
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
File: 5muokllQFHlLtkUdFCgchAAgYgM.mft (raw, json)
Hash identifier: UWAXGffeCSJB9ypvrn5t0zwOlSgOSTwR4lxbpmwEA5k=
Subject key identifier: 76:31:EB:D3:57:64:A5:B5:63:B9:B8:65:59:02:6E:7D:46:36:A6:11
Authority key identifier: E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03
Certificate issuer: /CN=A9140BA4/serialNumber=E66BA892595014794BB6451D14281C8400206203
Certificate serial: 156E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
Manifest number: 1568
Signing time: Thu 24 Sep 2026 16:45:35 +0000
Manifest this update: Thu 24 Sep 2026 16:45:35 +0000
Manifest next update: Thu 01 Oct 2026 16:45:35 +0000
Files and hashes: 1: 5muokllQFHlLtkUdFCgchAAgYgM.crl (hash: CS60erHmmiYjjngbKO1Fm2axI2HWm2FNYXqk9VvLH/Y=)
2: 3FF298D41AFF11EFB20C2648C4F9AE02.roa (hash: F+xAnb9Dp/1DmyNH/5geMeagilcYVoZK5t/d04k7W6Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl
rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5486 (0x156e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140BA4, serialNumber=E66BA892595014794BB6451D14281C8400206203
Validity
Not Before: Sep 24 16:45:35 2026 GMT
Not After : Oct 1 16:45:35 2026 GMT
Subject: CN=6ab553af-38f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fc:b5:5c:a7:06:d0:a0:d8:ac:1b:60:a8:86:
c3:66:4e:35:80:66:21:6c:5e:ba:78:17:4f:8a:29:
4e:05:9a:d2:ff:05:c9:cc:bb:98:83:e8:0f:9c:a8:
83:6b:94:84:2a:a6:4f:9a:0e:b0:d0:cf:f4:6a:49:
cb:4f:b3:2d:38:bd:d8:82:72:27:c5:17:11:68:97:
3c:8a:1c:a9:f4:78:5c:1f:44:dc:c5:07:07:16:da:
40:c0:de:42:d4:e0:a3:82:ad:41:03:a4:a5:55:07:
2b:21:04:0c:a0:bf:c8:6b:c2:68:a7:61:b1:39:3c:
bd:00:3f:43:57:af:2a:e1:31:de:ed:a5:22:42:1b:
d7:61:37:f3:05:30:af:6c:a7:43:d5:c1:f2:e7:0e:
67:69:51:a1:76:d0:c8:9d:19:0e:c3:5a:39:e0:9d:
76:e9:4e:fa:2f:d7:83:63:4a:0d:af:5d:5f:10:06:
6c:6c:6d:be:00:24:5a:1b:a6:bb:62:11:ec:0d:71:
3d:4d:94:a0:6a:c8:25:51:d1:5a:aa:21:56:a5:80:
1a:b4:b9:66:b5:95:4d:ea:5c:16:be:bb:d8:30:b2:
07:25:6f:f0:d5:5e:b2:db:41:f9:88:97:ee:80:95:
0f:3d:f6:64:38:9d:83:d7:ae:ff:48:f9:4a:48:ef:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:31:EB:D3:57:64:A5:B5:63:B9:B8:65:59:02:6E:7D:46:36:A6:11
X509v3 Authority Key Identifier:
keyid:E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5a:88:8f:50:09:2a:eb:d5:fe:f6:c4:57:64:82:30:0d:fe:
9a:e3:1c:09:f8:41:7c:4e:38:b0:eb:ca:c2:16:01:e6:e7:5a:
ce:c6:f3:40:32:f8:ff:5b:4f:98:24:d8:fc:a2:8d:c6:03:8d:
d5:a3:db:2a:22:f9:bd:3e:84:ad:17:00:cb:b4:59:1b:0c:14:
69:74:d7:98:5b:80:5a:e5:56:63:91:e6:aa:10:02:86:5f:4c:
ef:a8:34:0d:64:1e:2b:97:51:8e:1e:15:a5:28:2b:a9:d3:64:
7a:55:a9:6e:57:0e:f2:17:49:10:1f:df:40:c3:ca:1a:24:6b:
eb:7d:9c:01:61:4c:86:a6:25:ee:f3:18:06:a2:2d:dd:ff:c6:
b8:5f:be:a5:bc:30:e0:a2:90:b9:e9:ca:14:23:ef:51:5e:d3:
af:e6:55:03:bc:4b:e6:60:d5:7d:48:27:bf:ce:bc:de:56:ee:
2d:b0:b8:fb:04:64:92:44:51:b8:5b:06:6c:40:d9:4f:92:b3:
8c:5d:73:c3:be:ee:ae:0c:72:88:34:60:ed:aa:1e:52:73:dc:
5e:34:61:7c:97:d9:1c:fa:5f:15:14:e7:83:b5:6f:99:1b:f6:
8b:fb:6c:2d:07:bc:1f:5a:ec:aa:81:ef:c4:aa:06:d7:56:1e:
c0:e1:b0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:33:43 2026 by rpki-client