
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.mft
File: 9b6dYfb-pOZW1P0BVPgkg5zAExo.mft (raw, json)
Hash identifier: FucBboVY4/5BFI/Dfp7Xa2dSmFYHebmT9f8mzcH6CNI=
Subject key identifier: AB:2C:C1:20:A8:D5:F7:EB:F2:5E:E4:73:B8:97:50:43:E8:4F:43:EC
Authority key identifier: F5:BE:9D:61:F6:FE:A4:E6:56:D4:FD:01:54:F8:24:83:9C:C0:13:1A
Certificate issuer: /CN=A917F9C3/serialNumber=F5BE9D61F6FEA4E656D4FD0154F824839CC0131A
Certificate serial: 05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9b6dYfb-pOZW1P0BVPgkg5zAExo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.mft
Manifest number: 04
Signing time: Mon 11 May 2026 09:26:32 +0000
Manifest this update: Mon 11 May 2026 09:26:32 +0000
Manifest next update: Mon 18 May 2026 09:26:32 +0000
Files and hashes: 1: 9b6dYfb-pOZW1P0BVPgkg5zAExo.crl (hash: GUimjjntVG1pjfZvvEkE6oaYwIaOVu41jqrrHYF/ru0=)
2: 6C5753D84AB911F18A4D3DF6BB833773.roa (hash: kOOEqXmo4LVDDcxbv65Mt49e9oFCFpEfHfLmkIbPCDw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.crl
rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9b6dYfb-pOZW1P0BVPgkg5zAExo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:26:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F9C3, serialNumber=F5BE9D61F6FEA4E656D4FD0154F824839CC0131A
Validity
Not Before: May 11 09:26:32 2026 GMT
Not After : May 18 09:26:32 2026 GMT
Subject: CN=6a01a0c8-5948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d4:f7:54:f5:ac:eb:eb:45:5c:d2:97:72:82:
91:12:d1:21:a7:dd:b0:a5:71:b2:a3:df:d5:2b:6e:
ad:d1:2f:29:fc:80:a9:ba:6e:8d:25:48:f4:07:47:
af:60:62:ba:9f:71:dd:6f:11:ea:6f:65:28:2f:aa:
dd:1d:de:59:99:c1:bd:d8:6d:3c:e7:54:57:a9:28:
80:4d:78:b9:27:74:0e:da:0d:fb:d5:42:fc:e0:d8:
03:2f:7a:74:c1:f2:9e:4b:67:6e:bf:26:3e:9c:cd:
4c:45:c3:b5:eb:74:77:5a:04:0f:52:ee:62:85:99:
3a:28:50:af:ea:3e:79:62:79:6d:4a:44:66:79:52:
06:db:b0:75:f2:61:97:00:91:af:a4:b2:bb:67:b0:
7b:b6:99:3a:b9:c3:f3:4d:f0:e2:d3:a2:19:db:4e:
e0:e6:ca:28:e4:31:e7:4a:45:34:5c:f5:ee:b4:a2:
12:7f:bc:73:62:e1:6a:43:1a:ea:26:0e:38:be:6e:
0d:de:97:bc:4b:99:03:94:29:23:73:37:4a:52:79:
f3:2f:02:fa:a3:8d:dd:4f:da:c3:3e:16:9a:85:93:
14:4d:e9:2d:c6:01:cd:02:ff:53:2f:1b:5c:a7:1e:
34:e8:4f:29:06:50:af:47:23:b0:5c:59:32:44:e2:
ed:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2C:C1:20:A8:D5:F7:EB:F2:5E:E4:73:B8:97:50:43:E8:4F:43:EC
X509v3 Authority Key Identifier:
keyid:F5:BE:9D:61:F6:FE:A4:E6:56:D4:FD:01:54:F8:24:83:9C:C0:13:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9b6dYfb-pOZW1P0BVPgkg5zAExo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:ca:4b:af:b2:5a:e8:e5:63:11:74:3c:a3:23:dd:0f:0e:86:
65:db:42:ee:a3:99:ff:28:cf:b9:84:fa:a3:85:52:c6:7d:66:
aa:94:77:34:3b:3b:6a:c7:ea:84:18:92:f8:0d:e1:e3:1e:23:
16:64:58:be:31:f3:6e:f8:72:6d:22:52:84:ae:86:c3:22:e9:
4c:34:32:bc:0f:76:60:35:53:2e:9b:e2:61:b4:a7:a0:17:57:
20:fb:39:12:a1:02:0b:74:5f:ac:3d:6c:6c:84:14:90:6f:0e:
33:ff:ea:d7:b0:65:62:45:bf:dc:6d:bc:13:d5:20:93:5c:d5:
ea:31:2a:7e:f1:02:71:73:2c:26:34:d1:c2:b5:0a:9c:62:35:
80:e9:20:1d:a3:54:f7:6f:41:c8:12:2f:4b:67:52:89:52:57:
2d:7c:8d:50:aa:95:9a:1c:d1:c5:d2:b5:2b:c5:19:bb:73:72:
c4:57:46:4b:9b:a8:11:e1:d3:d6:ea:c8:10:b5:fc:1c:e8:9c:
b7:02:d0:61:fa:bd:e0:5c:11:03:a5:49:fb:bb:8e:c3:a8:97:
b5:fa:6a:fc:9c:52:d9:60:04:46:79:bc:d5:e1:19:35:e2:6a:
2c:ae:83:e7:81:43:48:c5:f6:85:56:99:cc:60:52:b3:dc:af:
9e:ca:5d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:14:45 2026 by rpki-client