
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
File: 5ufguvNPIMPZye8md2gF84JGO4Y.mft (raw, json)
Hash identifier: O5KjENriJXgp0q7bMNiFkAB5DHUi5aR/gBDUnZKDJ4c=
Subject key identifier: B4:A4:5D:B6:D9:95:94:FE:76:F0:A4:F9:48:73:3A:E3:39:3A:F0:8B
Authority key identifier: E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86
Certificate issuer: /CN=A9160BD2/serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86
Certificate serial: 076D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
Manifest number: 0765
Signing time: Sun 20 Sep 2026 21:35:04 +0000
Manifest this update: Sun 20 Sep 2026 21:35:03 +0000
Manifest next update: Sun 27 Sep 2026 21:35:03 +0000
Files and hashes: 1: 5ufguvNPIMPZye8md2gF84JGO4Y.crl (hash: l1V1pn7cuGuWE29zAVH/8kB1c6xQFjGFz5svAvQoGuo=)
2: 159A3C967D7211EBA0A7FF60C4F9AE02.roa (hash: OEMpa1KlXpQKnwSOPbdVNFMo4hIhQv2n0cr4lbB8s+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl
rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 21:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1901 (0x76d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160BD2, serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86
Validity
Not Before: Sep 20 21:35:03 2026 GMT
Not After : Sep 27 21:35:03 2026 GMT
Subject: CN=6ab05188-5ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8d:21:34:a2:b9:f0:b5:34:f6:ef:6c:12:45:
fc:ac:4c:5c:e9:47:fd:a4:8a:9e:a3:35:a3:ce:90:
51:21:01:c3:be:a4:06:2c:63:bf:85:84:cf:6f:68:
af:b7:61:80:dc:fe:d3:d2:09:9f:37:fa:7d:b2:b6:
54:17:56:52:15:11:51:71:1f:42:a6:6b:9f:76:42:
40:96:fa:18:be:4d:3f:48:0e:8e:a2:06:39:d9:6b:
26:da:ae:c6:56:07:f4:68:11:9d:b7:97:2d:bb:0f:
a6:2f:ac:25:1d:ad:e2:05:d4:99:c6:2d:bf:48:a5:
ca:65:a2:e2:98:e3:38:b5:85:95:50:f7:fb:b9:86:
af:69:91:ea:0f:50:20:c9:a3:6d:8b:0e:90:31:76:
a6:7e:d8:49:e0:5b:c4:27:b0:29:e5:93:b8:b4:37:
5b:57:72:eb:1b:52:2b:f2:ba:79:a7:58:aa:00:7f:
10:99:f8:94:7f:ba:29:d1:ba:80:0e:73:f7:83:5c:
7d:31:f4:0e:9c:56:8b:87:91:b2:24:21:05:2f:2c:
59:ca:85:3a:1b:7c:75:e9:32:73:ab:f4:1b:b1:87:
51:39:d2:63:0c:4f:b1:56:45:3c:f4:37:11:ce:46:
d9:69:15:14:b2:ed:51:aa:90:2f:e1:4f:ce:cc:8f:
c6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A4:5D:B6:D9:95:94:FE:76:F0:A4:F9:48:73:3A:E3:39:3A:F0:8B
X509v3 Authority Key Identifier:
keyid:E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:dc:bf:6d:e9:34:02:d9:19:b8:c1:f0:17:79:14:27:12:51:
22:13:ee:15:54:4d:27:b5:c2:7a:cf:d3:38:75:1f:96:64:ce:
2f:4e:3d:fa:02:cf:9b:b2:7b:72:98:6f:97:15:53:3f:1f:32:
cc:9e:ff:ab:b3:fc:2a:1d:d2:76:7c:fb:f8:fb:09:66:dd:6c:
95:60:e3:cc:69:f0:ec:a4:3b:63:8d:82:a2:4e:98:8b:46:d9:
fa:5c:7c:1f:38:1d:d3:9e:8e:3a:38:1d:24:13:6b:e4:93:bc:
8f:de:72:48:4f:dd:0f:0f:2d:93:f6:79:e4:4c:b0:26:af:dd:
a2:38:87:27:f1:06:13:46:80:fc:17:1c:1c:fd:2c:19:01:9a:
95:80:67:1a:84:c3:d9:3c:e0:66:bf:54:33:90:81:cc:09:16:
e4:2c:2e:cf:b9:c1:30:9b:50:26:11:2b:74:74:bf:1a:54:94:
bd:ed:92:12:71:67:b4:20:f4:e9:74:d5:7d:bf:6e:a6:91:0f:
bf:55:74:87:dc:b2:0e:71:3c:6f:01:73:6a:c9:bf:c6:46:a1:
46:8a:1b:a8:ec:d4:f5:52:e8:ea:39:7d:3a:26:2b:95:83:7d:
6e:6b:80:74:9a:5f:14:c7:49:ac:a8:2f:e3:99:2e:95:4b:95:
4f:0e:67:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:12:36 2026 by rpki-client