
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
File: 5S3osZGTOKPiVWZOiASKVpihINA.mft (raw, json)
Hash identifier: 7mY4gN8O3Ma4lARM0kmZoS7dJwTnyPybuNC0GnbpMzs=
Subject key identifier: 3A:DC:17:85:00:F0:50:F8:16:BA:9A:A4:38:3D:66:E2:55:2F:E3:76
Authority key identifier: E5:2D:E8:B1:91:93:38:A3:E2:55:66:4E:88:04:8A:56:98:A1:20:D0
Certificate issuer: /CN=A9160701/serialNumber=E52DE8B1919338A3E255664E88048A5698A120D0
Certificate serial: 0C72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
Manifest number: 0C65
Signing time: Tue 22 Sep 2026 18:33:10 +0000
Manifest this update: Tue 22 Sep 2026 18:33:09 +0000
Manifest next update: Tue 29 Sep 2026 18:33:09 +0000
Files and hashes: 1: 5S3osZGTOKPiVWZOiASKVpihINA.crl (hash: c1dgZ4JbIZTgwzJfhP1ogznV15AX2VtXSfXOIB8+lVI=)
2: 6DCC06C231BC11EA9AACCA4BC4F9AE02.roa (hash: NDA9/ZIdOnZog2sK2a7R7CTd4jfshQqjGD+nO4awG3w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.crl
rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:33:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3186 (0xc72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160701, serialNumber=E52DE8B1919338A3E255664E88048A5698A120D0
Validity
Not Before: Sep 22 18:33:09 2026 GMT
Not After : Sep 29 18:33:09 2026 GMT
Subject: CN=6ab2c9e5-0f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ab:e0:b2:88:f6:c3:8f:58:39:60:b0:48:7e:
52:75:67:ad:46:49:d7:d0:5a:1a:ff:7f:17:c6:33:
e2:f1:14:77:b6:46:bc:46:c8:b3:0d:61:e2:5f:19:
47:73:74:9d:10:d9:03:9f:49:53:01:1f:eb:16:08:
39:a4:88:f5:58:4c:5a:cc:9c:25:b5:86:43:05:70:
f0:40:be:d9:50:59:d9:6e:c9:9a:7e:88:82:2d:e8:
24:f1:84:81:cd:00:3d:68:08:0b:8a:36:90:a4:95:
7e:68:61:60:92:da:24:a8:02:fd:b3:81:bf:3b:06:
cb:da:66:25:2e:dd:3b:34:97:72:72:b2:16:6c:c5:
52:55:67:12:ad:91:83:1a:83:84:af:78:2e:df:dd:
79:f3:39:a4:29:66:55:18:03:fd:2a:d1:f5:be:28:
31:87:f3:8a:ed:5f:57:22:ae:77:59:35:a7:28:ef:
24:9a:71:a9:4f:fa:19:78:9d:49:c9:da:60:83:87:
ce:b7:06:0e:a5:57:6f:a8:35:16:e1:62:57:86:a2:
fc:30:c8:86:4e:16:e8:15:35:19:d6:ed:1b:76:f8:
72:25:df:cf:cf:5a:86:3b:6a:36:34:b1:1a:76:f3:
ad:ce:df:55:8c:66:9b:29:09:93:c9:d6:e8:cc:ce:
3a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DC:17:85:00:F0:50:F8:16:BA:9A:A4:38:3D:66:E2:55:2F:E3:76
X509v3 Authority Key Identifier:
keyid:E5:2D:E8:B1:91:93:38:A3:E2:55:66:4E:88:04:8A:56:98:A1:20:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:6c:53:b6:c2:c3:a5:66:7c:52:00:18:97:eb:5b:3b:7a:c6:
c6:3e:93:f8:54:21:59:49:4e:c8:52:b2:43:c8:9e:c4:43:67:
43:e3:4f:e7:78:40:30:75:67:cc:40:d4:8b:65:31:0e:74:12:
20:38:41:da:07:df:81:59:92:b8:9d:3e:34:2c:36:86:47:82:
8c:f0:a9:6b:4f:e6:ce:fc:57:e1:46:ab:dd:74:0d:b3:ad:25:
75:01:a2:d3:04:d0:0f:2b:6b:e6:5a:78:7c:f5:8f:fc:3e:a6:
a4:4e:de:31:ae:32:39:9b:6f:6f:97:4a:ba:88:a9:04:ad:25:
a6:71:9e:4a:ec:7f:3c:cb:78:bb:14:b5:c6:1f:3b:7e:11:3c:
60:fd:43:f2:2e:3e:69:5c:02:96:da:52:6c:e3:5d:95:35:7d:
d9:87:95:8b:bb:15:6c:c3:df:cb:a6:72:bc:99:18:03:cc:ca:
a9:ea:5c:5c:8f:c5:76:55:ab:43:c0:c9:c5:6b:43:e0:0d:9c:
a2:64:4b:d4:39:46:7b:bc:96:59:28:3b:5c:d2:c0:31:83:a5:
ce:53:be:30:73:58:48:c1:8b:80:e3:f3:3c:ac:98:f8:5a:eb:
24:12:f2:42:94:49:f6:d4:15:fe:88:b9:f3:f2:f6:66:3e:8b:
3f:e4:9e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:20:04 2026 by rpki-client