
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
File: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft (raw, json)
Hash identifier: kuY0kdK+lQzqRYnEHvZ3fJ01oJVwv5pI36Y2VZrH4/0=
Subject key identifier: 04:59:81:D4:8A:7B:D7:65:27:76:4C:D9:FD:1F:F8:7E:25:1D:C1:CC
Authority key identifier: BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
Certificate issuer: /CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Certificate serial: 0593
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
Manifest number: 0587
Signing time: Sat 28 Feb 2026 23:50:45 +0000
Manifest this update: Sat 28 Feb 2026 23:50:45 +0000
Manifest next update: Sat 07 Mar 2026 23:50:45 +0000
Files and hashes: 1: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl (hash: 3EzC6eq3aJ5bK4Qko2+fglGRyKzPWq4gHV9VWYe+If8=)
2: 37FE553E5CAB11F08FCD0029C4F9AE02.roa (hash: GLm2AKslZ/503xaJdyFMTW6e2t7uEKz1XmKi3aW5E9E=)
3: 9B741CFE0C3411EDB8619843C4F9AE02.roa (hash: EaQ615UaoSlbYGe5kp9Ft1URPJxHKbUFtgfGcBgBPeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:50:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1427 (0x593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186B80, serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Validity
Not Before: Feb 28 23:50:45 2026 GMT
Not After : Mar 7 23:50:45 2026 GMT
Subject: CN=69a37f55-e771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:48:1f:1c:15:06:71:c4:4f:df:62:5d:b8:fd:
64:aa:93:20:20:cb:d6:b8:63:21:dd:d9:66:6d:70:
f3:22:39:73:34:54:3b:4c:9e:81:bf:3a:3e:a9:f4:
f0:50:d9:a9:fa:e1:7b:7f:a7:7e:e4:6d:bf:d6:a9:
1d:55:51:6e:f9:c1:df:71:ff:48:27:31:6b:ae:5c:
97:86:d3:66:ed:1c:0a:74:09:53:b2:d3:fb:fa:72:
f2:60:6b:b0:80:17:0a:61:74:d3:a5:40:65:1f:fb:
94:37:e3:2a:cf:4a:50:35:9d:81:78:60:58:54:53:
a9:04:a0:e7:01:2b:0f:0d:c0:8a:27:15:fa:9d:f2:
7f:19:44:96:85:5e:27:d2:7e:c1:19:34:99:ff:5d:
f6:69:7a:53:7d:ad:72:b5:8a:6e:cf:c3:db:62:2e:
24:b0:1b:11:6f:a3:1a:0b:09:dd:31:48:1f:33:7b:
9c:73:4e:69:ed:15:4e:6e:f3:84:d6:96:47:d3:04:
70:f4:2a:40:af:fd:2e:d5:5d:9e:d8:d2:32:a0:0c:
8d:62:83:61:26:c0:e5:ee:8e:03:8f:5e:b5:9e:86:
70:87:08:30:f3:9a:c9:2c:e9:b8:b9:6a:00:43:79:
93:66:48:92:7e:13:8c:2e:51:89:2e:f5:4f:99:1e:
5f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:59:81:D4:8A:7B:D7:65:27:76:4C:D9:FD:1F:F8:7E:25:1D:C1:CC
X509v3 Authority Key Identifier:
keyid:BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:7d:08:2e:a4:23:89:39:ff:19:78:fe:0a:63:b2:6b:20:05:
3c:48:b1:10:8e:c2:f3:8c:bb:d5:5a:5e:eb:66:bf:dd:8a:e5:
81:2e:8a:96:c0:04:e2:39:cd:1e:2f:87:3f:8d:b1:d9:f4:c8:
48:1a:ba:03:b8:01:17:11:fb:dd:02:1d:24:91:b9:3c:f5:6b:
8b:01:5d:7c:2a:e6:02:32:fc:57:11:24:26:ec:50:f8:3f:90:
66:e4:12:c5:40:13:36:b6:8d:72:97:da:56:56:b7:b2:78:fd:
fc:c8:f8:93:67:f5:3b:6a:25:36:90:f3:eb:d5:dd:fd:20:b0:
3c:7a:6b:ac:cd:3e:57:b9:d7:fc:ed:92:ba:56:59:13:8f:97:
dc:95:42:5a:ca:64:bb:fc:3c:71:5a:01:0f:b2:02:9c:2e:85:
98:d9:c3:d3:8b:4b:4a:c4:ef:79:69:63:3b:b9:15:d2:57:ef:
94:f2:83:01:ae:c3:00:ba:62:71:ae:17:b6:54:96:6c:c1:0b:
87:42:ed:1d:41:f3:cb:fc:cf:60:94:d9:6c:fd:ba:12:8e:c6:
2e:47:52:81:29:74:a6:0c:bd:5b:1f:18:8c:e6:cc:1c:c0:9c:
b9:13:cd:7e:92:36:e7:29:86:47:02:23:7c:91:2b:eb:8f:4a:
bd:6a:59:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZCODAxMTAvBgNVBAUTKEJEMUU3RTY0MUZGRDk2RDU3NDYxNTVGQzQyMUIxN0RE
QzFBQTc3NjIwHhcNMjYwMjI4MjM1MDQ1WhcNMjYwMzA3MjM1MDQ1WjAYMRYwFAYD
VQQDDA02OWEzN2Y1NS1lNzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjUgfHBUGccRP32JduP1kqpMgIMvWuGMh3dlmbXDzIjlzNFQ7TJ6Bvzo+qfTw
UNmp+uF7f6d+5G2/1qkdVVFu+cHfcf9IJzFrrlyXhtNm7RwKdAlTstP7+nLyYGuw
gBcKYXTTpUBlH/uUN+Mqz0pQNZ2BeGBYVFOpBKDnASsPDcCKJxX6nfJ/GUSWhV4n
0n7BGTSZ/132aXpTfa1ytYpuz8PbYi4ksBsRb6MaCwndMUgfM3ucc05p7RVObvOE
1pZH0wRw9CpAr/0u1V2e2NIyoAyNYoNhJsDl7o4Dj161noZwhwgw85rJLOm4uWoA
Q3mTZkiSfhOMLlGJLvVPmR5fywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFARZgdSK
e9dlJ3ZM2f0f+H4lHcHMMB8GA1UdIwQYMBaAFL0efmQf/ZbVdGFV/EIbF93Bqndi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkI4MC9BRTZBQTFCNDEy
M0IxMUVDOEExMzVGNDJDNEY5QUUwMi92UjUtWkJfOWx0VjBZVlg4UWhzWDNjR3Fk
MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZSNS1aQl85bHRWMFlWWDhRaHNYM2NHcWQySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NkI4MC9BRTZBQTFCNDEyM0IxMUVDOEExMzVGNDJDNEY5QUUwMi92UjUtWkJfOWx0
VjBZVlg4UWhzWDNjR3FkMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOX0ILqQjiTn/GXj+CmOyayAFPEixEI7C84y71Vpe62a/3YrlgS6KlsAE4jnN
Hi+HP42x2fTISBq6A7gBFxH73QIdJJG5PPVriwFdfCrmAjL8VxEkJuxQ+D+QZuQS
xUATNraNcpfaVla3snj9/Mj4k2f1O2olNpDz69Xd/SCwPHprrM0+V7nX/O2SulZZ
E4+X3JVCWspku/w8cVoBD7ICnC6FmNnD04tLSsTveWljO7kV0lfvlPKDAa7DALpi
ca4XtlSWbMELh0LtHUHzy/zPYJTZbP26Eo7GLkdSgSl0pgy9Wx8YjObMHMCcuRPN
fpI25ymGRwIjfJEr649KvWpZFQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:50:48 2026 by rpki-client