
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft
File: 5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft (raw, json)
Hash identifier: WjkUEmhODkP2TmXzwa5U4qRcmr3g4/TAncSLo17sBNc=
Subject key identifier: 71:57:44:AB:84:AB:A6:7F:32:1E:D6:E8:70:7C:79:BE:25:84:FB:07
Authority key identifier: E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D
Certificate issuer: /CN=A9177C3F/serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D
Certificate serial: 8F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft
Manifest number: 7A
Signing time: Sun 01 Mar 2026 22:24:55 +0000
Manifest this update: Sun 01 Mar 2026 22:24:54 +0000
Manifest next update: Sun 08 Mar 2026 22:24:54 +0000
Files and hashes: 1: 5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl (hash: CPzyCl00mW0WAwNcJ1GmYCRFi1NCqbgc88HK0q9CMiM=)
2: 5D97D2A6F28911F0A11FA9356B6F56BC.roa (hash: Zd7RsweC0qVzF+/8ydaFcLdk8Dqs/VKEiURt/ukAMJs=)
3: 61491434F5DE11F0B5B96D914B6F56BC.roa (hash: 8flSx/g9lNDLX8TjdZj7tQjFP/bNnfjUVQ2LxOzjHoc=)
4: 5E7453DEF28911F0A11FA9356B6F56BC.roa (hash: 3Q1+1y0bE8iwqmKGWgjq53lK82/uh5kfqxOz/FZ82iI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl
rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:24:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177C3F, serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D
Validity
Not Before: Mar 1 22:24:54 2026 GMT
Not After : Mar 8 22:24:54 2026 GMT
Subject: CN=69a4bcb7-d516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:31:9a:0a:12:7d:13:19:56:d0:34:92:6e:51:
cf:ba:78:cd:4a:8d:8c:f9:70:48:99:3c:45:a5:ba:
5d:fe:5c:e9:7e:99:5a:f3:58:95:8e:7d:0b:d4:e7:
16:1d:cb:69:42:e5:1e:80:0d:8a:7c:c6:16:61:8c:
04:8f:01:4d:af:96:0b:33:d6:f2:15:ce:4f:61:a6:
2a:8d:e0:67:8a:d6:67:d3:e6:5a:1a:01:92:36:99:
50:b8:69:ac:b1:d2:1e:aa:7f:d9:d3:78:f8:db:f8:
90:28:cb:57:ec:57:d0:6f:c8:4c:36:f7:c6:a8:8f:
86:d7:80:e0:5b:7b:83:e0:3a:1c:6f:54:05:12:1b:
aa:9e:60:7c:0b:ee:34:47:48:39:4e:fd:d9:8b:51:
0e:5e:45:84:30:10:5b:3b:d6:31:4d:55:97:1e:33:
90:dd:13:87:0d:6a:ad:10:65:02:41:76:28:86:f3:
52:ff:a5:1e:1c:01:91:b7:08:c0:6d:2a:8f:ce:0b:
25:7c:1a:55:a1:18:4c:14:8c:7a:12:0a:bd:26:4a:
23:55:9b:f1:3a:27:75:1d:5d:df:c7:b5:bd:a9:5e:
dc:32:26:45:d2:e4:77:dc:1e:ac:bb:a9:6b:84:77:
c0:57:55:87:a0:27:bc:f2:e8:96:0d:6b:2c:f0:0e:
c0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:57:44:AB:84:AB:A6:7F:32:1E:D6:E8:70:7C:79:BE:25:84:FB:07
X509v3 Authority Key Identifier:
keyid:E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:e2:1d:9e:c7:05:70:46:06:b3:99:61:e2:b9:55:51:6a:00:
7a:d0:8e:b2:f2:a8:3e:23:61:84:53:f3:80:21:c5:4b:9b:0e:
f0:4c:56:0c:67:58:11:cc:6f:fc:af:6c:a1:90:2c:f5:64:a5:
05:d9:0f:f9:3e:18:15:1d:f8:42:7b:8f:ee:62:4d:3f:08:d7:
31:3e:c7:18:c6:41:72:0a:d0:f5:ea:2d:f4:5f:94:59:93:c3:
cf:e5:35:9c:10:2a:81:fa:03:e6:50:17:15:50:9a:13:04:50:
86:a9:b7:05:d9:5a:52:24:37:26:89:f6:d4:94:57:9a:b7:05:
3c:d8:7c:81:c8:a5:ff:65:c9:2b:73:32:74:61:9f:9c:1d:24:
68:73:fc:c3:58:b9:c4:1b:8a:5b:7f:15:0e:fd:a9:1c:6f:2f:
f2:1d:7c:6f:42:17:60:d0:9e:34:5e:c7:e5:11:98:e3:5a:fb:
7c:20:0d:0e:a5:53:1c:e8:0d:92:ef:a4:7d:a7:e8:ea:0b:e9:
59:11:c1:3b:67:03:31:a1:9a:36:bf:37:ba:56:42:5a:13:69:
8b:41:06:06:9f:c6:60:4f:10:26:54:30:28:1c:6f:96:cb:d4:
18:ad:f1:50:4d:69:6f:ae:93:ae:2e:57:e4:39:bf:22:08:32:
79:3b:29:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:03 2026 by rpki-client