
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
File: E5zB22udJLk7FJKKdRjQTrOyajo.mft (raw, json)
Hash identifier: 9eB3mO3KzhfwRI6cUXlCO1r0+WlK48MAJzkzjZLh95A=
Subject key identifier: 72:EA:A5:7A:64:BF:21:63:28:8B:7C:61:1B:91:C2:96:44:1B:57:25
Authority key identifier: 13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A
Certificate issuer: /CN=A919DAF2/serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A
Certificate serial: 22AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
Manifest number: 226F
Signing time: Sat 04 Apr 2026 15:48:01 +0000
Manifest this update: Sat 04 Apr 2026 15:48:00 +0000
Manifest next update: Sat 11 Apr 2026 15:48:00 +0000
Files and hashes: 1: E5zB22udJLk7FJKKdRjQTrOyajo.crl (hash: x1cs9rCGDK0l+ZCLxEdiATOJXoEA9/6fFQhlxUff2SM=)
2: A20F01CCE1E511EEA0477018C4F9AE02.roa (hash: JrlK4WhlTrEpcG6FzSvzNowSlZJ2e3FVMbW+wA/7IUI=)
3: 5AE16D9A386F11EFABF4E132C4F9AE02.roa (hash: P48zRebozZVnn5ektjM30mXC7Go7YuGAk5mbHX9ouVo=)
4: C4F05AA6144911EF85E2DC26C4F9AE02.roa (hash: /NtrLnJuEAViuBe6uBD1zILIC3VQgyY0Q82ciLC1R7Y=)
5: FF59EC70144911EFA2053B27C4F9AE02.roa (hash: DqIZqq9ohYmJN2chmHjrncLYA4I+9XGMf3QKJ3iTURU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl
rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8879 (0x22af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DAF2, serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A
Validity
Not Before: Apr 4 15:48:00 2026 GMT
Not After : Apr 11 15:48:00 2026 GMT
Subject: CN=69d132b1-f0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a6:f8:3e:1e:e5:88:50:c3:c1:2f:f8:c4:4e:
d2:41:d8:96:b5:ce:53:c6:52:44:56:64:ac:c0:ab:
00:8c:8e:37:1d:d4:6d:cf:73:7d:68:1b:6d:50:3f:
9d:42:1d:10:a2:07:f1:29:a3:fe:ef:61:75:c9:e3:
c1:46:ad:1c:bb:39:a2:16:12:1e:b2:2f:d6:d3:76:
06:fa:ee:6a:8b:41:7b:32:7f:38:da:38:08:d6:cc:
e7:53:eb:db:78:e7:cf:e1:74:db:10:f8:f9:29:6f:
52:8e:35:4c:03:b5:27:9e:2b:c5:d1:d3:a4:01:07:
7c:ab:a5:8b:d4:df:c3:01:55:b5:c7:95:22:ee:04:
c3:cc:0c:72:8e:c6:10:ae:ba:da:5d:26:2c:aa:c0:
c1:6b:6d:b1:2d:42:9e:72:87:be:3e:50:96:f8:3b:
f8:dc:50:bf:8f:a2:ca:d0:3e:0c:e7:71:b0:a5:ac:
10:2d:b2:e4:1b:9e:80:85:39:0a:25:93:9a:39:9e:
a6:a2:b6:d7:fa:0e:89:8d:d7:c9:23:f1:83:61:ea:
2d:26:4f:9d:b9:8b:06:04:ee:ad:b4:6a:ac:09:ee:
2a:c1:6b:40:17:b9:42:7e:2d:0b:2b:8b:72:b8:eb:
94:4d:00:27:7c:87:fe:5b:c6:d3:78:52:a1:32:e8:
f2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EA:A5:7A:64:BF:21:63:28:8B:7C:61:1B:91:C2:96:44:1B:57:25
X509v3 Authority Key Identifier:
keyid:13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:67:0d:6e:5c:28:7e:e7:53:c0:7a:ae:e6:7e:d2:8f:19:f7:
1d:53:c2:24:c5:51:3a:ed:85:63:06:bc:84:9a:b4:76:64:a6:
6b:b2:b9:b2:97:ed:4d:62:ee:98:f6:ba:85:01:b5:9d:06:f8:
67:c7:03:e8:8b:2f:a3:2e:a1:9a:9f:84:e4:ba:af:f3:97:c6:
84:26:a3:bb:67:9b:8d:9a:52:b9:7c:6e:74:99:f6:92:7e:eb:
10:ec:2c:56:cb:ec:fd:6c:ba:52:b0:84:c9:77:78:d2:51:38:
6c:f1:c5:fb:b3:92:ae:d2:c1:53:5a:e3:4c:cb:1b:1b:b7:45:
19:1a:72:3d:ad:9a:05:a8:7b:e0:af:be:ec:8b:d4:a9:ad:0b:
e5:5b:dc:98:11:21:79:ea:19:ce:60:26:16:19:44:93:24:16:
7a:81:03:07:f8:2e:24:3d:28:8f:08:9f:bf:c1:cd:72:10:79:
85:ef:3b:e1:0c:b5:a6:39:f8:ea:1b:3b:d0:ae:f0:51:95:68:
ee:8d:51:96:1e:da:6e:31:44:2b:6d:ee:48:20:a3:b1:79:1a:
0b:ee:3c:ec:52:52:5d:5e:5e:e8:46:d9:6d:1e:c2:fe:20:21:
f5:97:76:0e:94:3f:2a:8f:38:d3:b7:3d:94:e2:ed:58:08:ed:
40:bb:b3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:35:19 2026 by rpki-client