
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
File: 5B7XVgdLN63ceU-UC9H1Pj9na5M.mft (raw, json)
Hash identifier: b+Be9jYYY08k9omGNulYl6luhqjAAVWO2EM+gFCyJ54=
Subject key identifier: B7:0A:50:2F:2C:D9:BE:BC:38:BD:82:7D:05:10:82:0D:F3:16:6F:17
Authority key identifier: E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93
Certificate issuer: /CN=A913B5C7/serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93
Certificate serial: 0172
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
Manifest number: 016D
Signing time: Mon 02 Mar 2026 00:17:15 +0000
Manifest this update: Mon 02 Mar 2026 00:17:14 +0000
Manifest next update: Mon 09 Mar 2026 00:17:14 +0000
Files and hashes: 1: 5B7XVgdLN63ceU-UC9H1Pj9na5M.crl (hash: BnyEqRO2OUxV+opWNlXt1ZYIDlgMPXdS9WrnrKy5tW8=)
2: B0CE94A0E80911EEADE3420AC4F9AE02.roa (hash: 4FDg9GWcMF+h0lyc+szQBWG2v8yyKRA36ab+Hfgr7nM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl
rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B5C7, serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93
Validity
Not Before: Mar 2 00:17:14 2026 GMT
Not After : Mar 9 00:17:14 2026 GMT
Subject: CN=69a4d70b-6c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f0:68:82:5c:aa:bc:74:cc:b9:a0:1d:26:ee:
f3:f2:23:6d:79:ae:98:09:9c:f5:4e:84:8a:15:c7:
6b:2d:2f:6d:1f:8a:94:c0:8f:a2:25:94:4a:94:ad:
96:f3:d6:29:9a:12:50:f4:c3:bb:b8:7d:e4:63:63:
f4:4b:5b:ee:02:eb:ac:3d:b7:ba:5b:2a:2c:50:03:
77:b7:c2:03:55:fb:95:58:3c:5e:45:09:01:bb:5b:
31:98:15:1e:d0:d8:5d:d6:70:46:e4:19:69:c5:0d:
40:c1:f6:4d:ee:66:5b:73:8b:a9:fa:a2:63:26:49:
1c:f1:09:26:d2:f2:e5:05:d9:36:56:bd:ef:1c:6c:
ff:55:14:31:82:eb:70:e2:e5:5a:b1:2a:3d:99:5d:
24:14:f3:53:6b:1a:00:83:c5:54:00:e6:fb:65:6f:
5d:29:82:f9:bc:58:d5:1f:79:9f:79:96:db:b9:55:
88:b0:9e:52:77:40:f7:f8:62:8f:67:ea:78:58:68:
b0:df:44:bf:d9:1a:4b:8a:b2:2c:cc:81:41:bd:2d:
57:c2:f9:0a:0d:27:4b:2d:cb:5a:09:59:6f:dc:9b:
23:16:78:c6:47:6c:4b:18:b6:73:c8:23:4c:2c:33:
9a:8f:bc:98:50:3e:a2:0c:c9:d4:b9:10:33:e4:96:
9a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0A:50:2F:2C:D9:BE:BC:38:BD:82:7D:05:10:82:0D:F3:16:6F:17
X509v3 Authority Key Identifier:
keyid:E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:0b:13:a7:0f:cd:51:46:cd:57:76:b4:3a:33:85:52:9e:1b:
0b:b4:a3:ae:43:d3:80:f1:8b:94:e4:e1:17:27:22:cb:c6:04:
63:af:e8:02:09:bb:b9:bc:df:4d:7b:c2:58:c7:08:0b:83:f7:
69:71:00:32:4e:31:68:1b:98:03:14:13:bf:de:cb:44:e1:d1:
56:6c:19:06:57:d4:82:6f:54:04:bc:c1:ef:38:01:76:b4:2a:
e2:33:dd:35:44:0b:dd:9c:a0:5d:38:6c:2b:92:5d:2a:b0:12:
bd:74:5c:ba:fd:2e:55:c6:7f:1d:79:7e:e1:5e:42:a2:30:f4:
7a:b3:bf:ef:fe:d6:c2:7a:eb:a7:ca:72:f6:c9:91:3e:e8:61:
71:53:b8:9d:ba:6c:bd:4a:34:dc:9f:ca:c3:a1:da:fa:4c:93:
e8:3a:38:21:29:71:d1:ba:62:d7:4e:23:38:06:53:da:1d:f9:
5e:4d:f6:00:9e:28:f1:53:6b:1f:d9:0c:8a:cd:69:14:ee:26:
65:5e:89:b1:0e:3f:23:11:3c:b9:0d:01:a1:34:6c:2f:19:cd:
62:56:12:84:e7:59:40:9f:a6:ce:cd:91:3c:3e:4f:49:7e:39:
2d:10:56:a4:02:01:d5:ab:bd:5d:27:14:ae:5d:26:a4:dc:36:
2f:f1:86:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I1QzcxMTAvBgNVBAUTKEU0MUVENzU2MDc0QjM3QUREQzc5NEY5NDBCRDFGNTNF
M0Y2NzZCOTMwHhcNMjYwMzAyMDAxNzE0WhcNMjYwMzA5MDAxNzE0WjAYMRYwFAYD
VQQDEw02OWE0ZDcwYi02YzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz/BoglyqvHTMuaAdJu7z8iNtea6YCZz1ToSKFcdrLS9tH4qUwI+iJZRKlK2W
89YpmhJQ9MO7uH3kY2P0S1vuAuusPbe6WyosUAN3t8IDVfuVWDxeRQkBu1sxmBUe
0Nhd1nBG5BlpxQ1AwfZN7mZbc4up+qJjJkkc8Qkm0vLlBdk2Vr3vHGz/VRQxgutw
4uVasSo9mV0kFPNTaxoAg8VUAOb7ZW9dKYL5vFjVH3mfeZbbuVWIsJ5Sd0D3+GKP
Z+p4WGiw30S/2RpLirIszIFBvS1XwvkKDSdLLctaCVlv3JsjFnjGR2xLGLZzyCNM
LDOaj7yYUD6iDMnUuRAz5JaaKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLcKUC8s
2b68OL2CfQUQgg3zFm8XMB8GA1UdIwQYMBaAFOQe11YHSzet3HlPlAvR9T4/Z2uT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjVDNy82N0QyNDM5NkU4
MDkxMUVFQkU0ODk1NjNDNEY5QUUwMi81QjdYVmdkTE42M2NlVS1VQzlIMVBqOW5h
NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVCN1hWZ2RMTjYzY2VVLVVDOUgxUGo5bmE1TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjVDNy82N0QyNDM5NkU4MDkxMUVFQkU0ODk1NjNDNEY5QUUwMi81QjdYVmdkTE42
M2NlVS1VQzlIMVBqOW5hNU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApAsTpw/NUUbNV3a0OjOFUp4bC7SjrkPTgPGLlOThFyciy8YEY6/oAgm7ubzf
TXvCWMcIC4P3aXEAMk4xaBuYAxQTv97LROHRVmwZBlfUgm9UBLzB7zgBdrQq4jPd
NUQL3ZygXThsK5JdKrASvXRcuv0uVcZ/HXl+4V5CojD0erO/7/7Wwnrrp8py9smR
PuhhcVO4nbpsvUo03J/Kw6Ha+kyT6Do4ISlx0bpi104jOAZT2h35Xk32AJ4o8VNr
H9kMis1pFO4mZV6JsQ4/IxE8uQ0BoTRsLxnNYlYShOdZQJ+mzs2RPD5PSX45LRBW
pAIB1au9XScUrl0mpNw2L/GGfQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:31:04 2026 by rpki-client