
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File: SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier: cv4hytU0LCG1wGIN4lnqoFjTyXXDosdEV9Fg70Hidfs=
Subject key identifier: EE:86:82:8A:09:FE:9E:6A:00:C2:D9:D9:47:A2:9F:0E:24:63:61:F1
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 057E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number: 0499
Signing time: Thu 21 May 2026 00:47:48 +0000
Manifest this update: Thu 21 May 2026 00:47:47 +0000
Manifest next update: Thu 28 May 2026 00:47:47 +0000
Files and hashes: 1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: nrRrf1uRVd1QD6DLYLHDEuumTN7gK6mRi7s9oMd57ug=)
2: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: kNZ9kMcIVbL2jK5YIL401eBQNsQQQ0xAhM8Sv/4h4WQ=)
3: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: WLbihB2PWZ1o++RM42EGDbLREOZKJSeaYxV3v/0bXwE=)
4: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: tnJ/yjknRBuc7UcBwzOHFJo2tnhzqFgevM34YS5rTmY=)
5: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: RcSedgyQP0f/Mx0R7YzTVV6LUvz5MpJuolu8SeEYtAY=)
6: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: /JQTTMGxpG1rEnJAGVjqQn7ENfIeEQm+h8FaXqx7IVA=)
7: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: Xpp2kFVSkuxzwBMowkkOloasdXHXgZJRNUiRPlt0tnI=)
8: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: VkKyUkZvufLeqNWH4XS4MFj5LEClAP479cUeOm9p8S8=)
9: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: VpLsJjoOM5TQH3OZEcPzV4PLIS2G8Hn1FrYlhKbie54=)
10: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: 3zeR3y4ThnqjrUYK2B2lRbeCm3UuFhf7qDtePwaC2RU=)
11: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: awi/D8lHc6L4dnToUMe+Br+mJLk9zICL465IydEzQlc=)
12: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: mwjCND/hb5mcBVM5huPhi5+mLyWxYoFCwlwxmeL4yts=)
13: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: vsM3lJioCOwfp3LZZpdveH83fo62+Y9urJ8LtwiCnMw=)
14: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: n7XrDdLRgIOzlZQtMfnZ1wiO99lQrB5PrhvdGG1ja78=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 00:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1406 (0x57e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: May 21 00:47:47 2026 GMT
Not After : May 28 00:47:47 2026 GMT
Subject: CN=6a0e5634-da4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:01:25:f1:73:e5:6b:39:44:91:65:89:77:08:
58:8f:af:bb:76:9d:28:0c:54:b5:81:a0:64:f6:fe:
84:a8:3f:6a:2e:19:a3:e2:c1:a1:d7:8f:36:d5:ee:
8f:18:71:01:cd:a3:70:98:02:5d:ad:e5:3a:65:7c:
78:fd:4f:ac:74:86:47:76:61:58:31:f5:f6:f1:cf:
33:c2:1d:a3:a9:79:8a:0b:43:0b:2f:7d:da:39:a6:
e2:a1:e4:d4:78:0d:b4:58:bd:90:f9:02:3c:fd:4b:
45:11:86:73:bd:a3:d1:03:bb:e6:6a:c8:f2:c3:e0:
45:4f:94:f9:3f:96:b4:12:61:9f:0f:e9:e2:a7:4b:
86:0f:76:52:b4:2e:50:c6:b5:87:a7:8a:e8:09:77:
fd:52:51:e4:81:db:f9:f2:ec:38:6e:f5:fd:45:3c:
b8:53:8a:47:d2:35:8e:a0:7a:88:8e:09:f8:f6:75:
64:ab:78:08:fb:00:a0:c5:72:a7:10:bb:83:e9:2e:
7e:31:7e:53:b3:20:02:fa:14:c3:44:b9:b4:cf:e4:
e1:aa:36:20:25:a4:e4:f2:00:cf:9f:e2:2c:c8:2e:
94:f7:de:91:75:b7:b5:dc:e6:c1:20:88:34:f3:2f:
f0:26:f3:53:7f:43:19:99:3f:3e:57:fc:52:8a:09:
3a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:86:82:8A:09:FE:9E:6A:00:C2:D9:D9:47:A2:9F:0E:24:63:61:F1
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:2c:49:09:52:21:83:9e:24:89:9e:d0:e9:b6:7d:81:0e:91:
94:83:dd:e7:83:eb:ea:90:c4:3d:64:5e:cd:37:ea:a8:d9:bf:
9c:3f:37:17:ba:24:b9:c6:43:47:03:4f:b6:ca:cd:f4:eb:a6:
15:99:27:39:0c:93:ed:79:d2:de:4d:d9:9f:3e:5c:13:ec:d8:
9b:a3:c5:60:00:15:b3:29:9f:8a:36:76:9c:0d:69:43:20:b9:
2c:81:9e:96:13:bf:7a:b8:08:5a:d7:6f:d9:40:c2:68:da:b0:
4a:18:7c:3c:6b:c2:4f:6a:ce:ae:c1:c6:6d:85:de:04:10:37:
7a:c7:fc:d0:b0:36:8d:cb:55:d4:c7:01:d0:80:1f:ad:78:4d:
a9:29:f1:1a:63:90:7b:27:35:6b:70:1f:bc:1c:3f:e0:c5:a8:
20:7a:8b:f0:c8:2a:c3:8d:a2:b3:98:22:19:8e:b7:5b:b3:bd:
5b:3e:6f:49:69:68:21:12:20:84:d1:09:3e:39:61:50:32:ef:
a1:f8:59:87:d6:c7:d2:e1:b3:2c:3b:26:b0:94:d5:65:c3:8a:
a3:c2:a1:c5:3a:5e:83:dc:10:8f:71:69:e6:80:72:d9:b5:e5:
d3:9e:71:90:c9:4f:2c:0b:52:4d:20:43:10:f2:75:b1:75:d2:
a6:43:0c:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF
RDk4NDY0OUQwHhcNMjYwNTIxMDA0NzQ3WhcNMjYwNTI4MDA0NzQ3WjAYMRYwFAYD
VQQDEw02YTBlNTYzNC1kYTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoAEl8XPlazlEkWWJdwhYj6+7dp0oDFS1gaBk9v6EqD9qLhmj4sGh14821e6P
GHEBzaNwmAJdreU6ZXx4/U+sdIZHdmFYMfX28c8zwh2jqXmKC0MLL33aOabioeTU
eA20WL2Q+QI8/UtFEYZzvaPRA7vmasjyw+BFT5T5P5a0EmGfD+nip0uGD3ZStC5Q
xrWHp4roCXf9UlHkgdv58uw4bvX9RTy4U4pH0jWOoHqIjgn49nVkq3gI+wCgxXKn
ELuD6S5+MX5TsyAC+hTDRLm0z+ThqjYgJaTk8gDPn+IsyC6U996Rdbe13ObBIIg0
8y/wJvNTf0MZmT8+V/xSigk6QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO6GgooJ
/p5qAMLZ2Ueinw4kY2HxMB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE
NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkM3NS8zQUE1REVFMERENTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29t
YXBHa0Jtd0c5TFR0bUVaSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhixJCVIhg54kiZ7Q6bZ9gQ6RlIPd54Pr6pDEPWRezTfqqNm/nD83F7okucZD
RwNPtsrN9OumFZknOQyT7XnS3k3Znz5cE+zYm6PFYAAVsymfijZ2nA1pQyC5LIGe
lhO/ergIWtdv2UDCaNqwShh8PGvCT2rOrsHGbYXeBBA3esf80LA2jctV1McB0IAf
rXhNqSnxGmOQeyc1a3AfvBw/4MWoIHqL8Mgqw42is5giGY63W7O9Wz5vSWloIRIg
hNEJPjlhUDLvofhZh9bH0uGzLDsmsJTVZcOKo8KhxTpeg9wQj3Fp5oBy2bXl055x
kMlPLAtSTSBDEPJ1sXXSpkMMCQ==
-----END CERTIFICATE-----
Generated at Thu May 21 21:19:55 2026 by rpki-client