
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
File: 5iRBKkJ5WJuewvqzIiurBibTElo.mft (raw, json)
Hash identifier: QlNfso3Ufh18fB19Wrtb3D6nmnUxqViUS+EiqmtFuXo=
Subject key identifier: AB:3C:DF:38:51:77:17:90:D4:FD:FE:9B:57:20:37:BB:41:1D:F9:04
Authority key identifier: E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A
Certificate issuer: /CN=A9168336/serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A
Certificate serial: 0D10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
Manifest number: 0CFC
Signing time: Sun 01 Mar 2026 23:45:59 +0000
Manifest this update: Sun 01 Mar 2026 23:45:58 +0000
Manifest next update: Sun 08 Mar 2026 23:45:58 +0000
Files and hashes: 1: 5iRBKkJ5WJuewvqzIiurBibTElo.crl (hash: WOBI1Lg6GH7nWgTQrGMDI9hFJIdjdIJGphBMq0ltaSg=)
2: 6B6223B294D011F08FAC1420C4F9AE02.roa (hash: ywPnX5HWIz7gB+GZOiMioEbYiFIq0HckI3yhWxQCoN4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl
rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3344 (0xd10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168336, serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A
Validity
Not Before: Mar 1 23:45:58 2026 GMT
Not After : Mar 8 23:45:58 2026 GMT
Subject: CN=69a4cfb7-96c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:93:3c:8e:58:b3:90:88:a8:1f:a8:f1:75:
d2:35:e2:d2:73:1a:ff:31:20:4e:bd:16:8d:64:81:
af:3c:ed:93:72:cd:36:4e:9a:87:6a:9d:d5:ab:65:
a3:3b:35:c0:32:c6:12:da:0b:56:8f:43:d3:08:a8:
e8:f0:42:25:c8:19:f9:9b:64:e0:c9:22:cb:7f:3b:
53:70:0c:82:3f:13:9b:bd:a7:e4:72:c6:3b:53:34:
aa:e4:f6:7b:e8:79:8e:c3:bf:db:48:e4:9d:26:c8:
9e:a5:f7:b2:cf:97:8c:3a:15:73:63:10:d6:19:73:
9c:50:d6:e0:e6:8f:ef:73:e9:ba:ae:f5:01:a8:de:
d6:f4:8b:58:5c:69:f5:4c:2b:6e:37:0c:31:cf:a0:
da:20:ee:7b:15:19:f0:0f:6e:37:91:15:4f:02:44:
24:d0:cb:2e:4e:4a:24:9d:d5:67:38:35:3b:76:97:
99:51:8c:dc:08:05:d3:52:40:1c:57:6d:17:34:58:
fe:95:f7:bb:54:62:c6:f7:6a:b3:fc:ae:14:c3:60:
a6:44:01:cc:23:3a:c5:be:f9:ff:98:ba:c8:ed:e8:
c8:3a:7b:5e:1a:9b:ba:4e:8b:fb:22:25:95:ff:1e:
03:3b:1c:93:90:62:d5:6d:3a:b3:1c:73:45:04:f7:
8e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3C:DF:38:51:77:17:90:D4:FD:FE:9B:57:20:37:BB:41:1D:F9:04
X509v3 Authority Key Identifier:
keyid:E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:08:c7:d7:bf:3a:f3:84:0a:86:4a:5d:99:0d:d5:5f:35:a1:
84:06:a0:1d:ee:e1:6d:3f:f5:4d:54:15:a8:2a:73:9b:b2:39:
97:98:c0:9a:d6:f0:3e:c5:b1:a3:e2:82:71:b2:1f:34:0b:a8:
e6:ae:34:80:45:70:87:10:9a:20:96:01:c6:da:06:d9:39:08:
b1:f0:49:f8:38:b6:25:6a:83:79:6e:9f:52:9b:ab:cf:d1:c9:
56:b1:55:58:ba:61:20:57:f0:b3:9f:5a:db:15:dc:4f:28:ef:
53:59:84:4c:e7:3d:16:a0:82:85:80:ca:23:24:0b:c0:2d:4d:
21:18:4b:4a:0d:76:45:ff:a8:0a:a2:fa:91:40:2d:c3:c3:37:
4b:5c:79:81:21:9a:71:99:de:16:90:3e:aa:c3:73:49:6d:00:
60:aa:10:59:9b:ab:de:e1:59:f2:3a:1c:c2:89:59:cb:0c:25:
09:fe:33:cc:76:05:ee:80:f0:ae:94:2c:c3:c7:d8:2c:59:81:
74:f4:52:56:4f:6b:b5:04:c2:e8:50:47:c8:74:8b:02:3e:f3:
2e:f8:a5:5b:a8:16:a9:03:f1:cc:32:eb:38:a2:54:9d:c1:93:
d7:08:61:f1:92:94:74:15:7d:73:29:f0:fa:a2:43:2e:ca:d9:
80:98:5f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:45:25 2026 by rpki-client