
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
File: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft (raw, json)
Hash identifier: uGvFI3A7WIG8IHcmk1jrMtVfKQDiPpfZ4dc3gmSYP20=
Subject key identifier: 51:FC:9F:D9:A8:B4:08:B3:ED:66:03:85:3A:2A:B4:EB:5B:55:BE:F0
Authority key identifier: E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69
Certificate issuer: /CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169
Certificate serial: 0137
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
Manifest number: 012D
Signing time: Wed 25 Mar 2026 04:51:28 +0000
Manifest this update: Wed 25 Mar 2026 04:51:28 +0000
Manifest next update: Wed 01 Apr 2026 04:51:28 +0000
Files and hashes: 1: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl (hash: bMJtCMsfBu12l8OewBqYSbJNXwOYB93EooGFLS42NfU=)
2: 4D06CD2C667411EF8E723587C4F9AE02.roa (hash: zXaiTn1OPuqTOi1DnfJ2nxhGdbrJsBTMVyTGh2dj7aY=)
3: 4CA4BE8E667411EF8E723587C4F9AE02.roa (hash: Je69DOenUud2l/CtIOyINuqm56Y7r+pSuPgQPd3u0+o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl
rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:51:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170DD8, serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169
Validity
Not Before: Mar 25 04:51:28 2026 GMT
Not After : Apr 1 04:51:28 2026 GMT
Subject: CN=69c369d0-0f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:46:a3:19:1f:8f:cd:16:dc:72:09:7a:3a:
bd:d6:de:56:d2:c0:10:5d:f1:05:bb:fc:92:ae:dc:
20:5d:22:4c:d9:ea:1e:da:f1:de:8d:23:55:48:8a:
32:b6:f5:82:66:e9:c9:d7:7c:9a:d1:b7:a6:ee:10:
29:82:cd:16:ec:1e:d9:81:28:21:e7:b5:55:c9:8a:
7e:4b:57:b5:40:d7:b7:39:a7:97:c6:e1:d6:3f:56:
6b:6f:f0:e4:ec:d0:14:f4:ae:ac:a2:24:ad:87:71:
4c:60:25:9b:ed:dc:15:0c:84:b0:ed:b0:64:44:6c:
6b:eb:1f:14:a9:66:bf:60:df:d0:14:22:9e:af:a8:
8a:c1:60:ce:41:01:10:de:d3:39:94:77:16:8e:d5:
fc:aa:19:89:0d:55:23:06:9e:6b:ff:81:e3:71:b4:
55:c3:45:4a:6d:19:05:63:df:5e:84:72:45:03:e4:
aa:06:44:00:04:ea:a4:34:a9:d7:2b:a1:5a:9b:65:
ef:14:9e:8f:cb:d4:24:ce:ca:02:1c:a5:82:22:c9:
1a:5f:67:62:7d:99:8e:8e:d6:5d:b4:90:dd:61:27:
3f:20:7e:fb:ee:66:6e:8c:0a:fe:04:51:68:9f:2a:
f5:37:35:a1:f0:a4:75:df:1a:e1:1f:31:1b:0c:19:
b2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FC:9F:D9:A8:B4:08:B3:ED:66:03:85:3A:2A:B4:EB:5B:55:BE:F0
X509v3 Authority Key Identifier:
keyid:E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:57:9b:7a:30:95:0d:24:53:f2:f9:7d:69:09:24:d8:2b:5f:
63:72:e4:97:57:f3:13:57:83:35:16:13:48:1b:ad:12:3e:9b:
a5:b5:2c:dd:7e:3f:9d:6a:de:71:48:3b:b5:22:3c:b3:21:34:
aa:57:c7:e8:01:52:80:83:19:15:93:0e:4a:49:c0:56:3e:22:
d4:f5:be:c8:8f:47:f2:11:ce:94:3f:5e:62:bf:9d:8d:37:55:
d8:c8:c4:95:d4:80:d4:8f:5c:3c:a5:0a:34:13:ef:1e:fc:b5:
8b:0d:11:39:cd:34:81:d5:c5:be:09:0f:d2:25:07:c1:54:5c:
e1:40:41:49:58:f4:1f:83:43:e7:4a:4f:7c:fe:02:05:18:c1:
11:54:28:b2:f3:67:a9:bb:cd:58:8f:d5:19:37:df:e3:e7:e7:
14:73:cb:a1:e1:c8:4d:42:cc:df:55:5a:2c:f8:93:d3:19:b8:
78:51:d8:50:27:ea:73:5d:9c:6a:85:fe:18:9f:d7:22:72:62:
6a:4a:67:e9:d5:30:1c:8b:45:86:41:35:11:5b:0c:a0:77:d1:
1a:01:06:4e:25:b8:44:17:04:a7:05:3e:ca:92:13:e7:2b:f6:
9d:c5:97:aa:b2:2c:4a:5c:c1:d5:fe:3e:1d:69:c6:9f:08:5e:
9e:d2:e0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:02:47 2026 by rpki-client