
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
File: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft (raw, json)
Hash identifier: cLuQND5wYlGD81cRpFhiCRSYU5ANcLCJ8dpmT/44QUc=
Subject key identifier: 3C:77:4E:18:31:07:9C:B2:30:3C:EB:92:07:C2:0E:58:16:6D:8F:6A
Authority key identifier: E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69
Certificate issuer: /CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169
Certificate serial: 0195
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
Manifest number: 018B
Signing time: Sun 27 Sep 2026 04:59:05 +0000
Manifest this update: Sun 27 Sep 2026 04:59:05 +0000
Manifest next update: Sun 04 Oct 2026 04:59:05 +0000
Files and hashes: 1: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl (hash: trt3WDaLfCkVd+xsmtzyIIW9iY57ErDzutxclGPsBMk=)
2: 4D06CD2C667411EF8E723587C4F9AE02.roa (hash: zXaiTn1OPuqTOi1DnfJ2nxhGdbrJsBTMVyTGh2dj7aY=)
3: 4CA4BE8E667411EF8E723587C4F9AE02.roa (hash: Je69DOenUud2l/CtIOyINuqm56Y7r+pSuPgQPd3u0+o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl
rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 04:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170DD8, serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169
Validity
Not Before: Sep 27 04:59:05 2026 GMT
Not After : Oct 4 04:59:05 2026 GMT
Subject: CN=6ab8a299-dc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6d:d3:51:96:6b:b2:f8:cc:eb:63:07:4d:e0:
fa:3b:8d:6a:e1:2f:5e:26:70:0e:22:08:60:f0:a8:
25:45:95:f3:d5:a1:07:38:38:ea:48:be:2e:0e:9b:
70:91:03:cd:e2:27:cf:69:3d:14:b4:3e:67:f0:66:
27:03:56:2f:14:af:73:19:45:e5:fc:a6:6d:10:50:
68:ad:7e:1e:77:26:cb:86:0c:24:a8:f4:dc:d5:ca:
54:80:68:00:c1:0c:e9:62:fa:63:fb:64:1e:90:05:
8a:ef:d9:7d:93:3e:9b:90:41:c4:55:27:b3:41:02:
46:70:67:0f:2c:f7:43:5e:1d:07:11:af:34:75:07:
0d:2e:b0:65:31:db:9b:9a:0e:15:96:9e:9b:7d:eb:
4f:6d:eb:3e:78:fa:5f:5b:6b:5b:3b:47:3b:da:9a:
24:d0:89:e1:b9:da:3f:27:dc:6c:86:3d:30:c4:a0:
e6:87:3e:fc:a3:41:5c:25:8a:24:e9:94:4c:45:24:
12:ca:7c:0e:10:a1:1b:a1:c8:7d:e9:01:48:fd:53:
f7:d9:66:9c:9b:f5:9c:68:5e:b0:60:19:8a:0b:d5:
ec:21:87:b5:ff:d0:45:f2:e8:a7:93:d3:ae:2c:b4:
20:1c:fa:81:6a:64:7d:cb:05:df:bd:4f:bb:2c:60:
dd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:77:4E:18:31:07:9C:B2:30:3C:EB:92:07:C2:0E:58:16:6D:8F:6A
X509v3 Authority Key Identifier:
keyid:E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:6a:bd:3b:95:8d:55:53:1f:93:16:8e:63:bd:2a:1d:8e:fc:
9a:7c:b5:f7:04:b4:52:4c:f9:1e:dc:4a:4e:e8:6a:3b:f0:55:
ed:ba:a6:f0:de:30:6c:8a:2e:c5:83:2f:56:5d:6c:1a:ac:37:
7c:42:6a:d8:14:af:0d:7b:72:63:f5:81:70:ed:a1:50:f8:55:
1c:08:7a:b6:3d:2c:38:c9:5a:9f:a9:80:90:d1:7a:4f:57:1b:
05:8a:25:2b:3e:d7:af:cc:1a:e3:d1:d1:c3:21:8b:bf:47:5c:
50:d2:4d:3a:28:0f:d1:ce:7f:4b:fc:a1:ee:8a:49:83:bb:d2:
18:b3:10:98:75:db:22:e2:f7:e8:57:61:d3:ab:7a:64:73:af:
c8:e0:8b:9f:45:3a:f8:32:08:91:3c:3f:16:bb:82:f9:62:39:
2f:14:35:5b:a0:13:f3:8d:9f:a4:70:37:0e:c9:a2:7d:27:2a:
70:9e:52:0e:80:ad:f5:c1:af:2f:52:d8:d5:92:30:07:40:ed:
b2:44:21:18:2f:96:66:9d:bc:cb:a3:a9:e2:26:92:e1:d4:96:
4b:9c:ca:ce:f5:ad:e6:6f:79:9a:26:0d:4e:4b:cd:b4:af:41:
36:5d:37:47:26:68:1e:a2:78:d4:4f:79:c9:50:d7:9d:5d:2c:
18:a0:f1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:02:10 2026 by rpki-client