
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
File: 5iRBKkJ5WJuewvqzIiurBibTElo.mft (raw, json)
Hash identifier: jghb73tSuh3GNMh0ofHkUy+Nb0FNFqA9VU8ADSnbcro=
Subject key identifier: 02:93:95:D1:EC:D7:E9:EA:48:D1:E8:37:54:99:E5:3D:05:DA:A3:17
Authority key identifier: E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A
Certificate issuer: /CN=A9168336/serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A
Certificate serial: 0D28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
Manifest number: 0D14
Signing time: Thu 16 Apr 2026 18:05:52 +0000
Manifest this update: Thu 16 Apr 2026 18:05:51 +0000
Manifest next update: Thu 23 Apr 2026 18:05:51 +0000
Files and hashes: 1: 5iRBKkJ5WJuewvqzIiurBibTElo.crl (hash: V2HX29hWCRcj8T4Sqyjz1/84fBYNDaVEL27VJdN36MA=)
2: 6B6223B294D011F08FAC1420C4F9AE02.roa (hash: ywPnX5HWIz7gB+GZOiMioEbYiFIq0HckI3yhWxQCoN4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl
rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3368 (0xd28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168336, serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A
Validity
Not Before: Apr 16 18:05:51 2026 GMT
Not After : Apr 23 18:05:51 2026 GMT
Subject: CN=69e12500-2824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2f:23:9f:77:72:de:54:5b:94:08:7b:27:bd:
31:d2:f1:6a:c8:ed:c1:ad:3e:6b:54:d7:3e:4a:c9:
30:b0:65:ee:e2:4f:d5:c6:f2:8c:43:79:4f:1e:17:
46:2e:d2:e6:19:35:80:76:62:0b:d7:39:e1:bd:f5:
7c:2e:8b:74:59:48:27:f5:ab:ff:5b:0d:53:0a:d9:
53:13:04:d4:fc:da:59:7c:b8:c4:e9:25:9f:fe:fa:
6a:36:68:aa:ed:0a:49:aa:e7:95:0a:fc:3b:5d:b0:
2c:5d:b9:ad:2a:57:18:6d:74:b3:88:2b:c1:b8:e6:
4e:3a:57:6f:06:8e:4c:19:ae:5d:df:dc:45:fe:92:
54:d8:c6:d2:1f:df:57:a6:6c:15:78:9e:9a:42:80:
25:f4:e8:96:72:98:3a:1a:17:bd:20:6b:8d:b0:fe:
d0:99:fb:7c:fa:7b:66:77:d1:42:e1:ba:73:b2:12:
3b:4e:b0:73:8d:f7:bf:1a:63:87:b2:c2:c3:7e:bc:
aa:f1:32:35:22:eb:72:e6:76:d1:d9:35:42:cd:c0:
7b:e8:ad:6e:6d:1e:87:9c:1d:9b:00:d3:24:05:81:
10:5d:61:02:41:5c:13:21:ea:9e:8e:09:2e:47:12:
55:1b:99:60:84:54:3d:65:b8:25:75:f4:26:b2:28:
fb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:93:95:D1:EC:D7:E9:EA:48:D1:E8:37:54:99:E5:3D:05:DA:A3:17
X509v3 Authority Key Identifier:
keyid:E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:d9:ae:f6:42:25:4a:95:62:f3:4d:2c:21:bd:0a:0c:0f:98:
1c:05:cf:3d:50:4d:36:b1:33:9c:ca:c8:19:7a:04:7c:e5:09:
ef:0d:3e:77:c4:45:34:6d:3d:d3:8d:19:64:ff:e4:a4:03:25:
d2:2d:7d:e9:a8:db:e1:68:f7:c2:64:74:3b:d9:7e:19:e7:fe:
b3:12:a9:68:d8:2f:d6:57:34:31:ae:7a:9c:49:f9:3e:f3:ee:
38:62:67:91:ea:79:82:9c:10:f2:be:19:a7:0c:d1:6e:b3:bb:
97:c9:1b:aa:ca:6f:31:a0:55:3b:06:f1:b0:ec:4d:a7:b0:2f:
c6:62:ad:50:3f:2b:7e:12:6c:a7:7b:17:00:cc:67:de:14:fb:
ba:63:de:93:a0:bf:e0:b3:9c:32:44:8e:e2:99:ee:8a:7c:43:
08:02:37:6e:65:0e:a9:cc:d8:4f:e0:ae:b5:11:68:68:be:f1:
78:44:ea:42:4c:e9:ea:45:17:b6:30:73:62:29:0c:3c:b4:28:
ce:9d:1e:0d:a7:a0:70:b8:58:fb:bd:08:78:24:04:ca:ac:e1:
ae:c7:2f:24:52:29:31:6d:5f:cb:e5:0f:ed:72:e5:5b:28:12:
58:3b:fa:e0:09:b5:03:07:2b:3c:7e:ed:77:ac:22:a4:44:ae:
ca:32:11:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjgzMzYxMTAvBgNVBAUTKEU2MjQ0MTJBNDI3OTU4OUI5RUMyRkFCMzIyMkJBQjA2
MjZEMzEyNUEwHhcNMjYwNDE2MTgwNTUxWhcNMjYwNDIzMTgwNTUxWjAYMRYwFAYD
VQQDEw02OWUxMjUwMC0yODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAni8jn3dy3lRblAh7J70x0vFqyO3BrT5rVNc+SskwsGXu4k/VxvKMQ3lPHhdG
LtLmGTWAdmIL1znhvfV8Lot0WUgn9av/Ww1TCtlTEwTU/NpZfLjE6SWf/vpqNmiq
7QpJqueVCvw7XbAsXbmtKlcYbXSziCvBuOZOOldvBo5MGa5d39xF/pJU2MbSH99X
pmwVeJ6aQoAl9OiWcpg6Ghe9IGuNsP7Qmft8+ntmd9FC4bpzshI7TrBzjfe/GmOH
ssLDfryq8TI1Iuty5nbR2TVCzcB76K1ubR6HnB2bANMkBYEQXWECQVwTIeqejgku
RxJVG5lghFQ9ZbgldfQmsij7nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAKTldHs
1+nqSNHoN1SZ5T0F2qMXMB8GA1UdIwQYMBaAFOYkQSpCeVibnsL6syIrqwYm0xJa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODMzNi8xOUY3NUE2NjAx
Q0QxMUVBQjg2NUVBMjJDNEY5QUUwMi81aVJCS2tKNVdKdWV3dnF6SWl1ckJpYlRF
bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVpUkJLa0o1V0p1ZXd2cXpJaXVyQmliVEVsby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODMzNi8xOUY3NUE2NjAxQ0QxMUVBQjg2NUVBMjJDNEY5QUUwMi81aVJCS2tKNVdK
dWV3dnF6SWl1ckJpYlRFbG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMdmu9kIlSpVi800sIb0KDA+YHAXPPVBNNrEznMrIGXoEfOUJ7w0+d8RFNG09
040ZZP/kpAMl0i196ajb4Wj3wmR0O9l+Gef+sxKpaNgv1lc0Ma56nEn5PvPuOGJn
kep5gpwQ8r4ZpwzRbrO7l8kbqspvMaBVOwbxsOxNp7AvxmKtUD8rfhJsp3sXAMxn
3hT7umPek6C/4LOcMkSO4pnuinxDCAI3bmUOqczYT+CutRFoaL7xeETqQkzp6kUX
tjBzYikMPLQozp0eDaegcLhY+70IeCQEyqzhrscvJFIpMW1fy+UP7XLlWygSWDv6
4Am1AwcrPH7td6wipESuyjIR7w==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:12:19 2026 by rpki-client