
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
File: 5DMXblmum0dk6179BKQ2hWKrXiE.mft (raw, json)
Hash identifier: hy1izwb4MYwAZtnziRABJA6bzAZeVZhvsT8m+e2NT1o=
Subject key identifier: B0:E8:71:52:03:DB:A4:2C:DA:93:F2:B5:E3:EC:98:2E:15:6C:0A:EF
Authority key identifier: E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21
Certificate issuer: /CN=A9180318/serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
Certificate serial: 3588
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
Manifest number: 3584
Signing time: Thu 24 Sep 2026 14:40:09 +0000
Manifest this update: Thu 24 Sep 2026 14:40:08 +0000
Manifest next update: Thu 01 Oct 2026 14:40:08 +0000
Files and hashes: 1: 5DMXblmum0dk6179BKQ2hWKrXiE.crl (hash: n6HcDBvj+s1Mnc3vP9X7ebVa89DJ9L1dX79sBT/D08k=)
2: 0D982F1A64AA11F189ECB4C08F47A888.roa (hash: RJDowkvQj21DAoDtlHXiHBFKbgMG1RN2lMIdKoUjxS8=)
3: 0D1729E264AA11F189ECB4C08F47A888.roa (hash: 155WPnU1Tdj5XYOx03K5ehKGfW7wOh/lahNdk39EN4o=)
4: 0C8AD31664AA11F189ECB4C08F47A888.roa (hash: /Wy2qPTE6WfGUPhUYPbYqfCwL9kdQFHUmC0zRjD/GhI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl
rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:40:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13704 (0x3588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180318, serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
Validity
Not Before: Sep 24 14:40:08 2026 GMT
Not After : Oct 1 14:40:08 2026 GMT
Subject: CN=6ab53649-f652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:b5:12:41:15:15:ff:aa:97:98:dd:90:9b:
21:60:13:11:cb:32:52:a8:1c:65:ad:07:b2:ea:5f:
bb:5d:d9:49:96:a5:9c:48:ca:d6:23:1a:9d:68:de:
90:28:0a:94:4f:e2:cd:d0:aa:ff:4f:d5:b9:fa:a3:
b2:93:48:0a:be:1a:f9:70:cf:4f:27:44:0e:05:e3:
d2:fd:0b:5e:e4:18:c3:ce:91:fb:dd:1a:37:64:49:
52:55:d7:13:12:fa:e6:39:b9:b6:d3:da:72:4a:b6:
ce:03:37:71:93:8e:f3:a5:f3:b6:0c:84:24:73:d1:
a8:4b:b0:50:56:37:7e:73:d9:07:5d:7e:69:34:90:
ca:e5:cd:57:2f:04:7a:4d:13:c8:9b:cd:4e:cf:a8:
49:a5:c0:a1:6d:0f:ed:2c:73:fa:c0:86:32:42:46:
6e:d0:3b:64:39:f3:3b:ab:73:b3:82:bc:09:d4:d3:
70:b5:ec:29:f9:9a:8f:22:8e:6d:f1:3c:19:77:d6:
47:1e:f7:b0:51:16:fb:72:8e:11:21:27:b6:7d:11:
13:ea:8b:27:a8:cf:39:e0:90:db:96:e2:0f:74:82:
ae:a4:79:09:f0:be:10:46:eb:e9:e0:35:53:5a:9b:
ae:9b:7e:03:98:72:73:1f:72:0a:03:bb:bd:56:89:
b4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E8:71:52:03:DB:A4:2C:DA:93:F2:B5:E3:EC:98:2E:15:6C:0A:EF
X509v3 Authority Key Identifier:
keyid:E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:bf:b8:75:18:5f:f3:8b:2f:ed:26:e1:a7:b3:82:89:cb:df:
3a:d3:0e:c5:c9:9a:58:f2:6e:c8:0a:07:2c:88:22:4e:b7:a7:
39:a8:e9:b1:f6:98:da:a9:6d:72:cc:07:cd:bb:ab:25:82:16:
ec:a1:ab:b4:4f:f1:2b:a6:d2:94:6c:c9:72:a9:3f:65:0f:69:
39:1b:92:e9:37:9a:af:d9:80:b7:c7:52:11:34:11:62:7f:25:
9f:30:c0:66:0a:d8:67:ad:8e:fe:61:aa:a0:3d:28:d3:4e:96:
f1:2c:5e:6e:81:1f:e7:18:9d:78:e6:0e:42:92:66:78:fa:91:
59:27:6c:66:89:12:2c:9e:d8:75:b5:5e:ff:d0:9b:31:dd:26:
f7:cc:a6:8b:27:30:e7:5c:a6:45:1b:32:17:9a:88:29:cf:7e:
6d:46:b1:4c:51:38:bb:d9:c6:22:0d:21:35:a6:14:7f:9d:53:
43:23:d4:49:d5:57:d9:1e:7b:56:60:ab:55:84:66:f2:b0:10:
0f:e0:11:76:44:19:f2:39:f8:74:b7:99:df:7c:f3:76:36:ab:
c5:7f:5c:1a:35:9a:19:ae:6c:66:41:b1:86:6d:7a:21:be:c8:
0c:03:61:22:94:40:ac:a0:78:83:28:a7:03:d0:1d:c1:3e:b9:
65:cb:fc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:54:05 2026 by rpki-client