
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
File: C5sr_BxrLAlndq91fTrxRUfkPnI.mft (raw, json)
Hash identifier: 4Wl2g8CDvXXTPVu1pN9oeIxn5JTZ9kZqY6QU6qCgNzQ=
Subject key identifier: 7E:2C:15:27:78:55:96:8C:C0:85:68:F3:B1:2E:92:5B:85:D9:75:78
Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
Certificate issuer: /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Certificate serial: 12AD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
Manifest number: 1296
Signing time: Tue 28 Jul 2026 17:10:29 +0000
Manifest this update: Tue 28 Jul 2026 17:10:28 +0000
Manifest next update: Tue 04 Aug 2026 17:10:28 +0000
Files and hashes: 1: C5sr_BxrLAlndq91fTrxRUfkPnI.crl (hash: t89/7KXaKN2qWF77wJKR8dV8RdYDjAQmdpqXj91uV+A=)
2: 60FCDED2F48F11E89651151FC4F9AE02.roa (hash: oM2ZfoKfiRMESikDKbO4c1ZDLXIvdz0FiP6xcgKr7Rg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl
rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4781 (0x12ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F646, serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Validity
Not Before: Jul 28 17:10:28 2026 GMT
Not After : Aug 4 17:10:28 2026 GMT
Subject: CN=6a68e285-d4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:66:f8:76:b4:1b:56:87:1c:28:7d:64:e6:bc:
22:8b:8b:59:b2:07:b7:7c:e7:1b:3a:b1:52:51:2e:
3e:c0:a4:93:da:55:1f:2c:ae:72:97:d0:c2:4d:66:
47:91:cb:bf:2b:73:92:a1:ca:ea:be:be:43:47:43:
1f:a0:3b:d4:6f:ee:9b:2a:9e:a2:9c:4a:85:cd:4b:
4b:5a:84:88:9d:ba:4e:52:c7:dd:4b:3e:3c:c1:a1:
9d:d1:a9:03:6b:2b:75:ea:74:35:eb:e2:9e:be:4e:
ed:f0:40:eb:73:43:d4:bf:dc:d6:b7:e2:83:6a:1c:
ee:b0:82:fb:15:43:b7:fa:38:11:0f:83:0c:fa:50:
eb:b2:65:b4:44:4c:43:1c:7c:9c:2d:0d:35:af:b8:
53:3a:12:f6:e7:6b:d2:d3:87:5e:75:7d:22:0d:7f:
33:2f:b9:76:56:77:19:5c:8f:11:ae:d0:ac:99:6c:
44:f4:f5:a9:b3:51:f4:7a:30:95:c1:f1:b8:f5:4f:
71:72:d8:37:b9:01:9c:40:77:f5:06:ea:74:6c:4f:
81:01:8f:97:39:eb:c4:81:a8:8d:ae:83:d2:18:77:
cb:70:86:08:d5:87:25:3e:8e:09:0a:20:9d:58:e9:
fc:73:a8:b9:dd:89:ad:96:f9:91:bc:90:6d:d6:a6:
99:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2C:15:27:78:55:96:8C:C0:85:68:F3:B1:2E:92:5B:85:D9:75:78
X509v3 Authority Key Identifier:
keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:3a:82:73:5c:a5:7d:7c:be:3c:06:90:03:cf:02:74:ed:13:
23:5b:62:da:57:d3:67:13:cc:89:b9:5b:a2:b1:5d:a7:93:1c:
40:4e:05:ae:ff:bc:3f:8a:3f:78:b3:46:9d:65:5b:76:79:e4:
93:16:9c:20:da:eb:78:63:1d:fd:e3:83:71:03:10:97:14:37:
11:bd:4f:ec:43:7f:cf:7a:0f:75:a7:de:7c:c7:fa:f2:be:77:
b5:89:0d:33:ea:68:95:68:6a:ac:74:f0:18:13:39:10:50:47:
35:a9:19:cd:db:a4:99:32:f1:ed:6f:9c:1b:b3:75:bc:65:81:
cc:6b:bb:b3:6f:36:7b:06:d3:ac:71:52:f0:76:9d:bf:9e:bd:
7d:33:da:54:2a:62:b5:22:65:32:ff:d9:05:4b:9f:d6:7a:d4:
07:f3:b0:90:b1:96:38:dc:00:e8:8b:8c:bc:83:1e:e5:d4:9a:
28:0d:38:c3:82:37:14:e1:c4:70:1b:9c:34:e9:bc:83:62:c5:
c9:35:ec:55:eb:70:7d:29:4b:1c:c5:6c:07:d7:e0:93:8e:89:
d7:38:d1:65:25:4f:36:7e:78:fa:45:d0:20:24:ae:0a:76:97:
d9:0b:6e:8b:81:d8:93:69:da:cd:ab:ca:b3:18:7c:0e:a5:95:
5e:18:da:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEY2NDYxMTAvBgNVBAUTKDBCOUIyQkZDMUM2QjJDMDk2Nzc2QUY3NTdEM0FGMTQ1
NDdFNDNFNzIwHhcNMjYwNzI4MTcxMDI4WhcNMjYwODA0MTcxMDI4WjAYMRYwFAYD
VQQDEw02YTY4ZTI4NS1kNGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoGb4drQbVoccKH1k5rwii4tZsge3fOcbOrFSUS4+wKST2lUfLK5yl9DCTWZH
kcu/K3OSocrqvr5DR0MfoDvUb+6bKp6inEqFzUtLWoSInbpOUsfdSz48waGd0akD
ayt16nQ16+Kevk7t8EDrc0PUv9zWt+KDahzusIL7FUO3+jgRD4MM+lDrsmW0RExD
HHycLQ01r7hTOhL252vS04dedX0iDX8zL7l2VncZXI8RrtCsmWxE9PWps1H0ejCV
wfG49U9xctg3uQGcQHf1Bup0bE+BAY+XOevEgaiNroPSGHfLcIYI1YclPo4JCiCd
WOn8c6i53YmtlvmRvJBt1qaZ7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH4sFSd4
VZaMwIVo87EukluF2XV4MB8GA1UdIwQYMBaAFAubK/wcaywJZ3avdX068UVH5D5y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjY0Ni9DRUNFOEM5QUY0
OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxBbG5kcTkxZlRyeFJVZmtQ
bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0M1c3JfQnhyTEFsbmRxOTFmVHJ4UlVma1BuSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RjY0Ni9DRUNFOEM5QUY0OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxB
bG5kcTkxZlRyeFJVZmtQbkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmjqCc1ylfXy+PAaQA88CdO0TI1ti2lfTZxPMiblborFdp5McQE4Frv+8P4o/
eLNGnWVbdnnkkxacINrreGMd/eODcQMQlxQ3Eb1P7EN/z3oPdafefMf68r53tYkN
M+polWhqrHTwGBM5EFBHNakZzdukmTLx7W+cG7N1vGWBzGu7s282ewbTrHFS8Had
v569fTPaVCpitSJlMv/ZBUuf1nrUB/OwkLGWONwA6IuMvIMe5dSaKA04w4I3FOHE
cBucNOm8g2LFyTXsVetwfSlLHMVsB9fgk46J1zjRZSVPNn54+kXQICSuCnaX2Qtu
i4HYk2nazavKsxh8DqWVXhja6Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:08 2026 by rpki-client