
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
File: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft (raw, json)
Hash identifier: j3YRwNlp4GK28NZ1oO8j1JXm3hcWKaauw4eHgS2gbEQ=
Subject key identifier: E5:86:4F:19:BA:2C:8C:CD:07:C9:B9:9E:BE:D8:DA:9F:DA:4A:F7:19
Authority key identifier: BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
Certificate issuer: /CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Certificate serial: 05B1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
Manifest number: 05A1
Signing time: Thu 16 Apr 2026 23:06:37 +0000
Manifest this update: Thu 16 Apr 2026 23:06:36 +0000
Manifest next update: Thu 23 Apr 2026 23:06:36 +0000
Files and hashes: 1: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl (hash: 1AE3pOCSUSyA1nSG0Wq2LPJ5zlaX4DtZslHOqJGuODw=)
2: 9B741CFE0C3411EDB8619843C4F9AE02.roa (hash: NVoTvNqptu8+2EEc4xwQ1XFeD946dIqVcf+QNOuWx54=)
3: 37FE553E5CAB11F08FCD0029C4F9AE02.roa (hash: 7vsEdUjO68wSnI82MSqqLNl6M5rdXWQoFEtu17LQhaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1457 (0x5b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186B80, serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Validity
Not Before: Apr 16 23:06:36 2026 GMT
Not After : Apr 23 23:06:36 2026 GMT
Subject: CN=69e16b7d-5910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:c1:43:ee:ad:6a:e9:60:55:41:51:66:41:
a5:54:3c:42:40:b1:04:24:65:f4:7a:c0:34:b6:9b:
7f:db:e7:d3:34:a5:b3:ef:93:7a:68:9b:d9:0c:29:
6f:4d:35:47:ff:dc:b9:80:d6:c6:0d:1f:ae:dc:49:
4d:40:46:7b:eb:60:e9:96:e4:d5:a8:7c:3e:7c:1c:
c1:c4:5d:7f:f0:2b:9f:f5:d6:57:e9:71:d3:97:e5:
d5:ee:df:e9:79:64:24:8c:bf:26:2a:06:fa:5c:37:
41:66:d7:4e:3d:d4:a7:ba:20:78:0e:bf:ab:75:21:
f0:af:1a:fe:03:8b:18:20:e2:ee:cf:87:75:48:5f:
29:cd:c1:11:97:69:64:2d:c1:fe:bf:c9:6f:78:89:
e3:7b:b2:20:e9:59:80:28:c6:9c:8e:66:64:05:d5:
a2:f0:c1:31:1d:2c:08:96:05:57:b5:9e:cc:f9:84:
23:02:76:3e:fd:c4:b5:a2:e6:ec:e1:81:b5:08:4c:
90:ff:9b:3a:67:94:e2:2a:de:6e:d4:84:ac:51:8b:
47:f5:07:2f:34:b5:44:84:fb:1e:39:f5:c2:d5:77:
bc:ca:f5:98:1e:14:5b:62:3d:44:fb:db:43:bf:f8:
95:92:7e:60:bb:3f:d6:03:a5:cb:3e:a7:d3:a3:e3:
53:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:86:4F:19:BA:2C:8C:CD:07:C9:B9:9E:BE:D8:DA:9F:DA:4A:F7:19
X509v3 Authority Key Identifier:
keyid:BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:ac:f6:54:d6:93:c5:80:c5:cf:b4:c2:3f:e1:e2:79:12:e3:
2e:79:ac:96:62:46:98:6a:b2:28:5e:8b:1d:c3:9d:8c:13:de:
05:65:94:64:34:42:f6:51:56:74:b7:5c:01:91:f5:c3:a9:aa:
69:5e:18:55:71:1c:20:57:95:80:b3:ec:39:05:22:1c:a3:6d:
eb:a8:6d:27:7a:d7:2d:0a:20:25:92:61:14:0a:50:dc:21:5d:
96:2b:5a:2e:f9:1b:2c:51:c3:cc:43:12:15:78:3d:c6:7b:f5:
6f:3a:3a:db:50:22:b4:17:25:99:5f:1b:55:c7:12:57:fe:e2:
b5:b1:b5:44:c6:3e:53:34:d0:ee:0f:76:32:2b:22:bb:37:e9:
9f:98:f9:67:50:8c:21:f7:fb:06:e2:5b:a4:e0:b4:73:b3:1b:
87:d1:e4:7f:6f:77:95:e5:53:1c:3f:8f:3f:37:7e:40:20:e3:
c9:c6:1a:24:ac:c7:c6:6c:25:6f:8f:41:48:36:40:7f:04:4c:
bc:f9:a1:b8:47:d0:6b:95:08:9a:a9:c0:5b:60:da:ce:ce:fe:
f1:ce:94:99:1f:84:dd:42:c4:a2:43:35:0a:92:5f:e6:9c:34:
3a:6d:59:0e:07:86:73:4b:cb:6f:d5:80:ec:14:b9:00:47:3d:
57:ba:7b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:16 2026 by rpki-client