
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft
File: P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft (raw, json)
Hash identifier: Iz6IbMhr4s7uJozGcp8RAHkYmFCnwzNMXqTSeQc6Nac=
Subject key identifier: 96:4A:10:CA:78:92:B2:55:86:DC:2F:46:71:39:4B:C3:A5:8E:43:BC
Authority key identifier: 3F:9F:C9:D9:42:19:8C:47:23:34:A3:7E:AD:3D:EA:B5:03:92:E8:2F
Certificate issuer: /CN=A9186753/serialNumber=3F9FC9D942198C472334A37EAD3DEAB50392E82F
Certificate serial: CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft
Manifest number: C5
Signing time: Wed 25 Mar 2026 06:09:39 +0000
Manifest this update: Wed 25 Mar 2026 06:09:38 +0000
Manifest next update: Wed 01 Apr 2026 06:09:38 +0000
Files and hashes: 1: P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl (hash: 7H+n8E/e7BBz5CXfMztelYQhApcMJUEhd1LzNh/PjYQ=)
2: 62BBFF4A046A11F081D54156C4F9AE02.roa (hash: RN8WupoNcOClyYuYNIwdHNJdvolRCPOBGKtwfS/HNdM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl
rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:09:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186753, serialNumber=3F9FC9D942198C472334A37EAD3DEAB50392E82F
Validity
Not Before: Mar 25 06:09:38 2026 GMT
Not After : Apr 1 06:09:38 2026 GMT
Subject: CN=69c37c23-62be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:10:f2:a2:8d:c3:ff:08:e0:fe:ea:5e:97:a1:
62:2a:aa:67:58:3a:45:df:4a:42:d2:10:e1:79:8e:
55:2f:a1:3d:cd:dc:3c:79:7c:89:12:f8:78:81:3c:
fb:c1:7f:58:dc:d9:22:68:54:3e:8b:b5:56:a4:87:
12:f9:64:98:33:e9:35:7b:13:34:c7:3e:18:7e:6d:
6d:8c:2f:bd:6d:95:87:83:4c:cb:b0:5f:37:e3:77:
c0:af:d0:ad:74:06:1b:0b:85:d0:9b:27:e8:45:7c:
85:aa:1b:05:91:d2:e6:a5:86:ad:13:82:59:89:6b:
5f:ee:30:54:5a:b3:ea:5a:ec:b1:1e:07:60:fa:c7:
bd:d2:64:01:ba:15:cb:76:54:99:9b:5e:6b:7b:c0:
03:9f:16:26:51:94:28:78:33:c0:94:47:1e:e5:17:
b6:5a:88:7b:28:f5:e4:28:61:15:e8:a9:25:32:ce:
43:8b:6a:aa:35:e6:d4:85:1e:a8:03:d8:f5:5f:3c:
e2:0a:15:1d:f2:99:20:5b:79:10:aa:15:3a:8c:fd:
86:9c:33:ec:68:9d:83:34:80:20:d1:43:b7:e9:9b:
30:fc:98:50:2a:a5:14:78:2f:e4:f6:a6:ae:20:c8:
3d:10:1d:9e:80:dc:ba:a3:49:89:aa:e9:31:e5:94:
c6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4A:10:CA:78:92:B2:55:86:DC:2F:46:71:39:4B:C3:A5:8E:43:BC
X509v3 Authority Key Identifier:
keyid:3F:9F:C9:D9:42:19:8C:47:23:34:A3:7E:AD:3D:EA:B5:03:92:E8:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:ad:4a:c8:c8:55:ea:3c:28:27:01:3c:f5:86:39:1c:36:01:
61:49:09:5d:da:52:96:28:94:90:05:c4:01:73:12:ac:6d:f3:
c3:f4:3b:2f:34:79:93:12:7d:bc:9a:77:50:02:06:72:fe:93:
8d:d3:b8:8e:37:0e:dc:5d:4c:df:cb:92:39:dc:f6:0b:38:d0:
e5:90:63:14:65:9c:d8:ec:ef:d4:86:7d:1d:d1:57:50:fe:c2:
8b:87:2f:4e:7f:90:17:b2:e0:a3:28:a7:1b:bf:2c:77:6b:df:
6c:29:f9:4b:19:61:80:8c:42:90:42:89:dc:56:2a:2a:89:40:
23:6e:ae:f7:b1:00:97:65:34:6f:7e:36:f6:28:82:9b:1b:b2:
6e:d6:16:bf:be:c6:3c:b1:7e:75:4c:62:aa:15:d6:12:16:96:
23:23:b2:02:47:fc:ff:88:ad:6d:e4:63:3a:27:95:4a:58:ea:
90:84:3e:2e:63:7f:f3:d9:e0:00:66:f9:29:ae:26:6a:90:6c:
f1:c2:b2:c1:a0:2c:b1:d3:29:91:68:9e:71:5d:e6:44:ce:0c:
85:ae:46:6b:a2:ed:88:41:cf:67:2b:46:ad:71:42:3b:0b:e8:
e7:98:6a:ad:42:4a:51:1c:3f:d7:f2:28:98:ac:4c:1a:71:84:
a0:67:1a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:09 2026 by rpki-client