
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
File: McT5Bk-J5WsZTriEkukCHBUt6z4.mft (raw, json)
Hash identifier: LDaiS5WeeNzbfyB26KypUasKM2+zJwniEnXf89zYdrY=
Subject key identifier: D9:41:F8:6A:DB:F1:D1:08:AD:03:05:DD:7E:7A:C3:DB:0F:A2:0B:54
Authority key identifier: 31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E
Certificate issuer: /CN=A9133E16/serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
Certificate serial: 09C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
Manifest number: 09B2
Signing time: Wed 20 May 2026 20:00:15 +0000
Manifest this update: Wed 20 May 2026 20:00:15 +0000
Manifest next update: Wed 27 May 2026 20:00:15 +0000
Files and hashes: 1: McT5Bk-J5WsZTriEkukCHBUt6z4.crl (hash: ZMLcgs+7U2pqvGejOUAGTdi0fcJT5hXv280b0HLUflE=)
2: DB4932CEC2B611EB9BF18A81C4F9AE02.roa (hash: Hj2gvQPptbIyBsk+GZQr8HEa82gNIwoOpKASxetT7F4=)
3: 900E2272349F11EDA1460419C4F9AE02.roa (hash: H91fXqxV7rY9zHcxYCuUe8A5mKb0ae920Vx4iWfH6XE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl
rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2500 (0x9c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133E16, serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
Validity
Not Before: May 20 20:00:15 2026 GMT
Not After : May 27 20:00:15 2026 GMT
Subject: CN=6a0e12cf-e0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:91:1b:85:94:ff:35:0a:00:3c:a2:86:67:
87:fb:ad:51:e5:97:ed:43:85:e4:8a:84:bb:2e:62:
ce:3b:8a:cc:42:ec:87:93:0d:ba:de:b2:08:ca:b4:
98:f0:04:e2:91:f7:9f:21:88:93:f6:28:c4:ee:00:
13:d9:6e:f0:47:62:2f:18:cf:6e:2c:50:7f:54:8c:
5b:99:10:9e:24:b5:69:98:0d:06:46:84:af:be:a6:
a6:36:88:97:dd:74:5a:da:84:e3:b9:f7:f5:9a:78:
6f:90:04:a0:e4:df:1d:45:f4:56:00:b1:0a:5f:d9:
9a:56:61:72:6e:dd:9f:3e:58:95:b1:6e:ab:69:12:
bd:8a:36:f4:ff:b6:02:fa:0c:9e:2b:51:ec:a7:0c:
56:85:4b:52:e1:00:77:55:cd:13:5f:57:0d:55:bf:
85:b7:02:0e:17:aa:63:13:42:8f:df:7d:94:01:a8:
14:88:44:73:5c:c8:84:82:83:13:ef:71:91:9a:67:
7b:f3:b8:60:73:aa:62:23:dd:d0:bf:7b:f4:f2:61:
e8:df:24:20:83:b0:33:8c:95:db:3f:b3:9b:4e:e2:
a9:c7:c1:fb:7b:21:f2:cf:61:45:89:55:5e:f5:5d:
3d:69:b6:83:c4:91:f2:63:4f:b5:e4:74:b4:1f:e3:
50:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:41:F8:6A:DB:F1:D1:08:AD:03:05:DD:7E:7A:C3:DB:0F:A2:0B:54
X509v3 Authority Key Identifier:
keyid:31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:b7:13:cc:64:92:ce:e4:5f:d2:ea:a8:94:32:21:11:f2:d4:
fb:67:d2:8d:b5:f0:a2:0b:23:09:58:e9:ec:33:e1:78:f1:cc:
0c:f7:ca:78:ed:ca:f9:f2:cf:dc:fb:2a:bd:ae:cb:90:77:f3:
90:2f:7f:c4:ed:29:1d:0e:86:df:14:6d:05:d7:0e:ee:e2:35:
7d:b2:07:fd:68:c1:af:4d:b6:01:91:0e:cb:63:4a:5d:22:6f:
d4:d6:8e:70:99:cf:2a:e9:72:10:f7:b5:da:86:63:83:c3:38:
a4:1d:89:8e:b9:67:d7:ee:c2:43:04:d4:88:fc:5f:de:d6:ce:
1b:2b:38:09:00:db:5a:ea:8c:21:f3:9f:e9:d1:b7:2b:d0:0c:
1d:66:ab:09:29:55:61:3d:f7:54:cc:6d:89:eb:4f:ab:c0:5f:
fb:95:da:5b:89:a0:e2:ff:17:e8:77:65:aa:d7:c0:7a:d6:d6:
41:55:2a:7c:be:05:b3:7c:81:3b:bf:52:ca:75:ce:39:4c:07:
c8:70:97:19:11:af:62:3d:ab:48:f9:09:4c:1e:47:25:47:8b:
73:86:31:8d:d2:64:a9:79:b2:47:29:6b:6e:e1:85:b5:00:95:
68:6b:a3:a8:74:5f:c2:86:04:08:3c:6f:52:5e:ce:15:74:15:
48:41:75:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:21 2026 by rpki-client