
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
File: 5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft (raw, json)
Hash identifier: lI8tK/xt/G3Nc3acXzjdHwWev/OKD7vWbIxEQeghjSM=
Subject key identifier: 7F:5C:CB:B9:06:35:B4:00:F4:67:1D:B7:07:E3:76:51:62:33:3F:ED
Authority key identifier: E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
Certificate issuer: /CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
Certificate serial: 0607
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
Manifest number: 05DB
Signing time: Tue 12 May 2026 23:14:42 +0000
Manifest this update: Tue 12 May 2026 23:14:41 +0000
Manifest next update: Tue 19 May 2026 23:14:41 +0000
Files and hashes: 1: 5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl (hash: XFRXpkzH/rqEG7DY7HZjb1tW/efo6oTWVRs+dOmyHQo=)
2: 9CB324BA273111EF9F5B0860C4F9AE02.roa (hash: suAI1YPeN8kbgOgmaGzzfLUHLWI1/VRvkqObcPH/nuk=)
3: 2C4993AA271B11EF97731F0BC4F9AE02.roa (hash: GP7UGfZCMHOPLL1gZXCEO6qhlaky7I3CQ/nq013zLKM=)
4: D5AEE7FEF61A11F0A42262E05A6F56BC.roa (hash: YonCxURFZFCSJYKZZl/AlgVFdSlrOcW3O6u6eFemois=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl
rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1543 (0x607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165362, serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
Validity
Not Before: May 12 23:14:41 2026 GMT
Not After : May 19 23:14:41 2026 GMT
Subject: CN=6a03b462-1986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:7f:b4:f6:cf:b4:9e:d1:a1:76:46:1e:df:
bd:b7:45:d7:7f:e7:33:28:cc:ec:67:74:a9:5b:5f:
8d:cc:8f:43:e2:e9:bd:e7:c0:e8:07:ea:f1:da:df:
66:21:10:6c:30:e9:2c:7c:97:b4:ea:03:cf:4d:ce:
6a:58:ff:30:0f:36:18:15:94:07:ee:e3:f5:dd:ea:
db:ae:20:c6:49:07:14:13:7a:ee:62:35:f7:a9:90:
05:12:98:10:6b:5c:c6:5a:0a:09:6f:d0:0e:ed:b3:
52:90:05:2f:a8:0b:05:a0:6d:c0:84:2f:52:37:cf:
50:c9:3d:ef:56:b3:88:a6:b9:cf:05:6a:b8:08:32:
9f:53:46:5d:97:d4:e1:91:62:3b:81:bb:1b:4e:fc:
3d:91:1e:87:a2:c7:c6:95:fc:be:70:6b:f2:f4:7a:
ba:a4:dc:37:6f:90:22:c9:81:92:29:67:94:38:4e:
79:95:20:4d:18:c9:35:6f:65:b3:53:30:f9:8c:c1:
d8:94:6f:4b:9e:9a:df:3a:33:3a:c2:06:23:34:27:
1c:bf:69:1d:71:e1:83:20:60:0a:f0:a8:48:de:10:
11:61:1a:82:0a:9d:38:30:19:aa:0e:09:e3:12:7a:
bf:2e:52:88:fe:e4:f8:4a:de:fe:33:54:ac:7c:a8:
0d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5C:CB:B9:06:35:B4:00:F4:67:1D:B7:07:E3:76:51:62:33:3F:ED
X509v3 Authority Key Identifier:
keyid:E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2e:10:31:5c:e4:be:e8:5a:8e:2b:12:e6:5b:f1:82:59:a1:
b4:14:ba:f3:a8:4e:a2:5f:a9:49:a6:15:9c:f0:fc:01:4f:f9:
f8:87:45:e5:7a:6a:ca:7a:3f:0f:03:74:f1:15:52:f7:db:ee:
37:bf:9b:dd:45:18:91:63:05:e2:8f:06:f5:76:9e:fb:ff:c2:
80:1d:42:93:e2:36:cc:15:f1:2d:bd:8f:eb:e7:ba:d7:d4:cf:
9c:6c:09:00:9d:de:27:72:96:61:f3:2a:70:3f:36:5f:a9:06:
22:3e:3b:ce:14:be:53:df:ed:56:2b:a3:61:1d:09:53:60:04:
6e:75:27:f2:c1:0c:9c:7d:85:79:8a:66:0d:9a:65:53:e0:4d:
69:20:08:63:03:95:0d:37:01:ce:d6:e1:92:bf:0f:2c:e9:3f:
30:ef:95:6d:da:19:32:6b:13:1d:8a:35:a4:f6:5e:58:e2:c2:
18:8d:36:19:62:66:b5:53:77:db:f0:29:c7:67:a7:69:5a:f9:
72:8a:e0:dc:93:d6:99:9b:6a:5b:d3:aa:66:0b:bb:52:a0:35:
e4:7f:db:47:be:09:04:1f:f2:71:33:0a:ca:3a:64:89:49:08:
2c:91:2e:c1:d1:fb:f9:46:87:ef:02:79:34:ec:ca:cf:3f:80:
c4:72:02:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:35:25 2026 by rpki-client