
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147780/8C9243FEA28B11F193AD57CD6D11F970/R5tJBGZyXdy3xDsRbdIJd3RdqLs.mft
File: R5tJBGZyXdy3xDsRbdIJd3RdqLs.mft (raw, json)
Hash identifier: X0cq3g3wItRStLuLhF4a3sF/HapAl48WobdRQAF32QE=
Subject key identifier: 80:A1:B3:4C:46:FD:10:1A:0A:6C:21:0E:30:D4:14:79:C7:EC:02:F8
Authority key identifier: 47:9B:49:04:66:72:5D:DC:B7:C4:3B:11:6D:D2:09:77:74:5D:A8:BB
Certificate issuer: /CN=A9147780/serialNumber=479B490466725DDCB7C43B116DD20977745DA8BB
Certificate serial: 16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R5tJBGZyXdy3xDsRbdIJd3RdqLs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147780/8C9243FEA28B11F193AD57CD6D11F970/R5tJBGZyXdy3xDsRbdIJd3RdqLs.mft
Manifest number: 13
Signing time: Fri 25 Sep 2026 09:16:49 +0000
Manifest this update: Fri 25 Sep 2026 09:16:49 +0000
Manifest next update: Fri 02 Oct 2026 09:16:49 +0000
Files and hashes: 1: R5tJBGZyXdy3xDsRbdIJd3RdqLs.crl (hash: 88PfcKiJmh2l0vEPWrsckBoX0t8gaISMKK4xTZO1YaY=)
2: sBa1ONdH0bEjwIUuBaz9n2TODYk.asa (hash: kzl9HXZnhXacwNSm2aywcZwtU8Xbi2xU5uGMNE16GgY=)
3: 118AE504A3AC11F182CE12EF4811F970.roa (hash: BaxmhAFlm4Y9DdAnSprwAkz3r7z9o55u1TBQZRNoo6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147780/8C9243FEA28B11F193AD57CD6D11F970/R5tJBGZyXdy3xDsRbdIJd3RdqLs.crl
rsync://rpki.apnic.net/member_repository/A9147780/8C9243FEA28B11F193AD57CD6D11F970/R5tJBGZyXdy3xDsRbdIJd3RdqLs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R5tJBGZyXdy3xDsRbdIJd3RdqLs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 09:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147780, serialNumber=479B490466725DDCB7C43B116DD20977745DA8BB
Validity
Not Before: Sep 25 09:16:49 2026 GMT
Not After : Oct 2 09:16:49 2026 GMT
Subject: CN=6ab63c01-edb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:47:d4:c9:c2:80:e0:99:78:c4:95:67:57:
c7:2a:f9:8f:b7:e1:6b:1c:cc:91:ac:90:8c:39:b8:
d1:6d:2a:8e:f5:c5:e0:78:55:e4:82:93:a2:b4:2e:
32:e1:02:a6:98:b1:cf:bb:f5:cd:d3:ad:42:bc:85:
d6:a4:9e:85:54:1d:1b:0b:12:19:60:af:a2:68:81:
ac:ce:5d:c7:2c:a3:ca:e1:bd:53:62:dd:97:e1:16:
12:ad:97:71:77:91:01:d5:9b:c0:d1:96:f3:4d:e8:
3b:14:35:20:d2:58:49:b8:9f:6a:ae:c7:31:86:7a:
74:db:44:f2:8b:fc:57:60:f9:06:e4:0d:73:a1:42:
25:0e:40:38:39:f0:b6:ce:57:0d:fc:a5:5c:e5:ba:
8d:92:4d:32:ed:ae:29:7f:01:c0:e6:f9:55:6f:05:
97:72:6d:e6:af:6a:96:22:b9:05:e3:3a:f9:37:1f:
ad:02:4b:84:cd:13:5f:78:a0:08:7a:ef:89:a0:9e:
45:5a:4f:31:89:53:21:37:b0:0a:28:33:22:8e:99:
d4:5c:08:79:2c:d4:d6:87:4c:5d:47:d4:8e:54:d6:
9b:37:fb:ac:4c:65:0c:f0:37:21:b5:4b:1f:d1:21:
9e:ae:17:1b:9f:0b:cd:31:7a:4d:ae:b5:19:6c:af:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A1:B3:4C:46:FD:10:1A:0A:6C:21:0E:30:D4:14:79:C7:EC:02:F8
X509v3 Authority Key Identifier:
keyid:47:9B:49:04:66:72:5D:DC:B7:C4:3B:11:6D:D2:09:77:74:5D:A8:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147780/8C9243FEA28B11F193AD57CD6D11F970/R5tJBGZyXdy3xDsRbdIJd3RdqLs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R5tJBGZyXdy3xDsRbdIJd3RdqLs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147780/8C9243FEA28B11F193AD57CD6D11F970/R5tJBGZyXdy3xDsRbdIJd3RdqLs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:89:95:c2:98:5a:4d:ce:34:80:63:61:ad:02:c1:a4:2e:74:
c3:69:5b:fc:9d:01:c2:01:87:88:ab:b0:73:84:13:72:cb:eb:
89:ae:c2:8a:fd:69:e6:ef:5c:9c:1a:af:93:83:49:6c:ef:c8:
09:a6:8a:3b:55:ca:be:13:b2:0b:7d:f1:41:ff:af:fc:f2:94:
cc:65:65:cd:f6:1e:48:ba:a5:b5:95:2e:9d:a9:25:e0:a0:80:
7c:5e:8b:de:44:76:ef:81:b1:49:3f:72:eb:7c:0d:5e:92:9f:
0f:4e:cd:21:0f:a3:82:fc:2d:42:06:1c:58:77:c4:e1:30:13:
45:7d:06:69:83:fb:25:cb:3f:99:2f:61:53:f1:de:fe:f9:70:
a2:5e:d3:bc:91:39:3f:9d:6e:d7:9f:b0:45:2c:51:c9:b5:c4:
f2:21:09:d1:c6:2d:fd:fc:bb:c9:eb:22:98:b5:79:93:72:55:
e8:67:e0:cd:9e:7d:8f:ef:f0:53:cb:7d:75:8c:47:9a:6d:32:
1e:d5:70:5a:0e:c5:38:16:c3:45:9a:1b:f7:5d:fe:43:6f:b1:
ec:b2:26:21:c2:d3:e6:7a:18:be:81:57:58:7a:33:7f:8d:b7:
70:f4:8b:c0:59:77:d7:b1:54:73:44:e4:5b:77:78:03:48:1c:
31:fc:86:b8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
Nzc4MDExMC8GA1UEBRMoNDc5QjQ5MDQ2NjcyNUREQ0I3QzQzQjExNkREMjA5Nzc3
NDVEQThCQjAeFw0yNjA5MjUwOTE2NDlaFw0yNjEwMDIwOTE2NDlaMBgxFjAUBgNV
BAMTDTZhYjYzYzAxLWVkYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQClmUfUycKA4Jl4xJVnV8cq+Y+34WsczJGskIw5uNFtKo71xeB4VeSCk6K0LjLh
AqaYsc+79c3TrUK8hdaknoVUHRsLEhlgr6JogazOXccso8rhvVNi3ZfhFhKtl3F3
kQHVm8DRlvNN6DsUNSDSWEm4n2quxzGGenTbRPKL/Fdg+QbkDXOhQiUOQDg58LbO
Vw38pVzluo2STTLtril/AcDm+VVvBZdybeavapYiuQXjOvk3H60CS4TNE194oAh6
74mgnkVaTzGJUyE3sAooMyKOmdRcCHks1NaHTF1H1I5U1ps3+6xMZQzwNyG1Sx/R
IZ6uFxufC80xek2utRlsr9xfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgKGzTEb9
EBoKbCEOMNQUecfsAvgwHwYDVR0jBBgwFoAUR5tJBGZyXdy3xDsRbdIJd3RdqLsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NzgwLzhDOTI0M0ZFQTI4
QjExRjE5M0FENTdDRDZEMTFGOTcwL1I1dEpCR1p5WGR5M3hEc1JiZElKZDNSZHFM
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUjV0SkJHWnlYZHkzeERzUmJkSUpkM1JkcUxzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3
NzgwLzhDOTI0M0ZFQTI4QjExRjE5M0FENTdDRDZEMTFGOTcwL1I1dEpCR1p5WGR5
M3hEc1JiZElKZDNSZHFMcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCDiZXCmFpNzjSAY2GtAsGkLnTDaVv8nQHCAYeIq7BzhBNyy+uJrsKK/Wnm71yc
Gq+Tg0ls78gJpoo7Vcq+E7ILffFB/6/88pTMZWXN9h5IuqW1lS6dqSXgoIB8Xove
RHbvgbFJP3LrfA1ekp8PTs0hD6OC/C1CBhxYd8ThMBNFfQZpg/slyz+ZL2FT8d7+
+XCiXtO8kTk/nW7Xn7BFLFHJtcTyIQnRxi39/LvJ6yKYtXmTclXoZ+DNnn2P7/BT
y311jEeabTIe1XBaDsU4FsNFmhv3Xf5Db7HssiYhwtPmehi+gVdYejN/jbdw9IvA
WXfXsVRzRORbd3gDSBwx/Ia4
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:21:31 2026 by rpki-client