
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft
File: pDc5u18gwUzF_EnjdVh9s7ciN68.mft (raw, json)
Hash identifier: 3T8zl/hIsdLwaWesHOtPeNQyTwPktqlVbUang2R7yo0=
Subject key identifier: 1C:2B:AE:96:C6:10:5A:6A:54:E8:61:02:C8:AC:69:08:54:70:FE:E1
Authority key identifier: A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF
Certificate issuer: /CN=A9172B7E/serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF
Certificate serial: 0215
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft
Manifest number: 0208
Signing time: Wed 13 May 2026 03:13:31 +0000
Manifest this update: Wed 13 May 2026 03:13:30 +0000
Manifest next update: Wed 20 May 2026 03:13:30 +0000
Files and hashes: 1: pDc5u18gwUzF_EnjdVh9s7ciN68.crl (hash: ST2i7ynjQJ+I0BOeTaMdn29bnHR+XTYb571JFldLUZY=)
2: BF341AF869A911EE8CB76452C4F9AE02.roa (hash: zruAs6tE4g/7xXgkpCpI/pMe53ngPwPFAHbDL/Vu+YY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl
rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:13:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 533 (0x215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B7E, serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF
Validity
Not Before: May 13 03:13:30 2026 GMT
Not After : May 20 03:13:30 2026 GMT
Subject: CN=6a03ec5b-c201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:1d:7e:b9:dc:fe:cd:37:ef:30:85:0e:26:
cc:b2:d2:de:cd:2d:68:e0:61:d8:c0:37:61:3c:a4:
24:97:65:c2:1d:4a:ec:de:8a:46:9d:9e:32:57:6d:
47:94:d0:d9:b9:66:81:e3:48:db:17:cb:de:5e:a1:
6b:dd:ee:b1:3d:42:9d:02:28:0e:0c:b3:dc:51:50:
60:33:c8:08:9d:5b:2c:22:d9:ec:26:7f:7a:c6:11:
cb:0e:5d:f2:b2:7f:52:fb:f3:b6:be:64:4f:d8:9f:
a1:b6:d6:bb:e6:0b:bd:a1:cc:2a:a3:99:10:1c:d9:
44:7d:6c:76:29:e4:ef:df:b9:23:f3:fa:67:34:af:
8f:0b:a1:41:a5:b1:e2:4f:4f:a4:b1:52:c8:96:02:
da:70:7a:85:22:9a:c0:61:5d:63:7b:54:03:22:78:
7b:9f:6f:ea:d0:eb:0a:cc:6c:e1:45:68:2d:8b:dd:
f0:6b:7c:66:48:92:d5:4b:5e:9d:c1:0c:e3:4b:4c:
25:f0:81:16:05:0d:eb:ca:41:83:8f:1f:b6:81:dc:
83:b2:06:49:4b:fb:7f:a9:f5:08:e4:61:15:5a:23:
f8:51:3b:9b:23:e9:00:87:6e:2d:9f:55:23:0a:4f:
c2:3e:8b:d4:a2:ca:28:31:4c:de:3a:b7:ec:ad:f3:
13:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2B:AE:96:C6:10:5A:6A:54:E8:61:02:C8:AC:69:08:54:70:FE:E1
X509v3 Authority Key Identifier:
keyid:A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:5f:ab:24:b9:32:96:8d:b4:0f:60:bc:9a:49:14:60:5d:a3:
be:a7:a4:cf:1c:8e:d5:ad:41:c6:08:a9:27:86:e4:ef:4a:d9:
c0:a7:a7:2b:1e:a5:df:96:f5:62:66:5a:27:37:26:e1:58:4a:
c4:81:79:77:51:cb:d9:ea:d6:48:1c:1a:e9:e3:99:e3:a8:6b:
db:c1:61:ae:3e:51:1f:88:2e:f7:67:e2:0c:d9:f0:c9:7b:1b:
72:8d:e9:0e:ff:0d:ae:08:cf:43:63:aa:0e:9c:6e:21:2f:fc:
04:02:51:f2:98:6d:d9:a7:83:72:45:b8:3e:46:75:b4:3d:3d:
0d:a9:08:d8:b6:04:53:8a:70:47:36:b4:35:1a:4d:82:47:22:
98:a0:b7:e1:ae:e4:1e:8a:60:52:62:2d:44:5b:6b:e8:33:6f:
7c:b1:b4:00:65:67:84:68:78:54:ec:ee:31:21:cd:50:c1:a2:
1a:45:9c:6d:57:d1:15:da:a2:cc:af:4e:e2:63:d2:33:f3:10:
93:f9:25:b1:95:84:82:ce:d9:95:4c:00:88:07:74:c3:cd:a0:
3c:cb:0c:72:c6:8c:7d:03:32:5d:87:3c:a5:08:ce:aa:e2:5b:
54:21:c1:e4:ee:48:ab:fe:10:92:80:4f:3d:03:ee:ae:a9:33:
fc:18:91:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:01:31 2026 by rpki-client