
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
File: 45qx0HtQ27mr4stRzZseOlqFRSE.mft (raw, json)
Hash identifier: GTgVdeCxfa6oi/1E5JEFLojVeCXgxVA1ky8jVLlopCs=
Subject key identifier: A0:6B:2E:26:D8:D7:4A:04:DE:98:0C:6E:32:0E:A9:45:44:56:70:FD
Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Certificate serial: 359D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
Manifest number: 355C
Signing time: Sat 16 May 2026 15:09:04 +0000
Manifest this update: Sat 16 May 2026 15:09:04 +0000
Manifest next update: Sat 23 May 2026 15:09:04 +0000
Files and hashes: 1: 45qx0HtQ27mr4stRzZseOlqFRSE.crl (hash: k/OwoVb25/uEt+LAxQi0oiD99tc8BiqqtwfRTeNioE0=)
2: 993B537CDD1911EA96723D11C4F9AE02.roa (hash: G25/DoIQB4l/NxwZR2ZZ4S0VBthWUlwHYrnZ9UpUQ54=)
3: 98AF39F22E4211F1901494E893833773.roa (hash: iFoAuTtUU0PmJ95WE4oNN0+3octF6zZzDVlPo3nsN08=)
4: 70B74E2A16D811F1AFC6DD17323D8C67.roa (hash: nrDC018+z1XNNvIImlFWWlSnFpyUJj5uRlYNJgcEsC8=)
5: 2A24EFB878D011F08CEB9275C4F9AE02.roa (hash: qZUPt2igy/OZCeagcwY7sBJ8TPbC9Y0onFfuw4bOoUY=)
6: 92F53A0A4D8111EFAB3C1447C4F9AE02.roa (hash: XccP1/47583iPiSx+eEAvXi2g46yNyTAMgjTPnRV7Z4=)
7: E243CD9C227811F1B65A16B9A4833773.roa (hash: S/AzEaze3DTMcHGlipjXyDifcNRIK7tT17DD9pwo8PU=)
8: 6A44AF9A1AC711F191E10968393D8C67.roa (hash: uPMubkV8FhRQlQGVWB1Ss5RVIBMdWnZesOclj5/0msM=)
9: 6AE0DC4E1AC711F191E10968393D8C67.roa (hash: EIquPTmzhNm/EgMF6y+odwoHMOmuWe10Hl5flxr8E0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13725 (0x359d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Validity
Not Before: May 16 15:09:04 2026 GMT
Not After : May 23 15:09:04 2026 GMT
Subject: CN=6a088890-5ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:a6:76:08:7b:6b:71:3b:ea:bd:f3:1a:d0:
45:78:43:7f:5a:1b:ca:47:4c:01:fe:30:f8:c6:b9:
8f:e5:d2:a6:d0:5b:45:c6:3c:a2:60:c8:d3:b9:83:
dc:43:24:97:4d:3f:a4:9a:9f:fe:83:07:0e:8e:19:
9f:9c:0c:f3:bd:55:3c:01:64:1a:e8:3b:0e:c0:a0:
1f:39:13:a1:76:b1:9e:11:4b:ef:cb:e8:27:20:6f:
34:ec:00:ed:17:73:f6:46:e2:84:7c:79:38:05:f1:
94:29:f3:65:6a:22:3e:80:93:17:1e:75:2b:f6:2d:
ec:8d:59:11:10:2c:9a:46:77:f0:45:00:78:ed:b9:
2b:92:bb:5a:c7:16:24:74:ac:b0:47:02:46:b6:4c:
26:99:1a:39:cd:82:7a:2e:f9:0e:26:05:a1:5f:99:
c6:07:95:af:ab:93:30:95:58:f5:d8:9b:76:53:6e:
6b:27:c2:14:8a:4e:0b:11:17:b9:c6:32:34:8d:4a:
4d:83:ad:99:cf:19:27:fe:85:3d:53:4f:ae:20:13:
ef:51:f7:9d:a9:ae:af:ad:0a:0d:b8:a9:e6:03:c5:
47:6d:ee:88:43:d0:57:3b:02:07:19:a0:93:09:c7:
20:ef:54:02:cb:46:1e:13:8b:74:6d:60:8f:0c:ce:
c7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6B:2E:26:D8:D7:4A:04:DE:98:0C:6E:32:0E:A9:45:44:56:70:FD
X509v3 Authority Key Identifier:
keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c3:6f:ed:34:67:8b:9a:92:9f:ee:63:f9:c9:52:e7:b0:40:
bb:32:56:61:e5:a3:79:47:be:56:8f:5c:d4:fb:69:86:f7:a2:
af:d7:4f:b3:5d:61:c6:db:bf:fb:bd:82:ae:74:5a:64:1e:3d:
71:19:4e:9a:bd:88:8a:c6:f3:d8:46:5b:e9:3a:6f:5d:25:a9:
c7:dd:4d:aa:a7:39:a8:97:ff:35:8e:37:cf:00:0a:7a:70:41:
61:12:1d:b3:b8:4f:82:2c:0a:d6:77:e7:b5:45:90:74:8d:12:
20:d0:c1:b1:79:49:78:f7:db:17:0a:66:9c:71:41:35:79:8b:
a4:7d:b7:ab:c2:35:f2:6b:30:29:eb:6a:1a:39:fa:97:89:31:
56:87:aa:ff:e2:ea:d7:6f:9f:bf:cd:c7:7a:68:af:3c:b3:ef:
73:7c:41:37:00:48:41:b9:d2:de:53:65:06:26:8c:19:09:5e:
ca:d4:da:95:92:ab:fb:70:60:32:f9:f9:bd:8d:8e:09:f2:33:
e0:fe:15:48:50:e7:b8:58:24:f2:f9:7d:a8:73:ad:77:fc:bf:
f2:02:64:bc:89:9c:bb:e9:6b:60:85:e7:2d:67:c4:36:62:ac:
a0:69:c2:5d:96:94:5c:e7:e2:86:c6:3f:dc:d9:3f:be:3a:4d:
fa:4c:f5:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRFMDMxMTAvBgNVBAUTKEUzOUFCMUQwN0I1MERCQjlBQkUyQ0I1MUNEOUIxRTNB
NUE4NTQ1MjEwHhcNMjYwNTE2MTUwOTA0WhcNMjYwNTIzMTUwOTA0WjAYMRYwFAYD
VQQDEw02YTA4ODg5MC01ZWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAquymdgh7a3E76r3zGtBFeEN/WhvKR0wB/jD4xrmP5dKm0FtFxjyiYMjTuYPc
QySXTT+kmp/+gwcOjhmfnAzzvVU8AWQa6DsOwKAfOROhdrGeEUvvy+gnIG807ADt
F3P2RuKEfHk4BfGUKfNlaiI+gJMXHnUr9i3sjVkRECyaRnfwRQB47bkrkrtaxxYk
dKywRwJGtkwmmRo5zYJ6LvkOJgWhX5nGB5Wvq5MwlVj12Jt2U25rJ8IUik4LERe5
xjI0jUpNg62Zzxkn/oU9U0+uIBPvUfedqa6vrQoNuKnmA8VHbe6IQ9BXOwIHGaCT
Cccg71QCy0YeE4t0bWCPDM7HPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKBrLibY
10oE3pgMbjIOqUVEVnD9MB8GA1UdIwQYMBaAFOOasdB7UNu5q+LLUc2bHjpahUUh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEUwMy8zRjQ4RjIyNDFE
QTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3bXI0c3RSelpzZU9scUZS
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQ1cXgwSHRRMjdtcjRzdFJ6WnNlT2xxRlJTRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEUwMy8zRjQ4RjIyNDFEQTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3
bXI0c3RSelpzZU9scUZSU0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAusNv7TRni5qSn+5j+clS57BAuzJWYeWjeUe+Vo9c1Ptphveir9dPs11hxtu/
+72CrnRaZB49cRlOmr2Iisbz2EZb6TpvXSWpx91Nqqc5qJf/NY43zwAKenBBYRId
s7hPgiwK1nfntUWQdI0SINDBsXlJePfbFwpmnHFBNXmLpH23q8I18mswKetqGjn6
l4kxVoeq/+Lq12+fv83HemivPLPvc3xBNwBIQbnS3lNlBiaMGQleytTalZKr+3Bg
Mvn5vY2OCfIz4P4VSFDnuFgk8vl9qHOtd/y/8gJkvImcu+lrYIXnLWfENmKsoGnC
XZaUXOfihsY/3Nk/vjpN+kz13Q==
-----END CERTIFICATE-----
Generated at Sun May 17 03:46:16 2026 by rpki-client