
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
File: 5S3osZGTOKPiVWZOiASKVpihINA.mft (raw, json)
Hash identifier: JE2FliN1ry2iLYEed858LIxvk+bNm1YstmGk+HhHPes=
Subject key identifier: CD:EE:97:E3:3C:ED:2D:35:0A:55:CC:91:39:1B:25:87:4E:12:A0:AE
Authority key identifier: E5:2D:E8:B1:91:93:38:A3:E2:55:66:4E:88:04:8A:56:98:A1:20:D0
Certificate issuer: /CN=A9160701/serialNumber=E52DE8B1919338A3E255664E88048A5698A120D0
Certificate serial: 0C55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
Manifest number: 0C48
Signing time: Tue 28 Jul 2026 18:56:10 +0000
Manifest this update: Tue 28 Jul 2026 18:56:10 +0000
Manifest next update: Tue 04 Aug 2026 18:56:10 +0000
Files and hashes: 1: 5S3osZGTOKPiVWZOiASKVpihINA.crl (hash: pI1ECDbEy1NZP1ZGBdMTwjhb4Wcnfn1G15wVRSymvQ8=)
2: 6DCC06C231BC11EA9AACCA4BC4F9AE02.roa (hash: NDA9/ZIdOnZog2sK2a7R7CTd4jfshQqjGD+nO4awG3w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.crl
rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:56:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3157 (0xc55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160701, serialNumber=E52DE8B1919338A3E255664E88048A5698A120D0
Validity
Not Before: Jul 28 18:56:10 2026 GMT
Not After : Aug 4 18:56:10 2026 GMT
Subject: CN=6a68fb4a-13d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:dc:40:60:e6:f8:7d:07:fb:20:38:c4:02:
5d:63:45:31:1a:6a:fa:0b:4e:21:49:b7:c6:c8:6a:
eb:50:0c:27:a2:cd:74:75:ee:76:f5:93:c5:22:5b:
a6:f6:f7:53:b3:f1:eb:3b:6d:a1:53:15:72:68:81:
7e:a4:3a:42:a0:7f:dc:1e:29:40:f7:71:b7:54:91:
54:4a:f4:61:d2:77:a1:07:58:b9:dd:68:2d:60:69:
ea:e4:af:bf:e0:4a:7a:88:21:73:93:91:f9:53:fe:
1c:b9:c6:cf:0f:c3:31:4e:82:3c:d4:3a:e5:59:a6:
7e:51:d3:da:3a:7e:9d:c7:3f:6c:7b:d8:50:18:51:
16:1a:9b:3f:56:49:8a:92:93:ee:46:10:9c:c3:74:
50:b7:3b:e0:98:59:6d:ca:8a:a0:24:77:15:99:57:
bc:5f:5d:92:6c:ad:02:99:27:b9:93:ed:4c:84:36:
cc:45:32:03:db:82:a2:52:82:a1:2a:7d:36:a5:55:
b6:dc:57:88:39:bf:c9:6f:47:bd:f8:6d:3b:9f:41:
ee:ed:96:43:16:d8:aa:5b:2a:99:48:5b:f9:d4:7f:
dd:5f:63:dd:ab:1d:eb:57:16:ef:e8:27:38:1a:79:
c7:2f:bf:4e:f3:7f:33:8e:e6:d7:05:4a:fb:db:76:
58:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EE:97:E3:3C:ED:2D:35:0A:55:CC:91:39:1B:25:87:4E:12:A0:AE
X509v3 Authority Key Identifier:
keyid:E5:2D:E8:B1:91:93:38:A3:E2:55:66:4E:88:04:8A:56:98:A1:20:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:94:25:35:5b:a6:41:03:e0:9f:61:3e:32:5b:88:35:2e:ea:
08:e6:3b:71:cd:30:92:4e:74:47:ff:a0:ce:4a:54:60:c8:ba:
64:a5:27:39:63:d3:9d:56:9a:01:d7:59:a1:8b:44:8c:69:a1:
cf:9e:ec:68:c8:b0:e5:32:90:64:dc:f8:42:30:f0:40:8f:82:
34:0b:e0:2c:93:45:15:2d:99:9a:36:f0:12:33:25:6e:9d:d9:
89:6b:92:20:9b:df:1b:2e:0d:01:da:e9:f8:1d:07:d0:b4:37:
3f:22:0d:4a:22:9f:cb:2d:5a:cd:09:73:ac:97:31:c0:8f:f9:
dd:73:58:f7:be:c1:9a:6c:83:8c:3f:8e:48:5c:77:27:11:a5:
8c:ad:fe:04:10:69:df:e2:3d:ab:1a:b4:51:4a:fb:df:7b:9c:
54:80:6a:9b:38:50:bc:be:e1:70:86:18:98:73:a9:82:1e:59:
c7:a3:89:b9:35:1e:85:8f:f7:ed:e5:ce:8c:0d:a8:3a:a2:c1:
96:47:b1:b2:05:32:a1:aa:5b:70:ac:d5:3b:fe:36:96:f2:a0:
46:c1:6f:c0:7d:66:03:6e:33:44:d1:0c:cf:ce:05:12:5d:91:
94:86:88:a4:46:76:3a:31:a9:c3:1b:47:e8:3a:58:03:a2:fe:
6c:5a:a9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:54:36 2026 by rpki-client