
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
File: 5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft (raw, json)
Hash identifier: cKlaz/xBK+3efQUC5FE+9zMLVeSclWuMlVIEbTgpz14=
Subject key identifier: 01:61:F1:DB:10:DA:EC:2A:1B:F1:DA:8E:BD:9D:05:E0:EF:3B:19:52
Authority key identifier: E6:DF:97:60:BC:D1:A1:59:66:51:2C:D4:7B:72:94:C0:6C:02:EE:CF
Certificate issuer: /CN=A9173B07/serialNumber=E6DF9760BCD1A15966512CD47B7294C06C02EECF
Certificate serial: 088B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
Manifest number: 0873
Signing time: Fri 12 Jun 2026 20:46:51 +0000
Manifest this update: Fri 12 Jun 2026 20:46:51 +0000
Manifest next update: Fri 19 Jun 2026 20:46:51 +0000
Files and hashes: 1: 5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl (hash: J+I4E7bbLroh69iXZBXkVxnr1SIpRt84EWbvSoW9TOM=)
2: 493468827C1A11EBABA86F44C4F9AE02.roa (hash: gQGxx4gihy9zKWGv8z0Mu143u5DoEGyfqqJKAVo1rfc=)
3: CB3F39368F9711EE927E086FC4F9AE02.roa (hash: I3no8jZBWGF0B/3NwaIAfa0xz/HnjGJbm3/3i5Bkr8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl
rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:46:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2187 (0x88b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173B07, serialNumber=E6DF9760BCD1A15966512CD47B7294C06C02EECF
Validity
Not Before: Jun 12 20:46:51 2026 GMT
Not After : Jun 19 20:46:51 2026 GMT
Subject: CN=6a2c703b-47cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:81:f3:e3:34:24:c1:ce:ac:33:c6:45:78:f1:
a6:f3:6d:b1:e7:26:99:2e:04:9d:ec:9a:54:42:13:
05:c9:c3:ee:69:2f:5b:c5:e8:7c:46:b3:fb:31:01:
31:8d:ca:ea:ef:ea:10:80:b9:3b:8b:63:cb:29:e2:
08:4f:13:f4:7b:f3:a7:29:7c:c5:e6:8d:dc:3d:06:
4c:0b:e4:ed:4a:81:cb:ef:8c:cd:b6:c4:13:79:dd:
89:85:58:80:d1:9b:fe:ff:c9:b3:b4:24:e8:5e:d5:
94:44:73:c5:d2:56:7c:a2:8a:5b:44:d2:88:9a:cd:
d5:e6:5f:3b:55:6c:80:9d:7e:9b:47:6a:28:cc:3f:
bb:52:11:b8:74:6c:4f:0f:63:c8:f1:cd:df:35:b5:
f7:42:8b:92:df:af:9a:36:5d:d7:5c:27:d7:00:06:
dd:1a:d1:b0:bf:4e:ba:1b:5d:ab:9f:35:79:ef:e2:
30:12:6b:77:f0:2d:52:b5:c0:04:53:04:b5:a2:26:
12:a1:a1:2e:3f:2a:01:29:88:f1:92:00:f9:dd:8a:
0c:91:0d:99:ae:a6:cb:6a:5f:4d:b1:7b:d2:94:0b:
0e:79:53:45:d4:df:d7:d0:92:d8:7b:37:e7:41:0d:
de:21:82:2f:d1:61:63:1c:94:ce:10:a2:0d:99:ca:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:61:F1:DB:10:DA:EC:2A:1B:F1:DA:8E:BD:9D:05:E0:EF:3B:19:52
X509v3 Authority Key Identifier:
keyid:E6:DF:97:60:BC:D1:A1:59:66:51:2C:D4:7B:72:94:C0:6C:02:EE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:5a:60:f3:7a:96:92:78:e0:86:58:5b:24:eb:99:ec:24:d5:
11:a7:50:a1:4f:5f:10:51:10:83:b7:ba:0f:c4:30:a2:63:60:
72:cd:c7:c1:bb:92:00:7b:aa:38:81:52:ed:55:95:47:25:fb:
93:75:ac:e9:ec:4e:b1:7c:12:51:6e:bd:85:e4:fb:01:b0:84:
cb:3f:c2:2e:b6:d6:da:77:09:20:57:78:d9:3b:d8:ea:a5:c1:
64:a4:27:77:4f:76:ce:70:f6:d2:b9:c5:aa:69:a2:8c:e1:43:
f5:12:d0:e6:35:c3:3d:43:c5:ca:0e:29:57:13:70:6e:98:78:
c9:da:24:3a:85:a5:96:11:7e:d5:80:3f:b1:91:90:0f:cf:61:
3c:46:42:f1:2b:4e:0a:a5:78:f1:c3:2d:c8:6b:0b:57:e9:9e:
06:38:bb:1e:53:c5:8f:d9:ac:f5:1a:53:99:33:fd:7e:d2:5c:
e5:09:d7:a2:8b:fc:34:46:63:47:88:b3:af:d2:65:0f:5d:29:
5a:3a:33:c9:62:59:09:f9:48:55:29:82:e5:dc:72:50:7d:9d:
31:6d:23:d9:88:06:de:00:38:eb:95:88:d7:7c:6c:d5:2e:85:
39:9a:76:75:92:ae:0a:6f:73:2b:38:59:d7:45:d6:5b:0c:63:
b2:5b:38:cb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNCMDcxMTAvBgNVBAUTKEU2REY5NzYwQkNEMUExNTk2NjUxMkNENDdCNzI5NEMw
NkMwMkVFQ0YwHhcNMjYwNjEyMjA0NjUxWhcNMjYwNjE5MjA0NjUxWjAYMRYwFAYD
VQQDEw02YTJjNzAzYi00N2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnoHz4zQkwc6sM8ZFePGm822x5yaZLgSd7JpUQhMFycPuaS9bxeh8RrP7MQEx
jcrq7+oQgLk7i2PLKeIITxP0e/OnKXzF5o3cPQZMC+TtSoHL74zNtsQTed2JhViA
0Zv+/8mztCToXtWURHPF0lZ8oopbRNKIms3V5l87VWyAnX6bR2oozD+7UhG4dGxP
D2PI8c3fNbX3QouS36+aNl3XXCfXAAbdGtGwv066G12rnzV57+IwEmt38C1StcAE
UwS1oiYSoaEuPyoBKYjxkgD53YoMkQ2ZrqbLal9NsXvSlAsOeVNF1N/X0JLYezfn
QQ3eIYIv0WFjHJTOEKINmcqH0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAFh8dsQ
2uwqG/Hajr2dBeDvOxlSMB8GA1UdIwQYMBaAFObfl2C80aFZZlEs1HtylMBsAu7P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0IwNy9FRDlEM0RFODAy
RjUxMUVCQkNCOTEyMEJDNEY5QUUwMi81dC1YWUx6Um9WbG1VU3pVZTNLVXdHd0M3
czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzV0LVhZTHpSb1ZsbVVTelVlM0tVd0d3QzdzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
M0IwNy9FRDlEM0RFODAyRjUxMUVCQkNCOTEyMEJDNEY5QUUwMi81dC1YWUx6Um9W
bG1VU3pVZTNLVXdHd0M3czgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqFpg83qWknjghlhbJOuZ7CTVEadQoU9fEFEQg7e6D8QwomNgcs3HwbuSAHuq
OIFS7VWVRyX7k3Ws6exOsXwSUW69heT7AbCEyz/CLrbW2ncJIFd42TvY6qXBZKQn
d092znD20rnFqmmijOFD9RLQ5jXDPUPFyg4pVxNwbph4ydokOoWllhF+1YA/sZGQ
D89hPEZC8StOCqV48cMtyGsLV+meBji7HlPFj9ms9RpTmTP9ftJc5QnXoov8NEZj
R4izr9JlD10pWjozyWJZCflIVSmC5dxyUH2dMW0j2YgG3gA465WI13xs1S6FOZp2
dZKuCm9zKzhZ10XWWwxjsls4yw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:26:57 2026 by rpki-client