
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
File: C5sr_BxrLAlndq91fTrxRUfkPnI.mft (raw, json)
Hash identifier: AYGsPyhQZ+NDltwVi//g+W8ve4in3LcwMyVRPhW0FAk=
Subject key identifier: 68:DC:6F:8E:EA:DB:C2:CF:3A:87:BA:9B:4C:AF:05:D9:07:23:D3:AE
Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
Certificate issuer: /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Certificate serial: 12C9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
Manifest number: 12B2
Signing time: Sun 20 Sep 2026 17:01:30 +0000
Manifest this update: Sun 20 Sep 2026 17:01:29 +0000
Manifest next update: Sun 27 Sep 2026 17:01:29 +0000
Files and hashes: 1: C5sr_BxrLAlndq91fTrxRUfkPnI.crl (hash: Oe81x0w9YDeV3dqeol5kRZiGH8yuLg64FzJ0GeS21uI=)
2: 60FCDED2F48F11E89651151FC4F9AE02.roa (hash: oM2ZfoKfiRMESikDKbO4c1ZDLXIvdz0FiP6xcgKr7Rg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl
rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4809 (0x12c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F646, serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Validity
Not Before: Sep 20 17:01:29 2026 GMT
Not After : Sep 27 17:01:29 2026 GMT
Subject: CN=6ab0116a-3ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4e:9e:ce:dd:fc:e7:36:c0:11:07:be:8a:fd:
1c:9c:27:c7:ee:56:25:b4:12:84:e5:69:7b:81:bd:
68:79:54:0d:c7:47:e7:19:13:71:12:ff:93:97:26:
02:0b:19:42:59:70:76:b2:19:f8:87:df:d4:c4:5e:
fd:ab:e3:56:39:4b:f8:b4:e3:a2:d4:85:37:df:43:
ed:04:f9:60:eb:2a:7e:48:ca:3b:3a:63:b2:28:20:
28:dd:39:74:18:cd:ef:ef:d4:07:4d:54:2d:be:ec:
c3:cb:91:b1:cb:5d:82:92:b6:7e:5c:47:dc:ac:1e:
ae:49:c2:4e:d3:ae:a7:f5:ea:be:15:03:c2:74:b4:
75:0b:86:f1:48:23:c9:20:35:f4:43:f7:ed:38:4e:
35:d0:7e:e2:2f:14:b8:23:73:9d:2c:0a:0c:93:be:
37:01:b0:ad:d7:41:c0:b9:22:ff:11:cb:b8:d5:f9:
3c:b4:d6:63:3a:ae:c8:34:b2:e5:61:0e:89:60:fe:
dd:55:ed:f9:97:a3:50:6d:18:fa:0c:03:77:85:60:
05:7b:cd:26:51:52:f4:0b:bb:9f:ef:15:92:0a:0d:
d8:5d:a5:a9:1c:a0:5e:61:48:df:55:53:3f:99:df:
64:e3:7d:59:28:87:98:3c:b6:bc:37:ea:c0:51:bc:
94:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DC:6F:8E:EA:DB:C2:CF:3A:87:BA:9B:4C:AF:05:D9:07:23:D3:AE
X509v3 Authority Key Identifier:
keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:bc:1b:01:35:6a:5c:81:1d:d0:42:3e:55:52:2a:b1:27:35:
e6:14:66:ed:65:b9:84:0c:76:3f:9d:b9:bc:4f:99:95:51:1d:
72:ff:50:16:69:40:f2:7f:0e:b0:ba:ba:b1:16:bb:7b:11:9e:
84:00:91:c6:c5:6d:db:90:35:48:6b:bd:d3:53:39:d6:ad:cd:
87:cd:93:ef:38:6c:94:99:a8:8c:3c:a5:e0:fb:af:5f:fd:68:
7e:4c:e4:7a:18:70:cd:a6:db:07:c4:57:79:3b:32:0e:40:2a:
ad:f8:c1:6b:7d:59:04:2b:a2:54:db:42:87:7a:d8:52:f0:94:
70:56:6a:17:43:6e:66:99:db:41:5d:f7:cc:5a:d7:76:2c:c3:
7b:3a:7c:35:0a:f5:95:d8:2d:f9:17:c5:43:b6:a7:42:4a:53:
e9:71:e7:6a:e2:87:ab:7f:4b:b8:aa:f8:bc:6f:f0:29:5a:dc:
3e:8c:7d:48:8f:c8:de:2b:31:b8:65:aa:80:15:30:9e:21:ae:
16:99:96:c4:dc:03:8f:0c:50:21:46:5f:a8:a6:0b:b7:aa:da:
af:c5:97:7e:66:6d:05:b5:15:34:52:bb:3c:74:22:32:8c:2d:
cb:c7:65:95:33:46:17:67:82:7f:38:ad:d9:3b:00:af:d3:19:
13:26:c8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:46:16 2026 by rpki-client