
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
File: M5P50HCy5wlJrKKqzI5l6JDnQJk.mft (raw, json)
Hash identifier: fBgC8k6Xq/Xe/1vgT8x8JIrbZf9y6lbgb7p2TX17Wm8=
Subject key identifier: FD:B6:F0:68:47:DC:15:54:9B:97:33:E9:B4:AB:97:C8:0F:72:F9:3C
Authority key identifier: 33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99
Certificate issuer: /CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
Certificate serial: 01B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
Manifest number: 01A7
Signing time: Mon 21 Sep 2026 04:07:23 +0000
Manifest this update: Mon 21 Sep 2026 04:07:23 +0000
Manifest next update: Mon 28 Sep 2026 04:07:23 +0000
Files and hashes: 1: M5P50HCy5wlJrKKqzI5l6JDnQJk.crl (hash: k+dXqQiFSsipHijdM3pqhv9CEkx1P/WgcAI61TU2HWY=)
2: 92F925C231F511EFA1744F0EC4F9AE02.roa (hash: DkaWQMkaE5vWQ9UkMjaqB0efcfb37G5TJ9A0Ez8ePPQ=)
3: 81C87DDE6C8311EFB20D5276C4F9AE02.roa (hash: 8IuopY47+jC5fpO4yB/mgjJBuoiM2BBuM5j++8YQWHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl
rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DB72, serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
Validity
Not Before: Sep 21 04:07:23 2026 GMT
Not After : Sep 28 04:07:23 2026 GMT
Subject: CN=6ab0ad7b-a01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cb:0a:79:4e:b3:80:b2:30:5a:5d:43:3b:45:
75:73:29:fa:fe:a8:62:9d:58:88:36:b8:7a:b3:b1:
a3:73:d7:98:c2:52:d6:8c:71:3d:e3:d3:51:7f:5c:
c3:33:04:a2:f5:fe:61:74:a0:53:8b:a8:f8:ca:ef:
05:41:c5:8a:4c:9a:78:af:54:cf:9d:52:9f:86:66:
26:65:fe:11:07:c3:e1:cb:fd:b5:5b:1a:f1:fb:4c:
05:e0:54:3d:ed:f3:86:8f:93:e1:5a:99:9e:3c:06:
23:de:45:b8:39:be:39:84:42:12:ad:31:36:b7:07:
a5:80:f0:6a:90:0c:98:b0:48:04:14:c3:c9:7b:6b:
b6:d3:39:02:8c:e8:8a:a6:ce:58:ed:cd:dc:2d:ef:
64:20:dd:d4:ce:35:df:05:63:8b:c5:29:7d:06:00:
a4:59:35:3e:13:3d:8a:d2:b3:52:12:2a:bb:9a:9a:
a6:d1:12:19:e7:89:d8:50:bf:55:95:a5:b9:23:92:
54:93:4e:87:8c:25:e8:25:67:7f:25:53:a1:40:a7:
0c:79:72:d7:53:24:c1:19:bb:9e:a5:29:c4:1a:62:
3f:52:53:54:bc:bb:4b:f6:a9:ef:cf:a2:8c:6f:4c:
65:74:0e:a6:d0:4f:80:22:3a:58:99:ca:a5:d4:72:
7e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B6:F0:68:47:DC:15:54:9B:97:33:E9:B4:AB:97:C8:0F:72:F9:3C
X509v3 Authority Key Identifier:
keyid:33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:6f:ed:36:7f:55:ef:c1:f5:a8:36:2e:47:4f:97:40:5c:89:
19:04:b3:d9:1e:57:8d:3b:45:8e:08:e3:69:50:7a:20:7f:22:
36:6a:1a:f8:a7:4b:ba:04:27:c7:7b:7d:66:50:96:42:88:cd:
3d:78:7e:dd:b6:d8:7c:2f:01:42:7f:ba:ac:5a:af:8b:79:64:
2e:8a:99:0f:cb:97:3c:79:d6:97:9f:00:f2:d1:47:88:b8:e9:
ff:47:b7:4f:38:5a:f1:80:13:f0:8e:29:3f:5d:f1:39:91:26:
07:0d:21:1b:f4:55:f1:5c:b0:20:38:04:29:55:34:3a:8e:fe:
4d:64:25:d7:c2:cc:6d:69:4b:2b:81:99:d8:65:71:57:50:a0:
c4:92:6f:6a:6a:fd:db:e0:55:c4:16:48:ff:27:04:76:6e:33:
bf:1f:72:07:c6:e4:6f:cc:d7:0a:03:06:03:5e:61:39:55:8e:
f5:e8:f7:a5:41:af:44:ab:87:31:a5:a5:c9:2a:da:67:28:26:
86:53:54:4d:87:44:69:0f:07:f1:d6:26:53:d4:d5:6b:62:8f:
1f:1a:4e:5e:67:7f:d7:7f:17:96:75:b8:4f:49:c4:4c:7d:c1:
44:20:ee:1b:8a:6f:a0:44:47:7c:8b:7f:6f:c2:46:7b:4d:11:
48:8f:a8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:26:37 2026 by rpki-client