
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
File: 5pLFtgs-8cIERDn8OQrVbcPLzWM.mft (raw, json)
Hash identifier: Amr7OQgQytGEWMVFawzqkufmgl0r5T/tFaDmvOM/WcM=
Subject key identifier: FC:8C:22:FD:B7:9A:B4:2F:9D:CD:DE:6D:69:B0:9D:A9:D4:1F:2D:4B
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 09C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
Manifest number: 0911
Signing time: Wed 22 Jul 2026 21:29:42 +0000
Manifest this update: Wed 22 Jul 2026 21:29:41 +0000
Manifest next update: Wed 29 Jul 2026 21:29:41 +0000
Files and hashes: 1: 5pLFtgs-8cIERDn8OQrVbcPLzWM.crl (hash: o/rG2fB3vVyRB7evlDiI0RHhfSqVPiDvXnUcW8VVEJ8=)
2: F3643AD6089C11F09BB44535C4F9AE02.roa (hash: h+M8yWQJoBkACzAfTIpQdErBAlAmwZgxPQ+K7UT/ZJ8=)
3: 3E7D7BA284C211F1A7B5D86994A30FBC.roa (hash: ZMQ0Cjle4HHKJJB701TyMjkGkmfwfkaUO+r50nwpOlU=)
4: 215A8FDE4B9E11EEBF766C7FC4F9AE02.roa (hash: n6tcvXpr4IAe1S5u61Xx4m/84oyxH16o7/TxMhPSnE4=)
5: 244B9D1874CB11EEB3C0267DC4F9AE02.roa (hash: NgHinJNOa5WD0lzlF+pCDsZCucZ3Hfmi2lX8TWyz05k=)
6: 8BD2406E632411F1916C95348547A888.roa (hash: o2XLZVnmlmr0E794XWdap0fS3wuVeBwaDRGcz48WvaE=)
7: 79986EE8FE3D11EFB763F62EC4F9AE02.roa (hash: b0d7KFkivg+pSQhSopB2OC7InpEaaI034fHeKJQ1XME=)
8: 9765FB988A5D11EE9E6AA223C4F9AE02.roa (hash: EEYzCbyeqxDaeKgknxCRHT1rePeuinavgu4aD0/oSEk=)
9: 5B50762A859011F1B948109291A30FBC.roa (hash: kS9+J9jgaoF3HUHshg0/kl0+wA6pl1E1YO2fwNGAbSg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2502 (0x9c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Validity
Not Before: Jul 22 21:29:41 2026 GMT
Not After : Jul 29 21:29:41 2026 GMT
Subject: CN=6a613646-96fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d8:a0:e6:45:c2:1a:91:c2:6e:00:0c:ba:d8:
7f:8a:a0:91:4f:38:6d:43:10:d3:98:d9:89:ae:7a:
4f:aa:2d:64:b2:71:0a:48:c5:a9:c4:ef:25:ad:c4:
f6:44:65:40:8e:ab:10:40:7d:96:bc:4c:20:05:eb:
95:96:e3:71:92:9c:52:d0:b9:1e:87:97:3e:56:12:
f2:fe:44:81:ca:c4:65:94:33:9c:fc:6e:e9:64:13:
6b:1e:11:f0:75:92:3d:df:cf:94:de:2e:f2:34:7b:
f3:bc:71:74:20:07:48:9a:74:8f:ff:82:46:97:d6:
08:d9:09:d3:59:71:ec:e3:d1:b9:30:ad:51:64:9d:
91:c5:88:27:64:9b:15:de:92:c3:ec:a1:ed:d8:12:
e1:0e:c2:a1:b3:44:49:f0:c3:aa:ec:2e:bc:2c:96:
02:21:7e:0a:d6:29:c4:7e:03:3e:11:98:f6:f0:3e:
c8:52:40:5e:19:5c:b6:ef:99:2e:72:68:d3:58:09:
82:85:17:9f:1c:f5:e0:50:5e:89:04:70:a5:72:80:
08:b4:cf:4e:a4:b1:11:81:6d:cc:ca:a4:73:88:28:
16:f3:9f:73:e2:e8:26:bb:c6:46:17:a6:91:66:ea:
8e:a4:6c:b0:e8:60:41:1a:47:2f:73:e4:f1:29:7d:
5c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8C:22:FD:B7:9A:B4:2F:9D:CD:DE:6D:69:B0:9D:A9:D4:1F:2D:4B
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e7:b2:45:22:85:26:e1:f8:9b:2e:d4:01:0d:d6:5d:20:d6:
bd:88:b7:4e:ed:70:5d:2a:34:5d:8d:13:b6:3f:c9:76:59:5c:
24:65:db:13:27:d5:8b:bd:69:07:fb:e2:22:37:ff:5d:70:a7:
49:7e:ff:18:81:e0:85:51:e0:5f:cb:75:8e:df:1d:1c:94:e0:
5e:78:70:36:44:1e:1e:da:f3:0c:6e:d1:77:77:b7:e2:47:e0:
56:b6:aa:45:96:54:59:69:44:a0:c0:31:40:2f:78:3e:d1:71:
1c:3e:25:96:de:d4:cd:05:57:4f:1a:87:74:78:ca:e9:0c:3d:
0e:26:bb:5c:c3:18:a2:8f:ef:16:95:4e:35:0f:26:ab:45:c6:
0b:74:15:3c:96:1e:3e:6f:3d:ac:ac:3d:d2:a5:06:a8:e2:20:
c1:ae:b6:d2:05:21:fd:40:03:3d:d9:f8:07:33:3b:7f:b5:75:
89:5a:c1:f7:f2:0e:d9:e7:e0:79:a6:30:78:3a:19:e5:3f:d6:
52:8c:94:5e:89:37:1a:4f:64:f2:cd:44:b9:64:18:77:ad:01:
04:2a:d2:0f:d4:c4:9c:07:85:56:1e:4c:cb:cf:1d:63:e2:c9:
d4:e1:7f:b1:c5:d5:cc:b0:f0:09:84:d6:37:c9:1b:28:e2:6e:
92:f1:7a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:33:29 2026 by rpki-client