
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
File: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft (raw, json)
Hash identifier: y9TgiWgKunB5WwecnI/tyB7PE5Fws78m5bAuGc6E2vg=
Subject key identifier: EB:BA:A8:3A:30:A5:02:F0:88:E4:44:9F:24:A9:D1:26:CF:31:42:CC
Authority key identifier: BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
Certificate issuer: /CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Certificate serial: 05E2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
Manifest number: 05D2
Signing time: Wed 22 Jul 2026 23:48:22 +0000
Manifest this update: Wed 22 Jul 2026 23:48:21 +0000
Manifest next update: Wed 29 Jul 2026 23:48:21 +0000
Files and hashes: 1: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl (hash: Ke6tMX5VTmlcEcEhS/anmT3j4vLPRQ05QzS4pBxKUL4=)
2: 9B741CFE0C3411EDB8619843C4F9AE02.roa (hash: NVoTvNqptu8+2EEc4xwQ1XFeD946dIqVcf+QNOuWx54=)
3: 37FE553E5CAB11F08FCD0029C4F9AE02.roa (hash: 7vsEdUjO68wSnI82MSqqLNl6M5rdXWQoFEtu17LQhaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1506 (0x5e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186B80, serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Validity
Not Before: Jul 22 23:48:21 2026 GMT
Not After : Jul 29 23:48:21 2026 GMT
Subject: CN=6a6156c6-665b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:90:4b:3d:86:8b:d7:e3:5c:2f:fe:a2:1d:94:
a7:63:39:8e:07:fc:ac:a3:bb:aa:cf:df:34:ce:e9:
12:55:ba:e1:c8:72:3a:92:39:82:e3:37:84:fa:09:
b2:c8:ae:e9:45:14:0f:cb:af:49:5b:b8:69:06:9c:
ef:76:2d:31:09:e7:8c:b8:72:a0:ed:6c:d5:f7:4e:
8e:7d:5d:5d:bb:9a:e8:8d:fd:7e:de:43:40:14:79:
40:94:c2:59:e6:73:6f:e0:af:ad:43:a7:18:d5:be:
ff:06:61:c9:8f:ee:e8:29:0c:d4:f2:bc:91:0b:98:
d4:56:eb:68:7c:89:41:c8:f3:08:85:f5:c4:1a:e3:
ed:0f:43:3b:1e:15:8c:e2:75:45:0d:66:f5:59:40:
08:18:d9:41:0f:86:7c:24:61:3e:1a:4d:78:40:54:
63:f5:49:a9:97:68:7d:66:10:95:c8:3c:d2:cc:e5:
74:e3:c9:2c:c6:42:ad:2b:1f:36:50:f6:49:74:67:
ca:ff:c6:b5:93:e9:ee:e8:f8:69:c0:1e:20:21:d5:
73:4c:8b:b5:31:4a:ae:ac:e3:49:47:19:db:a4:6c:
d2:04:85:0d:b0:31:4e:da:29:f6:8b:4a:9a:e9:20:
bf:68:4a:ad:4b:b5:44:d0:84:ce:ad:71:e0:e4:86:
65:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BA:A8:3A:30:A5:02:F0:88:E4:44:9F:24:A9:D1:26:CF:31:42:CC
X509v3 Authority Key Identifier:
keyid:BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d3:b6:72:7f:29:1f:62:49:ea:5b:76:51:4f:7f:51:01:95:
d0:22:74:c8:a4:82:8d:3c:b5:31:58:51:7b:a1:d8:c0:2a:bb:
ee:89:cc:d4:df:94:f6:61:27:5c:02:3e:b4:ee:9b:45:91:e1:
62:21:78:88:53:23:6a:91:10:ca:bb:bc:8e:02:51:cc:37:ea:
07:18:c7:a6:98:0c:3f:af:58:7f:e0:34:68:3c:f2:9e:28:25:
9a:87:6b:33:8c:e8:8c:93:94:d1:99:fb:d9:d5:61:b9:31:f7:
81:b5:a1:ad:ab:1e:13:ef:a3:28:a3:40:18:95:ce:ad:16:63:
7d:89:02:ed:12:24:6e:b7:56:6c:d4:4a:56:f2:2f:11:23:82:
07:7d:b8:41:6c:64:98:a0:28:bb:ee:7b:df:f8:f3:ba:c6:89:
90:75:8a:27:e7:79:8f:7a:31:02:00:ce:de:68:30:04:62:f4:
54:eb:4a:00:0d:2c:0a:09:ce:c2:53:76:13:97:12:5e:11:35:
39:f5:f3:cb:fa:5c:7b:0f:ce:49:53:7f:13:cc:23:8b:0a:b4:
ad:23:9c:4b:e7:d1:d5:f2:6b:f3:4f:1d:2f:59:d7:00:15:2e:
e2:ac:1a:de:94:c4:98:15:2c:4f:7c:d8:31:b3:5c:2c:85:72:
68:be:81:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZCODAxMTAvBgNVBAUTKEJEMUU3RTY0MUZGRDk2RDU3NDYxNTVGQzQyMUIxN0RE
QzFBQTc3NjIwHhcNMjYwNzIyMjM0ODIxWhcNMjYwNzI5MjM0ODIxWjAYMRYwFAYD
VQQDEw02YTYxNTZjNi02NjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA45BLPYaL1+NcL/6iHZSnYzmOB/yso7uqz980zukSVbrhyHI6kjmC4zeE+gmy
yK7pRRQPy69JW7hpBpzvdi0xCeeMuHKg7WzV906OfV1du5rojf1+3kNAFHlAlMJZ
5nNv4K+tQ6cY1b7/BmHJj+7oKQzU8ryRC5jUVutofIlByPMIhfXEGuPtD0M7HhWM
4nVFDWb1WUAIGNlBD4Z8JGE+Gk14QFRj9Umpl2h9ZhCVyDzSzOV048ksxkKtKx82
UPZJdGfK/8a1k+nu6PhpwB4gIdVzTIu1MUqurONJRxnbpGzSBIUNsDFO2in2i0qa
6SC/aEqtS7VE0ITOrXHg5IZlXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOu6qDow
pQLwiOREnySp0SbPMULMMB8GA1UdIwQYMBaAFL0efmQf/ZbVdGFV/EIbF93Bqndi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkI4MC9BRTZBQTFCNDEy
M0IxMUVDOEExMzVGNDJDNEY5QUUwMi92UjUtWkJfOWx0VjBZVlg4UWhzWDNjR3Fk
MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZSNS1aQl85bHRWMFlWWDhRaHNYM2NHcWQySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NkI4MC9BRTZBQTFCNDEyM0IxMUVDOEExMzVGNDJDNEY5QUUwMi92UjUtWkJfOWx0
VjBZVlg4UWhzWDNjR3FkMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmtO2cn8pH2JJ6lt2UU9/UQGV0CJ0yKSCjTy1MVhRe6HYwCq77onM1N+U9mEn
XAI+tO6bRZHhYiF4iFMjapEQyru8jgJRzDfqBxjHppgMP69Yf+A0aDzyniglmodr
M4zojJOU0Zn72dVhuTH3gbWhraseE++jKKNAGJXOrRZjfYkC7RIkbrdWbNRKVvIv
ESOCB324QWxkmKAou+573/jzusaJkHWKJ+d5j3oxAgDO3mgwBGL0VOtKAA0sCgnO
wlN2E5cSXhE1OfXzy/pcew/OSVN/E8wjiwq0rSOcS+fR1fJr808dL1nXABUu4qwa
3pTEmBUsT3zYMbNcLIVyaL6BTQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:44 2026 by rpki-client