
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft
File: P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft (raw, json)
Hash identifier: bIcvWd7EWEn5H0HhoT1ko9TjJf23wk2ZYnaHlskeXN4=
Subject key identifier: 1B:C3:33:B2:A7:F4:84:A5:34:1B:A5:8B:5E:B4:3E:D5:FB:A1:ED:7F
Authority key identifier: 3F:9F:C9:D9:42:19:8C:47:23:34:A3:7E:AD:3D:EA:B5:03:92:E8:2F
Certificate issuer: /CN=A9186753/serialNumber=3F9FC9D942198C472334A37EAD3DEAB50392E82F
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft
Manifest number: 0121
Signing time: Wed 23 Sep 2026 05:40:13 +0000
Manifest this update: Wed 23 Sep 2026 05:40:13 +0000
Manifest next update: Wed 30 Sep 2026 05:40:13 +0000
Files and hashes: 1: P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl (hash: 6sQa66XRPyZ9iKw7jvqaPHXk7RXWOjaiLq33mUqxbbg=)
2: 62BBFF4A046A11F081D54156C4F9AE02.roa (hash: RN8WupoNcOClyYuYNIwdHNJdvolRCPOBGKtwfS/HNdM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl
rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:40:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186753, serialNumber=3F9FC9D942198C472334A37EAD3DEAB50392E82F
Validity
Not Before: Sep 23 05:40:13 2026 GMT
Not After : Sep 30 05:40:13 2026 GMT
Subject: CN=6ab3663d-2090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:04:9a:fc:33:24:38:80:1a:da:29:34:4c:
51:5d:9c:fa:a4:aa:af:4f:b5:fc:1f:56:51:c3:8d:
8d:ee:0a:cc:f3:14:52:46:b6:55:df:0b:54:b4:90:
54:44:18:f9:b8:a7:ae:1c:41:01:dc:4d:53:94:88:
3f:d8:82:e1:b8:6f:ab:ae:4c:da:22:12:54:f2:25:
05:97:a2:b6:49:94:0c:f3:9f:67:27:14:64:e8:45:
b8:db:f9:01:c6:50:c4:e6:23:36:56:5d:2c:7f:3c:
f7:42:85:a4:75:67:56:da:13:c4:85:1b:b1:7b:3e:
f3:d3:ca:97:d9:6a:d7:36:a5:b8:f5:74:78:75:f4:
a2:65:f9:26:e6:58:0d:85:07:28:7d:82:8b:a7:ca:
5e:16:58:20:bd:30:a8:1b:4b:b3:0f:30:a4:45:f9:
f9:ad:32:cf:39:68:1c:d9:0c:e7:37:40:05:ee:39:
d2:e8:f3:b9:11:1c:6c:49:83:f8:47:c4:b0:3c:18:
0f:70:9f:0a:a8:5e:f3:09:da:f9:f0:8e:e0:2e:5f:
07:cd:a3:d1:0a:20:d3:b5:e6:37:9c:ad:89:05:18:
76:bd:41:fe:73:dd:62:bd:ef:38:29:08:45:d8:03:
dc:b8:76:e6:f9:17:d1:b1:ec:a5:ad:04:66:05:59:
be:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C3:33:B2:A7:F4:84:A5:34:1B:A5:8B:5E:B4:3E:D5:FB:A1:ED:7F
X509v3 Authority Key Identifier:
keyid:3F:9F:C9:D9:42:19:8C:47:23:34:A3:7E:AD:3D:EA:B5:03:92:E8:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:f4:17:c7:36:77:18:df:ef:3b:a9:00:c8:b8:65:27:a3:6c:
d8:b3:ad:d2:d5:38:e6:4d:95:09:8c:d3:0f:7f:98:15:d5:e6:
0a:01:cf:84:db:68:f7:ad:9e:ea:21:5d:5b:5c:50:3b:74:a4:
02:3f:87:c4:ba:0e:f2:56:5c:ab:df:74:5d:cc:1d:65:e4:84:
a6:7b:89:31:0a:47:85:d7:40:9b:65:c5:60:05:4d:69:74:ca:
47:1f:6a:5c:69:62:f2:30:0b:b4:50:9e:47:c2:22:be:43:20:
f9:54:ec:9e:fc:c3:55:67:60:09:cd:b9:49:35:34:d3:36:57:
03:53:b1:e7:83:78:6f:d5:c8:36:d9:e6:0b:45:64:57:75:5c:
24:e2:67:15:d6:fc:60:df:6f:21:06:8e:6c:17:6d:98:72:27:
24:59:47:5b:72:fe:25:41:49:f5:52:3d:c4:b7:c0:4c:69:2f:
4d:b0:ef:bc:36:d9:73:4c:6f:a3:f0:6a:02:8e:92:11:e3:f0:
d4:b8:7e:2a:79:fa:10:ae:67:91:7a:a1:da:d0:bb:21:1f:f1:
f9:d3:17:e0:57:2e:25:03:32:c9:df:76:50:db:71:4d:d0:6f:
3b:83:5b:df:d6:f2:27:de:ee:18:c6:2e:5b:e2:7e:c9:0f:3c:
91:48:a1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:06:54 2026 by rpki-client