
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
File: 5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft (raw, json)
Hash identifier: wr48GplMD9wCiQnCI6njl8LvXlg5qU7ZGhjg99/9+Ws=
Subject key identifier: 74:C8:73:C4:86:B2:F7:58:B4:BD:B4:92:22:8A:78:64:EB:C6:EA:00
Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36
Certificate issuer: /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
Certificate serial: 0EBC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
Manifest number: 0EA2
Signing time: Fri 12 Jun 2026 17:42:05 +0000
Manifest this update: Fri 12 Jun 2026 17:42:05 +0000
Manifest next update: Fri 19 Jun 2026 17:42:05 +0000
Files and hashes: 1: 5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl (hash: eP3TNMv1EiZtbMu/BApwyTT6V55dMqHuj/Hw7H8MCj0=)
2: 9F14D15E70DB11ECACCABD21C4F9AE02.roa (hash: xvrivgHeCdDydOD/ZktKC2lGC9vuqeY8ZsH11+NgJlU=)
3: 6A5EC93A70DE11EC8B944928C4F9AE02.roa (hash: 2vmyMW6TtcbaqXFP7Qp6BP+UrMdH5alLGCt5uNXx+l8=)
4: 6B7E8FC670DE11EC8B944928C4F9AE02.roa (hash: DEYl4xuRBtxqmhzfpUHokIt3OryoQ/FdXNVfb0S7BgA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl
rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3772 (0xebc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183DB7, serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
Validity
Not Before: Jun 12 17:42:05 2026 GMT
Not After : Jun 19 17:42:05 2026 GMT
Subject: CN=6a2c44ed-9c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f2:0c:46:6f:2e:bf:9a:c6:6d:7c:72:f6:db:
31:a9:b2:08:5a:7b:09:80:e6:7b:97:c5:fe:a3:81:
74:54:04:c2:00:2e:bb:c2:93:9d:63:25:a7:19:b3:
00:47:e5:09:e2:44:7c:e4:68:60:13:c4:8b:f8:a7:
12:f2:36:42:d6:77:e8:1a:ea:e8:d3:f5:ca:33:2f:
9b:56:da:e8:3d:53:94:fb:0f:26:91:b4:b2:60:e0:
bd:50:46:ae:6f:52:54:76:e7:80:5c:7e:18:70:16:
74:05:f5:f9:60:e9:99:03:8a:f1:72:68:72:98:35:
7d:90:59:09:64:14:f8:65:95:e1:4d:5d:3b:f5:b3:
46:72:cc:80:cd:f5:88:b3:19:5c:41:fc:9d:0b:ef:
23:f1:40:7c:da:b4:d4:92:7d:d2:fe:be:03:c9:09:
50:a6:ed:b2:6c:de:e0:db:7c:a9:b5:33:00:8c:8d:
43:01:3d:c9:de:84:23:da:25:79:8c:1d:06:22:4b:
ba:e7:64:43:95:c3:cf:08:03:6d:2e:af:b8:07:c1:
ff:0b:e3:08:80:f4:59:91:c9:3b:3f:89:f1:fb:2e:
dd:4d:9d:10:a6:5a:75:77:52:17:fb:ba:09:1f:04:
37:83:44:e6:10:53:c3:01:0e:a9:6e:ef:e8:8d:fe:
81:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C8:73:C4:86:B2:F7:58:B4:BD:B4:92:22:8A:78:64:EB:C6:EA:00
X509v3 Authority Key Identifier:
keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:81:f1:00:91:fc:73:94:48:eb:9e:57:8f:a2:a3:b2:29:3b:
48:eb:ef:60:c1:26:98:73:44:0a:2e:ea:d1:83:c4:b8:06:86:
e2:62:d4:b0:ca:97:84:c5:35:71:52:e2:0d:67:ad:2d:e4:a9:
6d:aa:3d:4c:a8:24:e9:3e:c5:a7:3f:44:6c:cc:81:79:8b:00:
3e:9b:5d:d3:99:7c:85:8a:3b:71:b6:56:c3:2e:fa:04:f6:9c:
6a:91:07:f8:74:74:ff:7e:87:a6:d0:11:02:d8:98:3f:ca:4f:
c8:a7:38:ec:f6:85:c8:76:6a:33:e1:08:f6:8d:71:cd:f3:80:
3b:40:ea:16:a6:be:b6:2e:08:76:df:49:e4:6c:8e:3d:0c:1e:
b1:b9:1f:25:bb:d9:00:22:e8:34:e1:82:9f:71:af:85:a5:a4:
c8:30:6d:4a:b6:2d:d7:00:83:5a:d1:fe:4c:28:9e:ee:5f:23:
8b:dd:48:65:cc:94:0b:ab:f3:f8:fc:5c:19:c3:ff:ab:fc:07:
e7:88:58:d0:bf:09:19:c3:b8:78:a1:63:1a:ad:71:2c:60:00:
14:54:b5:86:40:89:23:0a:c1:5c:ac:19:88:5b:c8:d5:cc:81:
14:9e:e2:71:ea:af:fd:59:b3:a4:ef:0a:66:90:9b:4b:74:68:
3c:cd:82:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:08:06 2026 by rpki-client