
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
File: tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft (raw, json)
Hash identifier: ROaz1TNvAwhBzQJ9Q0MSq4LlPdlMCEUFZtQeGbb89uA=
Subject key identifier: F8:51:15:21:2C:7E:96:0B:08:59:ED:9C:27:AE:02:BB:D4:4D:B7:B0
Authority key identifier: B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C
Certificate issuer: /CN=A9160C95/serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C
Certificate serial: 069A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
Manifest number: 068B
Signing time: Tue 12 May 2026 22:35:21 +0000
Manifest this update: Tue 12 May 2026 22:35:21 +0000
Manifest next update: Tue 19 May 2026 22:35:21 +0000
Files and hashes: 1: tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl (hash: eZWJ3RKDscltDj+UOmhr6pM8yrmvn+Ca8zbZ03fkXSY=)
2: B3DED5C6BAC911EB8533B615C4F9AE02.roa (hash: +nAEEuzzAHJ64g2Y+I53w9dhyFuYT2+b3syIj71QLeM=)
3: 3C2408105CBF11ECACDFE47BC4F9AE02.roa (hash: TMOTzC8LyMJLZtdqx4wEZX0fEZReW/QgdhjNImxkGuk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl
rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1690 (0x69a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160C95, serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C
Validity
Not Before: May 12 22:35:21 2026 GMT
Not After : May 19 22:35:21 2026 GMT
Subject: CN=6a03ab29-b032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:d1:1f:13:6a:b4:1c:35:17:f4:1e:34:ee:
28:f3:a1:33:ae:29:e2:e3:7a:b6:fd:94:80:a3:ef:
76:a3:69:71:dd:12:de:42:6d:7a:bb:73:27:43:59:
93:1a:88:8a:61:fc:c5:cc:5e:50:0d:6c:25:0c:74:
ac:f4:8e:38:2d:b8:7f:d0:46:77:6c:21:6b:2a:95:
b5:cf:6c:74:87:40:02:a9:eb:38:f8:4c:c9:12:76:
49:b3:e6:bc:83:81:17:04:5b:0b:18:d8:b7:dc:dd:
87:02:3f:a5:75:04:2d:d7:18:3b:8f:b0:8a:ae:9d:
af:23:ce:e7:52:6e:4d:d8:79:33:c4:3a:d6:85:98:
02:0a:ee:0a:a2:31:06:6d:ec:2a:22:48:a5:65:62:
d2:61:20:fd:22:04:db:3e:23:34:d9:a3:dd:4e:20:
93:41:71:cd:e7:61:b0:99:68:71:97:92:96:07:16:
0e:0e:d1:65:18:f0:23:da:9a:01:ea:d5:0e:8b:73:
84:16:d1:a8:7d:08:51:03:b5:0d:65:b7:9c:ef:e3:
bd:3a:ad:8f:a3:1b:8b:8d:15:6c:ab:84:de:f5:f7:
80:f1:3e:98:61:f8:0b:47:40:10:9b:12:f5:32:11:
db:a1:da:bf:d6:84:ee:44:ea:eb:73:5b:85:db:67:
6a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:51:15:21:2C:7E:96:0B:08:59:ED:9C:27:AE:02:BB:D4:4D:B7:B0
X509v3 Authority Key Identifier:
keyid:B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:27:9b:dd:cb:3e:24:ce:e4:85:09:30:58:f0:9a:50:60:3b:
bc:df:2b:a6:32:96:2c:fe:12:91:ef:08:88:8c:ae:c7:9c:a1:
d0:02:a1:04:40:3c:56:37:5d:fe:3b:b1:94:43:bd:a5:e8:9d:
e7:f2:27:3b:49:58:53:e6:ce:23:a7:45:0e:c4:0c:e5:e4:b6:
5b:30:90:79:d0:3d:d7:2c:15:f8:b1:09:95:3e:74:4e:6a:92:
a8:a9:a5:4b:4b:a6:4f:08:15:ad:c4:5e:8a:37:58:46:d4:78:
7e:ec:2f:f1:2a:81:6b:34:f2:be:fe:a6:85:ed:be:9c:d3:2a:
4b:d4:45:15:4c:c8:f6:b2:52:69:ae:6e:37:d9:55:5b:e8:87:
cc:85:96:3e:63:22:e4:21:48:bf:51:b6:bf:df:b6:f5:cb:6b:
74:0c:2f:b7:89:30:87:d3:f2:04:12:00:80:96:48:ef:23:92:
53:72:5a:fe:39:a4:9c:42:b9:81:d1:c0:90:83:cd:86:25:19:
03:0f:5e:4f:d0:33:ee:e9:b1:c8:1d:9e:38:b0:34:d3:9f:5a:
ac:26:08:00:cc:c9:11:27:51:89:89:f3:12:74:a1:b5:94:39:
b6:d1:74:fe:b7:e7:f3:1d:2a:88:89:47:2f:23:ac:3c:71:41:
30:d7:b4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:55:35 2026 by rpki-client