
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
File: MfN4PHoe14P8H9p0H2p1KdWl5qA.mft (raw, json)
Hash identifier: CHgKhr0nt24K8FlR00dz1y2QtBWLWTpgHfe5P+qadlU=
Subject key identifier: EC:7C:DA:19:65:45:12:1A:29:CF:F9:69:E9:F1:93:9E:FF:44:1A:8D
Authority key identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0
Certificate issuer: /CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0
Certificate serial: 0543
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
Manifest number: 053A
Signing time: Wed 20 May 2026 23:33:21 +0000
Manifest this update: Wed 20 May 2026 23:33:21 +0000
Manifest next update: Wed 27 May 2026 23:33:21 +0000
Files and hashes: 1: MfN4PHoe14P8H9p0H2p1KdWl5qA.crl (hash: 7NGD1fCfrVWoezIPmu8gbnwgoVasDO3TeDyIMnXpXSM=)
2: CF272560413111ECB71E086AC4F9AE02.roa (hash: B85i9GlcOeiOoR1hQF1a7WIZsOujBEcuH+d9GBIiQdM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl
rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1347 (0x543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199B24, serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0
Validity
Not Before: May 20 23:33:21 2026 GMT
Not After : May 27 23:33:21 2026 GMT
Subject: CN=6a0e44c1-f076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1f:00:b1:68:cf:2c:55:e8:e5:75:dd:b7:c8:
6e:56:b0:fe:3f:88:85:80:81:69:2d:e3:79:29:d4:
6c:1a:7a:27:16:c8:21:ab:e9:72:56:27:75:16:ff:
e6:f2:14:65:16:31:85:46:54:6f:d1:99:45:18:2c:
30:a5:16:1f:6e:8c:21:ef:76:e7:eb:88:ee:83:cc:
08:5e:01:d0:c6:97:fc:05:44:3a:3b:15:51:d2:5a:
04:cd:f0:8e:f0:64:bb:71:4d:31:11:5d:9f:b5:9d:
8a:2a:15:dc:f9:15:2d:64:16:6d:a3:ea:0c:37:1d:
b3:5b:79:57:7d:02:61:91:94:75:81:7d:61:73:07:
e6:7d:33:0a:8b:e4:7c:e4:49:ba:dd:00:d6:4a:7e:
c0:be:16:4b:41:17:e9:7e:ea:56:3f:ca:b4:91:77:
a1:b8:d2:9e:f0:6e:f0:a2:bb:58:4d:fb:de:47:7f:
2d:39:38:ac:07:37:49:8d:9f:fe:50:64:c9:fd:fc:
fa:6b:44:24:13:8b:5c:29:5e:c2:ae:ce:43:30:8e:
59:98:4c:95:6a:cf:00:e1:d4:a9:58:5a:2c:6b:13:
a9:12:18:0f:83:54:33:3c:6e:0e:da:60:72:1e:d9:
6a:2c:8c:4f:0b:75:ca:ab:aa:e1:61:40:7c:35:40:
e4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7C:DA:19:65:45:12:1A:29:CF:F9:69:E9:F1:93:9E:FF:44:1A:8D
X509v3 Authority Key Identifier:
keyid:31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:70:cb:fc:aa:2f:39:72:20:18:de:e2:4c:c5:43:f0:8e:ca:
d8:a3:6a:db:88:20:03:3d:cd:ad:66:8b:b3:0c:43:5b:7a:5f:
d0:28:6e:5e:d2:a5:95:05:9f:9a:ff:4b:69:b5:29:a9:24:49:
88:dc:31:4f:ec:fb:1f:c0:3e:f0:ae:99:d0:14:aa:5c:23:d2:
23:de:0a:ec:0c:4b:35:3c:00:8c:b3:19:6c:33:5c:7a:ef:7b:
2e:cb:df:a7:54:87:0b:8c:46:30:f0:0f:d1:78:ca:28:20:9d:
7a:16:ab:db:b1:47:58:14:ad:bc:fd:8e:60:92:c1:84:6b:4c:
8a:3b:b0:7f:4a:0a:e6:b4:66:2a:26:08:8c:8b:5a:c5:9d:b4:
61:bf:75:9e:dd:e3:cc:97:14:ee:19:87:91:db:b8:32:3d:54:
2f:f1:9f:a6:2a:8b:2e:e9:11:72:d4:a9:01:f5:f2:a5:98:4b:
76:e6:18:e1:66:f9:3a:d7:2d:55:b6:c8:ee:9f:48:e6:44:61:
9b:27:d7:8f:1b:9b:8e:12:d0:34:33:bd:d8:c1:16:ec:46:ea:
26:1e:f4:07:96:48:30:51:ed:4d:8e:f8:b6:14:39:31:d4:04:
f9:c2:85:c1:c6:38:54:c0:e7:1a:46:40:48:1a:98:18:1c:e7:
38:84:cb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:36 2026 by rpki-client