
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
File: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft (raw, json)
Hash identifier: TvT5EsUUrr12vWf96lzsTwMG4Yr5zG6hbRKX9j9DGRY=
Subject key identifier: 52:BF:C8:58:EB:5D:D9:84:D3:2F:72:D0:26:AB:1D:30:0C:40:92:AB
Authority key identifier: E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69
Certificate issuer: /CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169
Certificate serial: 015F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
Manifest number: 0155
Signing time: Sat 13 Jun 2026 05:08:28 +0000
Manifest this update: Sat 13 Jun 2026 05:08:28 +0000
Manifest next update: Sat 20 Jun 2026 05:08:28 +0000
Files and hashes: 1: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl (hash: dBCfrIZKW4J14Zi+bjeW9pZH3UemsYwMOXLzJAzt5SY=)
2: 4CA4BE8E667411EF8E723587C4F9AE02.roa (hash: Je69DOenUud2l/CtIOyINuqm56Y7r+pSuPgQPd3u0+o=)
3: 4D06CD2C667411EF8E723587C4F9AE02.roa (hash: zXaiTn1OPuqTOi1DnfJ2nxhGdbrJsBTMVyTGh2dj7aY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl
rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 351 (0x15f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170DD8, serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169
Validity
Not Before: Jun 13 05:08:28 2026 GMT
Not After : Jun 20 05:08:28 2026 GMT
Subject: CN=6a2ce5cc-ba0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e9:64:70:cb:12:c6:17:81:74:83:cb:67:7c:
59:65:5c:ef:13:3d:36:22:d8:e7:2c:51:b0:8f:01:
a7:1b:f7:00:f4:e3:7e:fd:0b:0d:bb:19:91:0a:0e:
b4:f7:c5:50:42:1b:6b:33:6d:28:9b:d4:07:b7:57:
eb:b2:e4:bb:06:b5:ae:98:64:8d:ae:37:e9:47:b8:
84:10:59:4f:c3:72:42:33:e8:d2:93:9e:a5:01:0f:
36:42:80:ff:50:df:da:01:cc:24:3f:10:5a:9a:f9:
df:7f:cd:a8:ca:9f:3e:19:72:b1:09:b8:e9:15:b7:
a7:72:3f:32:1b:26:1b:a6:35:dc:38:e1:65:cd:31:
de:95:d6:f1:05:7f:c8:ca:d2:0d:a2:9c:8d:39:75:
d6:e4:be:2b:97:d4:c9:d5:39:f7:6b:99:ac:5c:78:
e1:15:bc:e8:08:43:14:a0:ce:20:5d:b1:12:66:50:
93:8d:e5:f5:a6:f6:b0:4b:8c:b3:a9:9f:57:b1:82:
9f:a0:e5:2c:44:c3:04:af:99:d8:b3:4f:26:3f:a4:
f8:01:56:9e:59:50:8c:9b:67:5d:4c:58:7d:c1:df:
59:df:f8:9a:bb:0e:61:43:92:eb:ac:96:5e:ac:04:
a7:32:45:c9:2e:34:cd:ac:b7:11:8c:11:41:70:71:
30:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BF:C8:58:EB:5D:D9:84:D3:2F:72:D0:26:AB:1D:30:0C:40:92:AB
X509v3 Authority Key Identifier:
keyid:E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:12:48:37:86:c9:bd:b4:2c:3a:3b:df:38:c4:97:3b:17:f4:
37:7f:e2:ac:d9:42:d5:29:30:9e:8c:98:e8:2f:c6:1c:51:9e:
0e:f9:6a:b9:8d:1f:40:9b:36:e9:45:9a:0b:2c:9d:87:6b:90:
34:a0:72:14:b5:3c:2c:d2:e4:e9:b6:54:31:d1:b9:83:f1:7a:
e3:fd:a6:a9:ba:c6:56:41:86:69:95:29:a0:3d:c0:46:a3:99:
22:d6:94:53:83:07:85:aa:e6:a4:a8:6b:f3:48:5c:c0:4d:75:
9c:47:fc:fd:c4:2d:4c:76:18:fe:79:3d:32:22:be:cf:4f:1d:
cd:da:8d:a0:63:4b:dd:31:87:c1:bd:f9:63:9d:f9:84:ef:5a:
fb:41:d4:70:1b:9d:69:79:29:20:42:0f:b1:ad:e9:a3:00:1d:
57:b4:3e:3a:09:b6:b2:7f:84:d9:3b:ae:56:63:9e:d5:d8:49:
ce:c3:94:ad:c7:30:4b:a3:ff:d6:ba:f6:85:43:a2:7a:32:62:
5c:89:3c:23:62:c5:33:3b:f6:f4:9f:6e:a9:04:50:20:eb:ee:
d2:91:c6:22:fc:d4:1d:6a:c1:43:fc:82:4b:41:a3:24:76:07:
55:ba:fb:bc:7a:92:d6:f3:8d:c5:6a:7d:3f:9c:fd:20:53:d4:
cc:21:95:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzBERDgxMTAvBgNVBAUTKEU2QjU0RDAyN0NFMzQ5OEJGMzVFNEQwNjVCQzQ3OEE5
MzZDMTYxNjkwHhcNMjYwNjEzMDUwODI4WhcNMjYwNjIwMDUwODI4WjAYMRYwFAYD
VQQDEw02YTJjZTVjYy1iYTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8OlkcMsSxheBdIPLZ3xZZVzvEz02ItjnLFGwjwGnG/cA9ON+/QsNuxmRCg60
98VQQhtrM20om9QHt1frsuS7BrWumGSNrjfpR7iEEFlPw3JCM+jSk56lAQ82QoD/
UN/aAcwkPxBamvnff82oyp8+GXKxCbjpFbencj8yGyYbpjXcOOFlzTHeldbxBX/I
ytINopyNOXXW5L4rl9TJ1Tn3a5msXHjhFbzoCEMUoM4gXbESZlCTjeX1pvawS4yz
qZ9XsYKfoOUsRMMEr5nYs08mP6T4AVaeWVCMm2ddTFh9wd9Z3/iauw5hQ5LrrJZe
rASnMkXJLjTNrLcRjBFBcHEwTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFK/yFjr
XdmE0y9y0CarHTAMQJKrMB8GA1UdIwQYMBaAFOa1TQJ840mL815NBlvEeKk2wWFp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEREOC9BNjZBNzVFRTY1
QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZdnpYazBHVzhSNHFUYkJZ
V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVyVk5BbnpqU1l2elhrMEdXOFI0cVRiQllXay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MEREOC9BNjZBNzVFRTY1QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZ
dnpYazBHVzhSNHFUYkJZV2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1xJIN4bJvbQsOjvfOMSXOxf0N3/irNlC1SkwnoyY6C/GHFGeDvlquY0fQJs2
6UWaCyydh2uQNKByFLU8LNLk6bZUMdG5g/F64/2mqbrGVkGGaZUpoD3ARqOZItaU
U4MHharmpKhr80hcwE11nEf8/cQtTHYY/nk9MiK+z08dzdqNoGNL3TGHwb35Y535
hO9a+0HUcBudaXkpIEIPsa3powAdV7Q+Ogm2sn+E2TuuVmOe1dhJzsOUrccwS6P/
1rr2hUOiejJiXIk8I2LFMzv29J9uqQRQIOvu0pHGIvzUHWrBQ/yCS0GjJHYHVbr7
vHqS1vONxWp9P5z9IFPUzCGVvg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:50:42 2026 by rpki-client