
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
File: 5iFGnNWlePlHq0frDs6Ik5uH6_s.mft (raw, json)
Hash identifier: a3eAXbzKRgDYTbZBMywhXFL5SmxUt9NDuoyayNBerXc=
Subject key identifier: 3A:CF:1C:97:3D:B2:86:16:E6:E0:57:1F:16:7D:AB:70:58:6E:3B:13
Authority key identifier: E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB
Certificate issuer: /CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB
Certificate serial: 04B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
Manifest number: 0487
Signing time: Sun 20 Sep 2026 23:55:27 +0000
Manifest this update: Sun 20 Sep 2026 23:55:26 +0000
Manifest next update: Sun 27 Sep 2026 23:55:26 +0000
Files and hashes: 1: 5iFGnNWlePlHq0frDs6Ik5uH6_s.crl (hash: LjV7AnpjC5qko2q/tWMEJdinHai4uENxQLTO3lDcRiQ=)
2: C8165660822F11EEABA7D533C4F9AE02.roa (hash: TWI7/AHi80APjR4S5j80I9E6yRO+kebGNcad/BHi2Mc=)
3: 2B2CF35A35A411ED89F95974C4F9AE02.roa (hash: 8jF/NpHwWErBgGhdC58vIaXRoe97OZ3zIJ5DPfjZVz4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl
rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1204 (0x4b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170982, serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB
Validity
Not Before: Sep 20 23:55:26 2026 GMT
Not After : Sep 27 23:55:26 2026 GMT
Subject: CN=6ab0726f-384f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:91:f9:20:d9:b2:63:38:59:fe:9e:8b:f8:02:
23:dd:84:3c:e3:16:a8:10:16:73:6e:fa:d6:d3:d9:
4a:0f:d5:6a:73:1f:01:d4:36:f8:fc:bc:59:53:59:
08:93:ac:37:56:93:52:0a:00:9c:58:85:4a:4e:d5:
c1:41:7c:a4:6a:31:d6:ef:75:b3:8f:82:ff:52:9a:
b2:03:76:01:80:08:72:7d:06:ee:ec:38:43:e8:e2:
37:87:05:b7:d8:4e:21:bf:46:99:d8:22:aa:4f:0f:
43:0d:21:7b:8d:e0:e0:57:87:24:12:61:57:5d:7b:
e1:76:f9:00:79:95:0e:ee:44:30:b2:d5:f9:70:c2:
73:08:cd:8e:b0:1f:e6:3e:65:1a:44:29:13:0c:8e:
59:df:3b:91:4f:63:e7:c2:fd:36:97:55:4d:39:91:
5c:cb:1e:90:30:9f:cf:ba:f0:96:00:95:d5:cd:20:
ba:97:06:c1:b9:cb:84:93:95:bb:02:1d:53:d8:7f:
e8:3e:d5:ad:dd:5b:76:ee:50:81:ea:e2:4f:a0:24:
86:3e:b0:02:35:97:be:60:76:b8:19:16:48:aa:a6:
0f:7e:66:29:79:ae:38:6f:9b:46:d3:e5:12:d7:ef:
ce:e3:3f:11:b4:4d:12:e1:84:a4:52:7c:47:b4:66:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CF:1C:97:3D:B2:86:16:E6:E0:57:1F:16:7D:AB:70:58:6E:3B:13
X509v3 Authority Key Identifier:
keyid:E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:71:0f:1d:3b:c7:88:1b:3a:49:02:73:61:f9:6b:ee:3a:72:
da:4f:a8:06:28:66:83:27:c5:42:e1:43:7e:38:6c:c0:46:32:
d4:4d:35:e8:f8:70:b0:56:3d:fc:7e:97:39:2f:d8:3c:45:0f:
a4:62:7e:34:61:aa:6c:28:14:35:c1:44:02:22:c0:36:97:a5:
84:5f:cf:73:7b:cf:d4:9b:5f:be:e3:83:0b:5d:c7:b8:78:45:
37:30:b1:35:c5:1a:36:13:4f:92:7e:71:34:2b:06:d5:64:bb:
13:85:c2:9d:d1:b3:e2:1b:0f:37:ce:30:a6:57:59:bb:33:0d:
88:ac:82:c8:ee:63:4d:96:cb:33:36:96:ef:86:18:14:38:e4:
09:ed:5b:36:91:a5:e1:14:81:55:6a:33:a4:e8:e2:d5:13:bb:
c6:2f:c9:be:c9:91:97:ee:3c:ba:3a:a7:31:6a:13:c1:30:01:
e6:54:ea:f6:ae:9d:51:aa:58:b1:3b:b2:90:3e:3b:1c:21:54:
50:c0:7f:19:5a:05:8c:37:c3:a0:3f:62:b0:f5:07:91:6d:db:
c5:d1:4f:9f:c8:1d:6a:fe:56:f5:33:6b:10:d6:80:32:e2:a7:
02:75:ba:72:92:c0:90:23:4c:de:e3:95:05:9c:23:04:f7:39:
b3:8e:c1:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA5ODIxMTAvBgNVBAUTKEU2MjE0NjlDRDVBNTc4Rjk0N0FCNDdFQjBFQ0U4ODkz
OUI4N0VCRkIwHhcNMjYwOTIwMjM1NTI2WhcNMjYwOTI3MjM1NTI2WjAYMRYwFAYD
VQQDEw02YWIwNzI2Zi0zODRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5pH5INmyYzhZ/p6L+AIj3YQ84xaoEBZzbvrW09lKD9Vqcx8B1Db4/LxZU1kI
k6w3VpNSCgCcWIVKTtXBQXykajHW73Wzj4L/UpqyA3YBgAhyfQbu7DhD6OI3hwW3
2E4hv0aZ2CKqTw9DDSF7jeDgV4ckEmFXXXvhdvkAeZUO7kQwstX5cMJzCM2OsB/m
PmUaRCkTDI5Z3zuRT2Pnwv02l1VNOZFcyx6QMJ/PuvCWAJXVzSC6lwbBucuEk5W7
Ah1T2H/oPtWt3Vt27lCB6uJPoCSGPrACNZe+YHa4GRZIqqYPfmYpea44b5tG0+US
1+/O4z8RtE0S4YSkUnxHtGY7OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDrPHJc9
soYW5uBXHxZ9q3BYbjsTMB8GA1UdIwQYMBaAFOYhRpzVpXj5R6tH6w7OiJObh+v7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9EOEI2ODY5NkFD
MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi81aUZHbk5XbGVQbEhxMGZyRHM2SWs1dUg2
X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVpRkduTldsZVBsSHEwZnJEczZJazV1SDZfcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDk4Mi9EOEI2ODY5NkFDMTMxMUVDQjc3NkIyMDlDNEY5QUUwMi81aUZHbk5XbGVQ
bEhxMGZyRHM2SWs1dUg2X3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO3EPHTvHiBs6SQJzYflr7jpy2k+oBihmgyfFQuFDfjhswEYy1E016PhwsFY9
/H6XOS/YPEUPpGJ+NGGqbCgUNcFEAiLANpelhF/Pc3vP1JtfvuODC13HuHhFNzCx
NcUaNhNPkn5xNCsG1WS7E4XCndGz4hsPN84wpldZuzMNiKyCyO5jTZbLMzaW74YY
FDjkCe1bNpGl4RSBVWozpOji1RO7xi/JvsmRl+48ujqnMWoTwTAB5lTq9q6dUapY
sTuykD47HCFUUMB/GVoFjDfDoD9isPUHkW3bxdFPn8gdav5W9TNrENaAMuKnAnW6
cpLAkCNM3uOVBZwjBPc5s47BMw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:06:22 2026 by rpki-client