
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
File: 5S3osZGTOKPiVWZOiASKVpihINA.mft (raw, json)
Hash identifier: RE3CZKUSHxtzviUblhkdlAHmOhtAkYG3Pwxr+QRoEv8=
Subject key identifier: C1:E2:03:52:78:A1:E2:75:02:67:7F:28:75:AE:19:AF:06:27:1A:68
Authority key identifier: E5:2D:E8:B1:91:93:38:A3:E2:55:66:4E:88:04:8A:56:98:A1:20:D0
Certificate issuer: /CN=A9160701/serialNumber=E52DE8B1919338A3E255664E88048A5698A120D0
Certificate serial: 0C21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
Manifest number: 0C14
Signing time: Thu 16 Apr 2026 18:43:11 +0000
Manifest this update: Thu 16 Apr 2026 18:43:10 +0000
Manifest next update: Thu 23 Apr 2026 18:43:10 +0000
Files and hashes: 1: 5S3osZGTOKPiVWZOiASKVpihINA.crl (hash: 8Jdx8p4rqvZTA2cGtCj20nRy4Qqdkf+xNIhuiZiWPXk=)
2: 6DCC06C231BC11EA9AACCA4BC4F9AE02.roa (hash: NDA9/ZIdOnZog2sK2a7R7CTd4jfshQqjGD+nO4awG3w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.crl
rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:43:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3105 (0xc21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160701, serialNumber=E52DE8B1919338A3E255664E88048A5698A120D0
Validity
Not Before: Apr 16 18:43:10 2026 GMT
Not After : Apr 23 18:43:10 2026 GMT
Subject: CN=69e12dbf-1ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4d:70:d0:e0:10:0b:a2:4f:da:ba:7b:51:c5:
38:9c:bd:c0:c3:93:ea:b7:5d:6e:64:53:c3:11:56:
25:a2:e5:74:66:6b:88:77:a0:d1:f9:a6:48:2a:6b:
d2:03:0e:b9:c1:66:d4:99:4f:61:8b:c6:04:03:62:
76:30:7b:50:fa:f5:2e:63:16:ea:9d:4f:86:de:68:
cf:f3:23:e5:a2:6a:99:cd:3d:7f:ed:a1:1e:69:dd:
ac:20:78:56:7b:51:8b:f3:f7:d5:7e:2f:b9:16:68:
df:03:03:af:66:2d:e7:50:e0:67:3d:2a:2c:40:ac:
8f:65:0b:f1:58:4d:9c:75:f8:d1:c8:ba:13:f9:c2:
87:3b:73:db:16:4a:21:3e:d5:37:7c:9b:71:c9:d4:
ae:7e:63:4e:54:96:e1:00:22:45:da:20:8e:fc:0d:
0c:c8:91:8a:29:92:7a:49:a2:7a:23:75:3c:4b:35:
e5:91:46:4f:dc:82:72:55:ce:97:e8:0e:26:dc:51:
41:b6:10:58:7c:47:38:a1:a2:a4:c5:26:95:de:b4:
50:0a:09:ef:97:a5:66:65:49:1b:45:6b:ca:70:ce:
c7:11:0a:b2:ef:73:3a:17:91:53:2d:ae:9e:ab:54:
5e:97:1b:18:a8:29:34:f6:38:d6:82:9c:68:26:0d:
84:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E2:03:52:78:A1:E2:75:02:67:7F:28:75:AE:19:AF:06:27:1A:68
X509v3 Authority Key Identifier:
keyid:E5:2D:E8:B1:91:93:38:A3:E2:55:66:4E:88:04:8A:56:98:A1:20:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:b0:dc:5f:cb:1f:de:ce:95:fc:58:01:51:a0:1f:b6:a5:bf:
d1:7f:fa:26:51:c5:20:a9:c8:fd:20:88:6d:a6:c4:ce:ff:83:
f6:1b:ec:e3:06:df:96:54:50:a6:41:f1:0c:58:f5:48:c0:4c:
f4:2b:80:e2:39:be:30:3b:b7:94:0f:80:26:93:c8:e5:1c:0c:
f1:8d:20:78:9b:65:16:05:86:b7:f2:71:98:c3:6b:5e:07:6b:
25:6b:4b:d4:9f:96:4b:82:8b:f9:b8:25:30:16:ca:cb:a8:17:
d5:89:0e:bd:6d:bd:b2:38:19:b0:42:da:bc:83:92:86:b1:c2:
74:35:0e:11:2e:85:75:b3:02:51:2a:c4:72:9d:1f:41:d3:6f:
49:b5:d1:3d:d3:4b:9d:34:7b:d3:81:8b:af:89:b6:68:d5:03:
a9:46:3e:77:a7:32:3d:c0:af:d8:2d:16:c8:57:b5:9a:9c:33:
bf:84:a1:3f:bd:d8:6e:a1:07:cf:18:2e:ff:db:e7:ee:98:22:
91:68:5c:a9:b8:bc:14:a2:3a:c1:94:a3:c4:57:de:29:1a:cb:
98:85:8f:ac:ae:45:0e:e4:b2:54:c0:ff:3a:46:96:7b:9b:51:
70:d3:f6:41:4e:33:5e:d1:6d:09:2f:03:d0:e5:59:12:ec:26:
5c:1d:7f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:30 2026 by rpki-client