28:b0:ff:85:51:99:33:b4:e8:4b:fc:
b1:47:26:6e:66:30:4c:37:25:e1:44:96:f1:8c:4d:22:5f:ed:
a5:d6:e3:94:5c:43:52:72:e6:ce:91:f7:3f:92:45:4a:a0:c4:
bd:09:86:d5:3f:54:57:3a:31:23:66:18:26:fc:59:b9:45:d9:
62:b9:06:ea:d2:1c:ed:7d:50:95:1e:e2:22:a6:84:8e:3e:76:
87:76:1a:18:68:a3:f0:32:1e:70:cf:ba:6e:88:c5:24:92:46:
d6:3a:38:f7:00:3f:4f:be:73:27:97:7d:97:1d:08:ec:cc:e4:
74:40:cc:f5:73:4d:84:1c:35:a9:bd:53:0e:c3:a1:63:f5:07:
85:0b:e8:93:dc:fc:cd:fb:b8:14:bb:81:03:a4:9e:22:15:39:
09:46:18:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ3QTQxMTAvBgNVBAUTKEEzOTRDQUNCREJEOEM0Q0RGNTRBRjE2N0UyNkQ1NjI0
QTUyNEUyRUUwHhcNMjYwNTIxMDQ0MzA0WhcNMjYwNTI4MDQ0MzA0WjAYMRYwFAYD
VQQDEw02YTBlOGQ1OC0yMzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnIP5rsqumtBjzrf86pduu45Vd0VChGyAIZ1DrZdC6AiFl77J8/jg1rZNBtoR
N/HYp9yKZAv0m0RGWHYvFPIoUhsfdCIC8bkVITyERgmxkjBSewLm4eisFlfABd6L
EWL/xK3sHj11GmhGmTS2UOkmZQuPaixtYMKliqe92UwVTQ+ywRHvoWpFLhiSCIeC
c2zGyRelNXr0w4HMdXK0Mw7VyoKp4mJmSZWKe2Ia9LMRS0p9lNwoQtW0JPdvTJ6G
Kmzw3q6d2fkgMFTvsi3xMaVfPvRKBeutzrsv/5chiS2mkSOURt7I2u9BdUh1rDfu
Pbjukz/RfOyjyLJYfRiQBVeQWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKoqeng1
bbWWzNkUQFZD3JzVfOlIMB8GA1UdIwQYMBaAFKOUysvb2MTN9UrxZ+JtViSlJOLu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDdBNC82M0VENDAxMDE5
ODYxMUVGODkwODdFMzBDNEY5QUUwMi9vNVRLeTl2WXhNMzFTdkZuNG0xV0pLVWs0
dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL281VEt5OXZZeE0zMVN2Rm40bTFXSktVazR1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDdBNC82M0VENDAxMDE5ODYxMUVGODkwODdFMzBDNEY5QUUwMi9vNVRLeTl2WXhN
MzFTdkZuNG0xV0pLVWs0dTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXFfqNbtJ8IC8JjQHX4mBASQ2aYHYJmYQGqJbMQkafr4P4MXqwNZxWbQz5wcB
vlVPLtatd0gVCJHBYaYd7i1vcwDnq0bNpkyMouafR/qECXNPRQa63PQeMr5eO8Nu
2892Kiiw/4VRmTO06Ev8sUcmbmYwTDcl4USW8YxNIl/tpdbjlFxDUnLmzpH3P5JF
SqDEvQmG1T9UVzoxI2YYJvxZuUXZYrkG6tIc7X1QlR7iIqaEjj52h3YaGGij8DIe
cM+6bojFJJJG1jo49wA/T75zJ5d9lx0I7MzkdEDM9XNNhBw1qb1TDsOhY/UHhQvo
k9z8zfu4FLuBA6SeIhU5CUYYVQ==
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:42 2026 by rpki-client