
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
File: 5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft (raw, json)
Hash identifier: XO9WO0UTZfJ2dr92g9lieOjG+Bn2rLsyYF5f2Nhnmlo=
Subject key identifier: B6:7C:E3:9D:AB:05:C0:0C:8D:EC:B5:1B:10:CB:83:16:6C:6B:88:F1
Authority key identifier: E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
Certificate issuer: /CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
Certificate serial: 064C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
Manifest number: 0620
Signing time: Thu 24 Sep 2026 22:48:39 +0000
Manifest this update: Thu 24 Sep 2026 22:48:38 +0000
Manifest next update: Thu 01 Oct 2026 22:48:38 +0000
Files and hashes: 1: 5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl (hash: JvlBpVegEydaL6gWoBXSN9WcIPQIQcoJ59NPYk4L32Y=)
2: 2C4993AA271B11EF97731F0BC4F9AE02.roa (hash: GP7UGfZCMHOPLL1gZXCEO6qhlaky7I3CQ/nq013zLKM=)
3: D5AEE7FEF61A11F0A42262E05A6F56BC.roa (hash: YonCxURFZFCSJYKZZl/AlgVFdSlrOcW3O6u6eFemois=)
4: 9CB324BA273111EF9F5B0860C4F9AE02.roa (hash: suAI1YPeN8kbgOgmaGzzfLUHLWI1/VRvkqObcPH/nuk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl
rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 22:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1612 (0x64c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165362, serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
Validity
Not Before: Sep 24 22:48:38 2026 GMT
Not After : Oct 1 22:48:38 2026 GMT
Subject: CN=6ab5a8c7-6add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:1f:6c:38:e9:6a:4b:be:76:b8:b1:8a:4f:
4a:38:ae:b0:44:37:f9:bd:96:e1:95:e9:98:59:38:
f3:1f:f9:55:fc:a1:8e:79:24:2e:dd:ae:a5:90:2f:
55:8e:bc:66:0e:14:54:45:41:d9:3d:d4:b5:56:aa:
72:fa:07:bb:8e:ec:6a:94:cc:39:fa:86:94:42:b5:
10:45:33:e7:7a:13:70:4d:d0:12:74:41:e8:5c:28:
31:9a:0c:f1:9f:be:fb:e7:74:08:22:2b:cd:36:08:
dd:5c:df:69:e0:de:7f:72:21:cc:86:5a:64:e5:c7:
30:7d:de:dc:37:02:70:2d:b8:f5:bd:35:a0:fc:a1:
4f:f9:63:08:07:33:37:b1:5a:bf:19:8f:8c:bc:4d:
95:c0:64:f6:e4:b9:c5:ae:ef:11:3b:9f:f9:06:62:
2a:9f:71:ee:a8:d6:54:1d:b0:65:6c:91:28:c5:32:
2e:3f:1e:5b:55:37:79:c3:97:00:9f:e6:c9:32:8f:
6b:a0:0d:43:4d:17:56:84:06:2a:24:e2:84:98:14:
5d:2d:60:51:76:bc:76:f6:90:a7:d8:1b:4f:2c:90:
98:eb:e8:ee:a1:fc:b6:19:46:12:60:3d:76:99:be:
f8:a9:59:74:81:c5:7b:0d:03:0a:0c:94:f1:e6:83:
21:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7C:E3:9D:AB:05:C0:0C:8D:EC:B5:1B:10:CB:83:16:6C:6B:88:F1
X509v3 Authority Key Identifier:
keyid:E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:8a:12:ef:43:08:9f:40:f4:9d:f4:57:fe:bf:5e:29:99:01:
17:15:23:65:51:8b:9d:51:c4:ba:da:3d:06:54:86:24:c9:33:
a9:41:cb:e3:87:a9:10:35:c8:2c:ea:21:f0:d4:0a:b5:21:19:
7e:41:f4:c1:f3:34:ac:ca:e9:d5:17:53:33:e7:be:39:93:9d:
b0:dc:7c:4e:ba:e8:58:53:d3:ae:1b:9e:13:6f:c3:e4:fc:72:
c4:13:fd:9c:a7:15:c5:14:70:3c:38:ab:ed:d8:6f:8a:33:32:
48:4e:88:3c:24:ce:c5:9a:93:c7:35:0f:25:88:90:a7:33:2a:
56:6e:1e:cb:d6:02:54:d4:d1:9e:dc:5a:54:f6:0b:df:cf:b5:
27:52:2b:ee:0d:43:8b:ac:a0:c5:50:af:95:8a:54:b6:b1:90:
5f:39:4e:3e:79:03:28:ca:86:db:e7:d6:e1:00:7b:cb:b0:de:
f2:88:f6:f6:eb:4b:2b:8a:47:94:e7:fe:f4:27:43:d9:8c:a4:
43:50:a2:c9:fd:ff:fb:5d:d8:7a:27:a3:56:ec:76:96:aa:53:
c8:32:2d:74:a4:fa:51:13:e4:35:73:68:82:ca:54:85:89:0a:
c3:78:37:f5:c7:13:4a:ec:75:b8:bb:a0:f7:71:af:93:f7:33:
d7:37:b1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:04:20 2026 by rpki-client