
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
File: _5I0f11UaIEf0lOki_xp_lcKpFA.mft (raw, json)
Hash identifier: YfedG9AUo4tELM1lmdtF9TXkjQuh6Us4jqYF460E5Qc=
Subject key identifier: 65:A8:12:30:B2:9D:5D:89:56:59:44:CD:97:F9:52:C3:25:05:49:EF
Authority key identifier: FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50
Certificate issuer: /CN=A9191769/serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450
Certificate serial: 0125
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
Manifest number: 0122
Signing time: Sun 05 Apr 2026 05:06:44 +0000
Manifest this update: Sun 05 Apr 2026 05:06:43 +0000
Manifest next update: Sun 12 Apr 2026 05:06:43 +0000
Files and hashes: 1: _5I0f11UaIEf0lOki_xp_lcKpFA.crl (hash: +gGfPo1PSNxmkmSo9PeZYUO6r0OYrX+A33UJP54y1Ws=)
2: 4D36C07677C311EF84D38A3BC4F9AE02.roa (hash: UonUgi37eGK5+UZSgpaI5VcXY/NpGaUyQWHx23St90A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl
rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191769, serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450
Validity
Not Before: Apr 5 05:06:43 2026 GMT
Not After : Apr 12 05:06:43 2026 GMT
Subject: CN=69d1ede4-aa7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:63:bd:b4:ca:f0:0c:c2:56:7e:9c:07:b7:31:
5b:01:d7:b0:27:ab:ce:d3:45:1b:54:c7:fc:b5:aa:
c8:ad:d4:c5:c0:d8:7e:84:60:e4:ea:fe:08:95:2a:
54:72:cd:42:29:f5:c9:7b:35:bb:e1:41:41:85:82:
1d:34:21:8e:11:0e:51:43:21:85:4c:5f:6f:bc:cb:
2b:2b:68:00:74:5c:23:a2:12:c1:51:e9:77:d4:f7:
74:cb:c7:40:89:19:67:73:47:76:cd:41:02:2d:8c:
a8:f1:5d:91:bb:df:96:f3:63:22:03:43:f0:ae:f2:
2f:25:31:01:d2:8a:55:11:8f:f4:20:30:e6:9f:03:
ac:ee:57:49:5b:86:b1:b9:09:75:40:43:65:d9:f5:
79:2a:49:ef:06:31:24:a1:3e:b3:1a:8a:94:4c:4a:
77:f5:dd:f3:cc:29:b7:25:75:1c:84:8f:9a:bc:8c:
22:67:8d:d8:95:33:3b:a9:9b:42:e9:f9:9c:aa:fb:
40:d4:d7:76:f4:53:b4:b9:11:21:f0:f6:2b:e7:b6:
c5:34:ce:05:fe:72:ab:47:8d:74:5e:1c:a6:17:dc:
00:f8:9c:55:74:f2:e6:14:b0:c0:f4:04:2e:fe:50:
1e:d0:0d:b7:01:10:ce:48:2f:83:64:80:d7:03:8e:
4c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A8:12:30:B2:9D:5D:89:56:59:44:CD:97:F9:52:C3:25:05:49:EF
X509v3 Authority Key Identifier:
keyid:FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3a:ba:75:56:a2:b0:14:cb:46:44:fc:bf:ea:fa:5e:ec:60:
64:34:4c:94:5a:40:da:0e:c9:b6:97:91:bd:0c:2d:d0:3f:fa:
f4:a8:2e:e1:45:85:f0:f2:8e:78:76:7e:f9:fe:66:4c:cd:b1:
0a:64:9d:99:41:93:e6:d1:97:e5:de:aa:4c:d5:be:04:bf:01:
fe:b3:c3:36:0f:23:da:e0:03:95:53:e9:28:b4:35:93:c2:2e:
7f:51:c1:80:0a:f6:fd:24:3d:f4:d9:bc:90:ea:1a:22:ac:d5:
2a:c7:5a:0e:d8:54:93:33:57:da:50:17:80:0a:97:00:7a:4e:
ff:9e:6a:4d:c6:1b:70:a6:50:36:20:93:eb:c1:7d:25:e3:6a:
9a:58:66:c2:df:5c:1f:98:c4:54:a8:93:c7:b0:4d:ad:04:56:
01:25:bd:f5:87:83:02:a3:6f:e2:46:08:07:6f:26:24:23:2f:
f5:be:df:87:79:59:5b:5c:67:69:46:aa:bf:8a:93:1c:3a:c3:
02:95:f5:c8:d0:cf:03:a1:91:65:e8:91:ae:15:3e:d4:34:af:
5b:7e:4e:db:1b:0b:48:45:18:ce:59:07:67:07:85:c9:d4:3e:
28:f8:63:e6:45:7b:c1:a9:c2:c5:30:af:66:fd:87:99:c1:1c:
72:cc:a7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:07 2026 by rpki-client