
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
File: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft (raw, json)
Hash identifier: wXZOUQfZhFyBspa5lo+I5YdTN2Tvc1lDNbgmeGw8S3c=
Subject key identifier: 7E:65:94:CA:B9:80:D5:91:BB:B7:93:CB:8D:38:98:6A:FF:5D:D7:9D
Authority key identifier: BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
Certificate issuer: /CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Certificate serial: 05E4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
Manifest number: 05D4
Signing time: Sun 26 Jul 2026 23:56:11 +0000
Manifest this update: Sun 26 Jul 2026 23:56:11 +0000
Manifest next update: Sun 02 Aug 2026 23:56:11 +0000
Files and hashes: 1: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl (hash: /MQnAn4LA1VttwxeAWQ/IE9Easmwt7ZsgHsto23JF70=)
2: 37FE553E5CAB11F08FCD0029C4F9AE02.roa (hash: 7vsEdUjO68wSnI82MSqqLNl6M5rdXWQoFEtu17LQhaE=)
3: 9B741CFE0C3411EDB8619843C4F9AE02.roa (hash: NVoTvNqptu8+2EEc4xwQ1XFeD946dIqVcf+QNOuWx54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1508 (0x5e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186B80, serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Validity
Not Before: Jul 26 23:56:11 2026 GMT
Not After : Aug 2 23:56:11 2026 GMT
Subject: CN=6a669e9b-7234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:92:e7:04:ff:18:bb:59:11:9f:22:cd:b4:8a:
27:55:e0:5e:83:75:39:08:a0:81:8c:f1:1d:cf:7b:
7a:ca:7d:04:10:7a:f0:75:37:ec:95:ae:2a:30:19:
08:20:86:97:c6:24:82:3f:66:be:44:17:78:35:ad:
45:4d:77:df:64:0a:0a:e0:01:29:9e:c8:b4:fc:df:
2e:4e:fc:c8:27:3f:11:63:44:2c:bd:47:aa:8a:a1:
0d:80:4a:99:54:d4:c3:48:3a:09:ec:1b:c2:e6:2d:
0d:4f:fe:0b:99:8f:e7:f2:dd:ac:86:58:19:4c:fe:
b2:eb:6a:c1:c4:3b:5c:f4:fb:e0:3a:8f:d7:23:52:
ce:f0:c5:3d:be:12:d8:68:27:d8:b3:5a:a4:d6:7f:
c9:b3:23:99:2c:16:96:d8:ad:82:de:3e:ae:c0:5d:
43:4b:86:62:8f:0b:16:cf:e4:b0:d6:42:7d:54:d8:
da:59:69:c6:9e:98:19:10:d0:a5:89:9c:e2:6b:44:
31:d7:5d:ec:65:ab:a8:ac:12:55:58:46:8d:15:06:
60:ab:11:43:3f:40:81:a5:42:e3:4c:f9:ee:f8:d6:
a8:c6:4c:1e:5d:9f:b1:fa:87:e0:28:36:69:fe:f0:
33:db:f0:17:88:90:54:03:cd:ad:f3:a7:24:76:3d:
dc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:65:94:CA:B9:80:D5:91:BB:B7:93:CB:8D:38:98:6A:FF:5D:D7:9D
X509v3 Authority Key Identifier:
keyid:BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:21:13:b4:22:6b:5b:09:79:e7:1f:be:63:f1:d2:b5:04:7e:
21:dc:b8:da:4b:21:a0:bd:52:34:e0:90:8c:39:fb:90:26:d6:
7b:67:f9:c9:3d:50:61:e4:e3:33:6b:38:2a:cf:ba:bc:b0:fa:
ec:b9:25:48:c0:a9:e3:bd:46:a8:35:80:b2:51:a5:49:1e:f7:
c4:e4:16:7c:b2:31:2b:cc:7b:df:94:8a:03:bd:6b:29:61:ed:
0a:40:3b:85:d5:73:6f:bb:08:73:fd:9f:7d:81:6c:53:86:95:
25:00:d3:46:13:09:13:e6:42:51:e5:10:c3:08:53:08:e3:fd:
7a:94:a5:17:72:4b:0a:09:50:19:51:e5:a6:95:a3:29:ae:cc:
70:bf:21:3f:1a:11:32:f3:de:c4:bc:6e:e0:e4:40:88:d4:7d:
2f:ee:ce:19:cc:1e:4b:c3:9f:d0:12:5a:85:02:86:ef:d5:75:
f4:8a:49:3d:54:ce:b2:91:ce:82:9a:8c:be:93:48:89:b2:cd:
d6:89:29:0c:f1:af:5c:fe:44:dc:a5:9c:43:ff:2a:af:5a:42:
e2:1a:34:ee:ca:43:ba:10:5e:7c:8e:5d:af:a0:eb:7b:79:d5:
b1:40:cc:43:b1:27:4e:ea:c2:9e:f4:a2:f7:d8:0e:b2:7f:0d:
b0:12:6b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:31:53 2026 by rpki-client