
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
File: 5iFGnNWlePlHq0frDs6Ik5uH6_s.mft (raw, json)
Hash identifier: 38KNJ0h1Lbw7sjjTr5EP2/Z9unWFF1Q7ZSueWLPhF2c=
Subject key identifier: 2F:9D:FF:EF:AD:6A:AD:B7:15:00:6C:7E:66:6C:9D:30:D4:C6:CC:12
Authority key identifier: E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB
Certificate issuer: /CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB
Certificate serial: 0447
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
Manifest number: 041B
Signing time: Mon 02 Mar 2026 01:46:37 +0000
Manifest this update: Mon 02 Mar 2026 01:46:35 +0000
Manifest next update: Mon 09 Mar 2026 01:46:35 +0000
Files and hashes: 1: 5iFGnNWlePlHq0frDs6Ik5uH6_s.crl (hash: aX9B+RxQDzdVIH1/X+AWBjC+wy4rOb+99zgYcARiwr4=)
2: 2B2CF35A35A411ED89F95974C4F9AE02.roa (hash: 8jF/NpHwWErBgGhdC58vIaXRoe97OZ3zIJ5DPfjZVz4=)
3: C8165660822F11EEABA7D533C4F9AE02.roa (hash: h/A2ekMJ720Ho+otYfeYLNAk/zsB1s3sx7Qk4yapaYo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl
rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1095 (0x447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170982, serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB
Validity
Not Before: Mar 2 01:46:35 2026 GMT
Not After : Mar 9 01:46:35 2026 GMT
Subject: CN=69a4ebfd-206a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:96:c5:32:ce:37:fa:9c:30:4a:a4:16:63:c6:
0c:ef:87:1f:9e:ae:59:b1:6a:a7:06:e1:26:b1:01:
6e:59:2a:8b:16:13:92:2e:18:4e:91:d4:9c:f6:bc:
4b:ca:43:64:7e:1b:31:54:52:6e:fa:76:05:fd:ba:
7e:f5:63:4c:3c:01:4a:9c:24:02:3e:bf:41:ad:c2:
b0:b8:c7:a1:f7:fb:97:5b:9c:f1:a2:e0:7b:5e:a0:
64:a5:47:de:f3:6f:66:4b:fd:5d:76:98:8f:32:3b:
eb:f4:d7:96:13:02:07:b4:4b:f8:47:54:c9:4f:63:
37:88:5d:8c:64:0b:24:40:18:64:88:90:57:d9:73:
cd:11:d0:22:d9:8e:cf:1b:71:7d:51:1d:97:97:f9:
a6:db:1c:e0:dd:48:57:20:cb:3e:c9:19:6e:48:1b:
b2:e6:64:f8:72:48:62:cd:c6:fe:4d:2e:ab:88:14:
d6:f1:41:8d:14:2a:8e:30:00:83:6d:73:de:c9:3d:
1d:7b:0b:ab:2d:0d:bd:08:08:28:bf:72:3d:36:ae:
4b:0a:b9:8b:5c:bd:df:61:5c:cb:32:fb:99:d3:e1:
68:28:73:af:91:aa:d5:9a:97:02:e2:2f:d4:5f:fa:
ea:9a:94:20:cb:d7:f6:f5:fd:d2:65:0a:59:dd:90:
2e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9D:FF:EF:AD:6A:AD:B7:15:00:6C:7E:66:6C:9D:30:D4:C6:CC:12
X509v3 Authority Key Identifier:
keyid:E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3c:b5:af:af:73:cd:b6:77:2f:03:16:61:00:56:fe:1c:f0:
a5:5a:49:ec:b7:b0:f9:7a:73:ba:74:72:88:43:cc:79:8e:d2:
7f:a4:f4:70:76:dc:40:5e:61:f3:d7:fa:27:82:06:fb:60:2e:
9d:60:3b:a3:85:5d:5d:33:83:19:0a:3f:2a:96:af:9c:0f:01:
a0:7f:2b:0a:1a:b6:24:8c:5f:a6:f4:2f:0f:d3:e1:40:f3:d1:
06:b5:6a:cd:b6:88:31:46:c3:2f:9c:66:39:69:38:2d:fc:d1:
d5:86:d3:67:71:b8:36:e2:2b:e9:a1:1f:fb:06:b8:10:0c:a3:
25:61:f8:ac:ac:7f:e1:fb:b2:ed:40:7e:09:87:b9:3c:ba:38:
b5:dc:c1:40:fc:89:35:96:94:be:83:3a:c0:16:2e:ea:04:c7:
d1:ed:68:57:f4:63:26:50:30:36:50:55:8c:2c:ef:a3:59:52:
cd:37:e9:28:10:65:cf:93:f5:72:a9:2c:0d:11:6b:fc:7b:c2:
53:ef:98:41:16:e4:1b:c7:71:5a:e8:24:b1:7d:bb:46:cc:27:
c7:37:c3:ce:e7:69:c0:fc:67:89:3f:ae:56:7e:bd:85:a7:ae:
2a:87:c5:e6:60:9b:0f:b2:c0:17:30:9e:bc:5f:9b:00:ee:82:
d7:ab:e4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:33:19 2026 by rpki-client