
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
File: C5sr_BxrLAlndq91fTrxRUfkPnI.mft (raw, json)
Hash identifier: l6R3bYWBwE+JEZQDxkpKh9b7lxdn/S/DVLQgaziEclM=
Subject key identifier: 41:99:E9:35:8A:64:C1:BB:23:6D:47:B4:81:46:F7:53:77:F3:A7:39
Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
Certificate issuer: /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Certificate serial: 12AA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
Manifest number: 1293
Signing time: Wed 22 Jul 2026 17:11:51 +0000
Manifest this update: Wed 22 Jul 2026 17:11:51 +0000
Manifest next update: Wed 29 Jul 2026 17:11:51 +0000
Files and hashes: 1: C5sr_BxrLAlndq91fTrxRUfkPnI.crl (hash: P/tGK3TCNi1y360lIqY4vPNUHXQWGCAZiUJFHHIa2Uc=)
2: 60FCDED2F48F11E89651151FC4F9AE02.roa (hash: oM2ZfoKfiRMESikDKbO4c1ZDLXIvdz0FiP6xcgKr7Rg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl
rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4778 (0x12aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F646, serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Validity
Not Before: Jul 22 17:11:51 2026 GMT
Not After : Jul 29 17:11:51 2026 GMT
Subject: CN=6a60f9d7-4fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:b8:06:75:83:79:1c:eb:56:5b:bf:0f:04:
c0:2f:e9:26:70:d9:89:f4:04:a1:18:53:59:32:4c:
99:05:75:fe:86:ce:a2:9e:8a:d1:4e:cd:3a:4b:70:
64:ff:a2:05:70:72:20:e8:62:70:7b:c6:d2:95:b2:
8e:97:5d:bd:3a:41:8b:c0:44:8c:4d:89:a0:bc:2d:
89:01:a5:b0:4f:20:80:21:24:52:6e:f7:d9:46:d9:
8a:3d:63:f3:d7:12:89:06:f6:67:9c:c9:25:19:52:
1b:9b:ec:ad:28:71:a8:59:0b:50:95:84:3c:9d:48:
bb:10:0c:c0:05:48:c0:1b:21:e4:de:a1:31:44:8a:
6b:49:63:3a:46:15:4a:39:f7:64:fa:8b:bb:d1:8a:
6f:d1:7e:59:fe:c8:7d:12:80:bd:cd:43:d7:0e:a5:
8a:8f:7c:55:c8:e3:a1:6a:21:d8:e2:0d:42:6d:eb:
06:59:68:6c:0e:b2:d8:34:23:3e:ff:e2:ad:d0:55:
33:57:cc:a7:63:64:12:a8:34:96:d7:0a:02:1f:09:
77:8a:0c:a1:5f:af:73:3d:03:cc:0e:7e:e0:1f:e7:
7d:7a:8d:b4:3a:aa:72:b5:64:64:5c:b1:b0:5e:3d:
59:ee:48:fb:cd:00:36:f2:c1:7a:48:ef:6d:1f:12:
7f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:99:E9:35:8A:64:C1:BB:23:6D:47:B4:81:46:F7:53:77:F3:A7:39
X509v3 Authority Key Identifier:
keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:31:51:bd:df:c7:2c:47:cd:6c:33:69:4c:62:e5:b2:d7:c6:
a9:99:7c:62:61:84:2d:93:90:bd:ce:02:db:70:97:ac:68:b6:
ca:d7:f2:3b:9c:7e:04:07:9e:3b:6b:3d:ec:ab:96:d3:d5:ec:
17:75:dc:d1:d5:ac:fd:4b:bc:b8:6e:77:c0:8a:ec:7d:93:31:
ce:60:a9:74:af:9a:0e:05:21:04:41:a7:4c:9e:b7:a2:04:9f:
63:0c:a4:57:e8:84:ad:57:ba:70:04:96:7d:09:36:2b:9a:b9:
96:f8:93:d3:0b:a1:b2:8b:2a:66:38:61:89:b3:05:ca:8a:26:
77:e7:58:4e:e6:54:15:95:b8:e2:cd:6f:b3:92:eb:15:16:77:
4b:13:9e:16:0b:42:c9:59:4d:be:7a:24:61:57:ff:88:31:95:
58:f1:63:d5:7e:af:e1:20:b3:72:aa:6e:20:cc:b7:d1:70:5d:
5d:1d:1a:c3:c0:6f:ce:6c:7b:06:24:d1:8f:6b:f8:df:b9:2c:
51:a5:89:02:ab:30:df:16:99:8a:00:bb:60:f0:d4:50:e8:63:
d8:34:b7:d7:34:08:ad:2c:23:1c:2f:ea:05:3d:8e:8c:0a:c7:
cf:6c:dd:fa:7f:79:f5:8c:78:63:d5:34:e1:e2:c7:22:c0:0a:
dc:10:63:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:44:55 2026 by rpki-client