
$ rpki-client -vvf rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
File: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft (raw, json)
Hash identifier: O5Ud1BRSHUBa4ijIpPmB3YOKRrndeKOxj9qTGd764Ks=
Subject key identifier: 7F:24:67:77:DA:F4:B7:CA:27:A3:EA:DF:97:A7:21:D3:0C:45:79:79
Authority key identifier: 73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76
Certificate issuer: /CN=A91316E5/serialNumber=73987ECCE77E44EB36651E098D33750FA864E676
Certificate serial: 021E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
Manifest number: 0218
Signing time: Sun 05 Jul 2026 03:26:44 +0000
Manifest this update: Sun 05 Jul 2026 03:26:43 +0000
Manifest next update: Sun 12 Jul 2026 03:26:43 +0000
Files and hashes: 1: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl (hash: Rgr6I8vIjXWCEAXThJWqB3vHyEUXUlnLxLHPVe43s4A=)
2: C1A8182646D011EE8BE5AE80C4F9AE02.roa (hash: GaiJN8sQVRxQhxF84N/8bkdFVJqBpd2e+8ULBvpRalM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl
rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 03:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91316E5, serialNumber=73987ECCE77E44EB36651E098D33750FA864E676
Validity
Not Before: Jul 5 03:26:43 2026 GMT
Not After : Jul 12 03:26:43 2026 GMT
Subject: CN=6a49cef3-e271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:2d:ef:9d:b5:33:5d:9a:97:6a:cc:92:be:
ea:0a:da:0b:9c:aa:f2:95:52:26:2d:d4:f1:2d:be:
83:a9:54:60:1e:71:12:4a:a2:c2:48:f0:db:7c:17:
2e:6a:1b:53:8f:8e:a4:be:6b:0e:32:a3:f1:34:78:
cc:bf:3c:07:b9:c0:94:d0:ad:25:98:88:17:f2:94:
6a:dd:db:33:6d:2f:f5:87:db:c1:17:08:e7:7e:5e:
1e:82:a4:d8:0e:bc:b1:a0:08:5f:6e:01:9e:94:71:
a9:44:8d:89:c9:e8:cf:71:14:0e:44:1f:53:88:09:
4f:09:fd:b5:80:a6:81:85:a7:bf:33:56:8f:c8:2f:
99:a1:cc:ff:91:61:4c:e2:d5:61:25:f5:33:2d:5b:
ac:a2:6d:2a:8f:f4:36:ab:08:50:59:82:86:9a:4e:
77:8d:52:6c:28:77:31:36:9e:73:d6:60:2e:d2:e7:
50:db:6f:26:0d:23:33:a5:f1:1a:d5:05:fb:a8:51:
93:63:ac:96:cc:b4:1e:e9:f9:c3:10:c1:1b:59:78:
b1:12:82:3e:f1:4a:94:41:fc:10:77:b1:e6:d7:52:
71:58:3c:f3:a9:09:90:94:19:30:65:11:12:f0:88:
01:f0:56:41:b1:7b:d9:a6:4e:98:41:cc:e1:ca:d4:
e0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:24:67:77:DA:F4:B7:CA:27:A3:EA:DF:97:A7:21:D3:0C:45:79:79
X509v3 Authority Key Identifier:
keyid:73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ee:f0:f9:5b:b0:d5:11:0d:45:cb:6f:06:ce:88:35:96:12:
bb:c2:c2:a3:a2:b4:3f:4b:c2:c5:cf:b2:30:c2:f5:91:04:74:
7f:5a:72:76:73:22:e3:9f:91:bc:8a:92:48:d0:a1:41:91:ea:
f8:37:34:3b:19:3f:61:b9:dd:fd:d3:54:a8:eb:a9:aa:c8:7c:
b7:ce:cf:24:4a:af:94:2e:13:cc:93:83:7b:02:50:a0:7a:7e:
d4:e1:8a:39:5f:8a:28:f7:73:09:6d:6f:cb:df:0c:e6:9a:ca:
71:b2:fc:f6:89:8e:4a:ad:be:c2:27:56:fb:a4:76:6b:ac:80:
3f:71:c9:c0:e3:34:97:a9:2b:35:d9:85:43:47:2f:c1:fd:51:
94:97:32:db:17:ec:f6:56:f7:e5:96:e2:2e:ed:86:f0:d8:b2:
7a:d5:e3:1e:95:16:a9:d8:a9:30:68:37:09:9a:a7:64:be:22:
a0:3d:4e:c8:ea:a7:88:b5:3b:bd:a2:df:dc:5e:a5:3e:11:8b:
5f:d8:b6:03:d4:58:99:6d:52:4a:7b:83:2d:86:69:8c:1e:ab:
00:1c:b9:3a:bc:14:03:77:74:08:5c:71:75:93:c0:b9:79:34:
c1:03:ec:e6:af:31:b6:2d:96:f8:53:cf:ea:8e:9c:ef:43:c0:
89:ef:49:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:47:16 2026 by rpki-client