
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
File: 5iRBKkJ5WJuewvqzIiurBibTElo.mft (raw, json)
Hash identifier: G+EKfLVtibWqbLjyKFHfzBKkCUYMkhq2HAHizOm45sk=
Subject key identifier: F7:CC:A3:8D:E4:3A:9E:48:33:4C:5F:73:D6:B4:CC:46:F9:1E:A6:9C
Authority key identifier: E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A
Certificate issuer: /CN=A9168336/serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A
Certificate serial: 0D59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
Manifest number: 0D45
Signing time: Wed 22 Jul 2026 18:21:18 +0000
Manifest this update: Wed 22 Jul 2026 18:21:18 +0000
Manifest next update: Wed 29 Jul 2026 18:21:18 +0000
Files and hashes: 1: 5iRBKkJ5WJuewvqzIiurBibTElo.crl (hash: 1xYMvQPYVAwMcY3wRofKDt0lObiC0W+Fjt2hURV4X9E=)
2: 6B6223B294D011F08FAC1420C4F9AE02.roa (hash: ywPnX5HWIz7gB+GZOiMioEbYiFIq0HckI3yhWxQCoN4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl
rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3417 (0xd59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168336, serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A
Validity
Not Before: Jul 22 18:21:18 2026 GMT
Not After : Jul 29 18:21:18 2026 GMT
Subject: CN=6a610a1e-f5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d2:9b:0e:b6:d0:55:66:4f:c4:cf:c5:11:87:
a8:35:97:31:23:90:dc:48:ff:a2:8d:0c:ea:48:00:
b1:14:63:ac:e9:4b:78:1f:2d:3b:3f:b3:2b:f4:10:
cf:9b:07:86:9c:a6:2c:3c:50:be:51:56:9d:4b:56:
13:0c:2b:91:3d:b2:85:1d:10:2b:d9:b4:72:85:3f:
76:de:2a:52:0a:50:71:16:12:0e:16:56:fe:e2:61:
ba:9e:4b:dd:7c:03:37:60:0d:65:f0:77:0f:be:e1:
bb:51:72:1e:40:2c:9b:40:91:86:98:77:7e:12:51:
23:3a:7f:82:04:8a:54:84:ac:4a:bc:49:35:49:74:
4a:38:6c:0f:0c:f6:42:a2:8e:85:3e:d5:ce:a1:d9:
89:36:74:e4:be:5a:51:a5:b7:be:5b:e8:b9:61:78:
c5:28:2e:7d:6c:86:6d:43:11:21:b8:d1:96:c5:c7:
1f:8d:65:ed:c5:7f:d8:de:cd:f2:86:1b:8e:37:b5:
2b:8c:f3:70:30:aa:93:e7:eb:94:d5:30:29:03:3a:
db:fa:63:3a:b2:ad:63:cb:57:8e:c9:3f:a6:2b:f8:
2e:e7:bc:6e:f8:92:d1:f0:9e:83:82:15:8b:6e:c1:
ab:7d:99:53:d3:c5:21:42:51:11:93:51:2f:77:9f:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CC:A3:8D:E4:3A:9E:48:33:4C:5F:73:D6:B4:CC:46:F9:1E:A6:9C
X509v3 Authority Key Identifier:
keyid:E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:4f:da:01:32:3b:f2:fc:36:f5:0f:bc:a9:77:a9:1f:f4:e2:
8a:17:1d:84:8b:b1:e0:44:9e:d4:5f:b1:e2:7a:b5:d8:76:07:
27:9f:8b:19:15:a9:9e:86:ab:9d:a0:59:96:7c:cc:aa:72:8a:
56:ce:35:37:d2:5c:5e:7d:54:32:58:80:20:b7:48:c3:53:fb:
5e:a5:5f:ee:fb:a5:3f:3d:fb:25:61:e5:55:03:75:02:2b:cd:
48:c9:e7:43:c4:2e:1e:48:91:29:ff:45:ad:0c:53:4b:bd:71:
e2:fc:6e:3c:ad:fb:27:f7:50:86:5b:d4:ce:5c:81:e4:62:8b:
24:ac:d1:16:2c:f9:7b:45:65:72:b0:52:e1:33:bf:c2:da:2e:
04:6e:12:4f:f3:91:de:58:6c:00:f2:8b:06:31:0e:e2:c5:0c:
eb:03:66:f8:5f:71:40:51:dc:cb:cb:04:88:15:0d:25:81:75:
64:75:40:1e:e2:88:d5:50:3b:4b:58:22:5e:e8:ea:73:c9:17:
5d:1e:2b:1e:b1:90:04:97:a8:4b:e3:b4:8a:55:57:62:dd:5e:
b3:c1:40:53:d3:03:49:f4:41:27:68:a1:a1:a1:aa:b3:7e:d1:
00:2f:f6:57:da:be:72:62:81:5f:16:c8:60:bf:11:87:61:2f:
3e:1c:7d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:31:45 2026 by rpki-client