
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft
File: P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft (raw, json)
Hash identifier: I7uYnTxjUDuGun8IMkdL0560E6aqcXUcoTZB7r0k08Q=
Subject key identifier: B4:FC:A5:EE:57:14:C3:28:A9:AC:FA:23:81:D8:81:75:B3:E0:CD:E6
Authority key identifier: 3F:9F:C9:D9:42:19:8C:47:23:34:A3:7E:AD:3D:EA:B5:03:92:E8:2F
Certificate issuer: /CN=A9186753/serialNumber=3F9FC9D942198C472334A37EAD3DEAB50392E82F
Certificate serial: BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft
Manifest number: B7
Signing time: Sun 01 Mar 2026 08:21:30 +0000
Manifest this update: Sun 01 Mar 2026 08:21:29 +0000
Manifest next update: Sun 08 Mar 2026 08:21:29 +0000
Files and hashes: 1: P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl (hash: SyAOCu49oMXsdpbgGtVms+s0CqZKzCvC6VJ3g//rXrs=)
2: 62BBFF4A046A11F081D54156C4F9AE02.roa (hash: xpX9G0NL7p/NNncCCqEZshUQkS4i537bPo5i8cYsZqk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl
rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:21:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186753, serialNumber=3F9FC9D942198C472334A37EAD3DEAB50392E82F
Validity
Not Before: Mar 1 08:21:29 2026 GMT
Not After : Mar 8 08:21:29 2026 GMT
Subject: CN=69a3f70a-69cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4e:01:d8:86:6c:ba:54:07:e7:5a:fa:4c:4f:
3e:cb:5d:aa:49:92:39:8e:35:6d:89:12:1f:66:b3:
db:9c:57:7b:0a:0e:c5:68:f6:5a:2f:30:06:63:09:
94:f8:78:45:94:5a:88:f1:b1:e3:f8:50:8d:03:eb:
3a:ef:9a:f0:a6:6e:25:8d:73:82:03:79:52:94:0e:
db:dc:2b:9e:3d:ac:47:13:6d:b9:f9:fd:0f:ab:50:
36:a4:6f:0e:e2:bf:7c:fa:56:bf:bc:49:59:ca:58:
92:e6:6b:57:af:db:53:2e:43:c4:76:73:cd:bb:f8:
e8:72:53:36:59:ba:d5:07:de:7c:d3:33:a1:8e:ef:
83:ab:11:82:01:0c:0a:01:0a:84:a6:5e:5c:2c:63:
8e:15:cf:1c:87:34:9c:58:f1:04:57:a6:5b:10:45:
b6:ed:a4:4a:9a:77:dd:e3:ae:52:fa:3a:d3:48:14:
73:f2:23:49:d8:8d:6f:d1:76:2d:04:a5:c7:47:65:
f9:cc:3d:a2:83:c1:43:a4:86:2c:a5:2b:09:1b:a9:
f0:f5:ce:c3:61:77:ec:3e:6b:b0:ab:7d:46:d4:d0:
88:09:5a:4e:26:42:7d:c5:dd:f8:c3:99:0f:34:f9:
b2:e8:90:21:46:af:99:51:5c:fe:f1:9e:62:96:13:
db:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FC:A5:EE:57:14:C3:28:A9:AC:FA:23:81:D8:81:75:B3:E0:CD:E6
X509v3 Authority Key Identifier:
keyid:3F:9F:C9:D9:42:19:8C:47:23:34:A3:7E:AD:3D:EA:B5:03:92:E8:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:26:28:4b:0d:15:8e:67:ab:2a:c3:2b:60:09:87:74:47:a2:
30:b8:16:b9:e7:f3:2a:32:cb:10:72:1f:2d:5b:0a:82:3e:6a:
72:75:bf:a6:d1:87:97:37:8f:e5:66:93:94:0b:e6:53:d0:4c:
b0:1c:22:cd:30:e4:bf:08:1b:f9:0e:1f:72:1b:b4:bf:72:cc:
4a:41:02:1a:10:56:45:ea:fe:de:8d:00:94:57:e0:31:b7:80:
35:8b:6f:7c:81:9a:b4:da:6f:29:f3:c1:e4:07:50:42:55:16:
80:1b:19:e3:25:4a:15:5e:c1:13:39:cf:18:05:b5:f9:43:53:
83:8e:a6:74:12:a3:20:4c:10:05:d0:d6:2b:9d:38:81:c7:be:
0b:67:0c:45:d9:fc:44:81:e6:25:bd:2e:1d:05:b3:0e:c3:e1:
51:d1:ac:cb:a5:ab:6d:8b:e2:3d:43:a1:27:24:68:93:f2:0d:
2a:f0:23:a7:0e:b0:e4:90:a3:52:c6:dc:f4:ab:a0:5c:33:c8:
29:24:b5:9e:af:84:fd:b1:51:c0:85:c3:b3:eb:85:4c:d7:61:
21:52:82:ef:d8:cb:ac:04:2a:91:85:0c:0d:47:98:7c:03:03:
6c:f4:12:91:ec:b5:34:b9:af:9d:7f:c1:88:c9:47:2f:b2:7b:
af:90:49:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:10:27 2026 by rpki-client