
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE64/1641D0DE5E3911F1B10499CF007AAC22/5-hBazlJjR8g7vTYMdsv_s3l8wE.mft
File: 5-hBazlJjR8g7vTYMdsv_s3l8wE.mft (raw, json)
Hash identifier: gKGUm5kWBf2sL+YYq0ASqhrDHe0YzI7/9vIRjhtYOro=
Subject key identifier: 7C:DF:EF:FC:12:78:F6:EA:3E:F6:42:6A:56:F3:DE:6C:39:A0:B0:CE
Authority key identifier: E7:E8:41:6B:39:49:8D:1F:20:EE:F4:D8:31:DB:2F:FE:CD:E5:F3:01
Certificate issuer: /CN=A918FE64/serialNumber=E7E8416B39498D1F20EEF4D831DB2FFECDE5F301
Certificate serial: 04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-hBazlJjR8g7vTYMdsv_s3l8wE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FE64/1641D0DE5E3911F1B10499CF007AAC22/5-hBazlJjR8g7vTYMdsv_s3l8wE.mft
Manifest number: 03
Signing time: Fri 05 Jun 2026 09:39:51 +0000
Manifest this update: Fri 05 Jun 2026 09:39:50 +0000
Manifest next update: Fri 12 Jun 2026 09:39:50 +0000
Files and hashes: 1: 5-hBazlJjR8g7vTYMdsv_s3l8wE.crl (hash: 9ahDOrRYNeffgzm75967zDB7qEutjHdVJLEu4MdX9a8=)
2: A966E0CA5E3911F1AE025C80017AAC22.roa (hash: pmtjjwkJfcllfi5+ob6MblnqfEjyL3i5W+8VkNGojAg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FE64/1641D0DE5E3911F1B10499CF007AAC22/5-hBazlJjR8g7vTYMdsv_s3l8wE.crl
rsync://rpki.apnic.net/member_repository/A918FE64/1641D0DE5E3911F1B10499CF007AAC22/5-hBazlJjR8g7vTYMdsv_s3l8wE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-hBazlJjR8g7vTYMdsv_s3l8wE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 09:39:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FE64, serialNumber=E7E8416B39498D1F20EEF4D831DB2FFECDE5F301
Validity
Not Before: Jun 5 09:39:50 2026 GMT
Not After : Jun 12 09:39:50 2026 GMT
Subject: CN=6a229967-9a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:f1:83:82:bb:10:94:0d:bb:33:0b:9f:71:
87:e8:cb:1d:f1:40:a4:b0:e9:55:3b:a1:ce:d3:26:
20:57:f8:e5:e7:4f:c0:48:e4:a4:22:54:d8:e3:4d:
3c:59:45:9a:5c:82:b5:c8:ab:17:f6:36:35:8f:ab:
14:9f:24:b3:ff:19:51:a3:ce:79:8b:40:de:dd:86:
21:b2:76:49:f6:52:ff:18:d5:3c:50:72:7c:10:f1:
04:61:30:d6:5c:35:ba:08:68:da:54:31:91:41:f9:
fc:d5:84:ea:17:63:ff:cc:6c:a7:35:c7:1d:6c:64:
2f:5c:c9:ce:92:8a:b0:c2:f2:a4:1d:39:c4:f7:84:
69:ee:32:53:bc:fa:5b:8d:5a:c8:d0:dd:a6:b2:7d:
b0:3c:74:9f:08:91:e5:6d:46:1c:d0:e4:99:2d:70:
9c:74:63:46:aa:bf:1b:cd:8d:7f:1a:16:68:af:49:
82:33:d7:63:bd:e4:37:88:9c:29:ee:c3:af:d5:f0:
c0:1c:48:bb:e6:e2:34:09:da:ec:ac:94:29:23:40:
12:07:0a:75:24:02:67:aa:aa:09:58:c2:be:6b:ab:
f2:fd:b5:0e:8b:1c:40:58:f1:d3:50:c4:8e:04:88:
85:fa:3a:08:8b:08:76:77:c1:35:10:8e:9b:19:bb:
b0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DF:EF:FC:12:78:F6:EA:3E:F6:42:6A:56:F3:DE:6C:39:A0:B0:CE
X509v3 Authority Key Identifier:
keyid:E7:E8:41:6B:39:49:8D:1F:20:EE:F4:D8:31:DB:2F:FE:CD:E5:F3:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FE64/1641D0DE5E3911F1B10499CF007AAC22/5-hBazlJjR8g7vTYMdsv_s3l8wE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-hBazlJjR8g7vTYMdsv_s3l8wE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE64/1641D0DE5E3911F1B10499CF007AAC22/5-hBazlJjR8g7vTYMdsv_s3l8wE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8b:18:e6:37:a8:8b:b0:78:18:a8:96:28:72:43:2e:5a:cc:
5b:71:f0:16:4d:bc:0c:85:ac:1b:dd:42:32:ea:8c:02:48:54:
e2:c2:4b:87:a4:f2:2c:35:a1:3c:b8:76:8d:3d:18:1d:d8:15:
35:e9:81:e3:6b:92:2f:46:2c:93:5c:ae:b0:2e:d3:0c:be:ae:
c5:e5:31:bc:ab:f0:d8:b9:a5:38:a6:6a:90:31:cc:08:e0:b8:
93:5a:09:93:74:16:3e:25:fb:07:85:a5:a2:cf:92:88:24:bd:
6e:3c:28:79:68:24:27:5b:10:c5:39:1a:dd:4f:7e:86:75:75:
0b:e0:b1:f8:11:7e:d4:62:82:67:9d:24:f0:21:0b:06:72:34:
de:36:fa:f9:aa:38:c6:db:9e:f0:47:bd:ee:f7:1b:8a:9e:cf:
22:42:8e:fc:45:df:7e:57:39:79:71:00:43:35:cf:2c:04:57:
c3:9a:59:3e:cc:f4:16:54:77:32:98:aa:ce:33:2f:06:ba:dd:
ab:c5:1c:db:e1:95:cd:b2:21:ba:0a:41:ec:17:e7:09:87:c4:
bd:0f:7f:03:0c:00:d9:cc:22:5b:f3:cb:7f:d8:37:fb:4a:77:
2d:f2:19:9a:8d:92:f8:66:26:dc:ec:73:21:24:59:4f:5b:58:
5a:96:07:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:17:08 2026 by rpki-client