
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft
File: d5yg0JVwhQFufQNaTsuieBq3xQ8.mft (raw, json)
Hash identifier: DS57u+/ep/MuG2WM2jwn+p9uBohD+v1OumHGn+Fgj8k=
Subject key identifier: C5:60:53:E6:83:F1:1C:36:1A:84:EF:79:BC:4B:89:5F:BE:58:46:E4
Authority key identifier: 77:9C:A0:D0:95:70:85:01:6E:7D:03:5A:4E:CB:A2:78:1A:B7:C5:0F
Certificate issuer: /CN=A9137157/serialNumber=779CA0D0957085016E7D035A4ECBA2781AB7C50F
Certificate serial: 73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft
Manifest number: 6C
Signing time: Thu 03 Sep 2026 08:14:41 +0000
Manifest this update: Thu 03 Sep 2026 08:14:40 +0000
Manifest next update: Thu 10 Sep 2026 08:14:40 +0000
Files and hashes: 1: d5yg0JVwhQFufQNaTsuieBq3xQ8.crl (hash: zYg/Q80Oy19XUNsonwl+qNe5M5bPR/viq8ImzlbLvQY=)
2: 55C25D260BD911F1B73B6397303D8C67.roa (hash: rdz1gfwbX0jq2TD9cfgavgz+Dublp64Dbpc4uLKUPL8=)
3: 9AAB80560BD511F1920C67C12E3D8C67.roa (hash: 7MrcBRtrM3i0RslsHky1Cdr7mamN7Fo1uDMcDW+7UiA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.crl
rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137157, serialNumber=779CA0D0957085016E7D035A4ECBA2781AB7C50F
Validity
Not Before: Sep 3 08:14:40 2026 GMT
Not After : Sep 10 08:14:40 2026 GMT
Subject: CN=6a992c71-65f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:c1:c6:fe:79:12:c1:2c:f6:bb:79:bc:f0:
ad:11:87:db:dd:8c:c4:1e:5e:18:13:59:4f:43:88:
4b:04:86:95:e4:28:5e:d4:49:2c:a4:58:7c:b4:94:
c6:fb:8b:12:3f:7e:e1:9a:58:78:0d:ee:82:4d:ac:
79:8d:9f:aa:0b:26:26:66:b7:90:58:61:5c:eb:1c:
f3:63:f0:ae:a1:f9:d9:48:3a:7e:a6:b6:e5:c3:ac:
d3:3d:b2:a9:e4:68:af:bd:42:3c:f6:cf:34:d7:cf:
53:f3:9c:3b:24:0c:56:bb:d8:ec:c7:02:6e:f2:98:
a3:27:e7:84:37:3c:08:05:dd:2f:72:27:a4:f4:94:
a4:65:8e:3f:93:30:ed:34:24:dd:f3:42:26:f8:68:
9d:db:f5:7b:a1:39:61:8f:8a:ca:ae:23:1b:c9:e8:
1e:03:e4:39:b9:b4:da:30:7e:9f:bf:1e:cd:d0:ae:
c5:62:50:8c:de:7c:a1:4d:40:0c:c5:70:0c:3c:e5:
cf:4f:15:c4:3d:a6:ae:46:25:24:49:c2:e4:05:e3:
da:b1:e7:42:d3:2b:80:3b:56:c8:b5:72:02:c2:7d:
dd:da:83:0e:dc:26:03:62:0b:fd:77:c0:74:c2:5b:
28:54:5e:a2:cf:4a:af:93:2e:b2:3a:34:43:81:17:
15:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:60:53:E6:83:F1:1C:36:1A:84:EF:79:BC:4B:89:5F:BE:58:46:E4
X509v3 Authority Key Identifier:
keyid:77:9C:A0:D0:95:70:85:01:6E:7D:03:5A:4E:CB:A2:78:1A:B7:C5:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:ae:ce:3c:2c:31:84:d3:75:91:e9:93:c1:82:3d:4f:05:ab:
dc:bb:18:df:6a:9f:6f:6e:2e:9f:08:02:49:1c:48:75:34:18:
a6:06:80:fd:67:3d:5f:73:8c:c0:41:2e:dd:b9:dc:c0:bf:39:
02:f1:2f:cd:d6:aa:6b:49:b6:b9:8e:b9:c7:ec:4f:ba:f1:8e:
0b:68:f7:03:ea:be:a9:40:51:a0:a1:73:7c:03:a9:e0:72:25:
b5:11:67:fa:a9:b5:17:bb:dd:05:46:85:bd:e0:f1:77:da:0c:
2e:c1:b4:97:c3:67:69:3f:47:c1:a0:0f:82:0d:a9:86:23:47:
62:6e:a7:8f:07:0f:76:90:ee:2f:82:b2:a4:47:61:38:6f:1e:
e3:ba:36:ae:0e:b5:d6:38:a8:de:f5:55:c2:dc:9c:42:14:1f:
eb:7a:14:c5:f8:8d:17:90:15:03:9e:2c:a6:f3:e0:53:6b:fe:
68:57:39:97:b2:2c:ba:ff:f9:99:78:74:ac:c7:78:b5:28:43:
dd:25:a6:b3:3d:09:1f:bf:97:ed:f5:56:05:cb:09:c2:f0:63:
0c:0d:d6:22:83:a5:7b:2d:a1:ac:03:bd:fd:49:fe:3c:a3:df:
9a:7f:32:b4:64:c9:5e:fc:28:0d:25:d6:20:e4:37:b8:a8:48:
6a:f6:55:98
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NzE1NzExMC8GA1UEBRMoNzc5Q0EwRDA5NTcwODUwMTZFN0QwMzVBNEVDQkEyNzgx
QUI3QzUwRjAeFw0yNjA5MDMwODE0NDBaFw0yNjA5MTAwODE0NDBaMBgxFjAUBgNV
BAMTDTZhOTkyYzcxLTY1ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDEpcHG/nkSwSz2u3m88K0Rh9vdjMQeXhgTWU9DiEsEhpXkKF7USSykWHy0lMb7
ixI/fuGaWHgN7oJNrHmNn6oLJiZmt5BYYVzrHPNj8K6h+dlIOn6mtuXDrNM9sqnk
aK+9Qjz2zzTXz1PznDskDFa72OzHAm7ymKMn54Q3PAgF3S9yJ6T0lKRljj+TMO00
JN3zQib4aJ3b9XuhOWGPisquIxvJ6B4D5Dm5tNowfp+/Hs3QrsViUIzefKFNQAzF
cAw85c9PFcQ9pq5GJSRJwuQF49qx50LTK4A7Vsi1cgLCfd3agw7cJgNiC/13wHTC
WyhUXqLPSq+TLrI6NEOBFxVVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxWBT5oPx
HDYahO95vEuJX75YRuQwHwYDVR0jBBgwFoAUd5yg0JVwhQFufQNaTsuieBq3xQ8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3MTU3LzY1Qjg4QjlDMEJD
RjExRjFCQkQxRkVEQTJDM0Q4QzY3L2Q1eWcwSlZ3aFFGdWZRTmFUc3VpZUJxM3hR
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZDV5ZzBKVndoUUZ1ZlFOYVRzdWllQnEzeFE4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3
MTU3LzY1Qjg4QjlDMEJDRjExRjFCQkQxRkVEQTJDM0Q4QzY3L2Q1eWcwSlZ3aFFG
dWZRTmFUc3VpZUJxM3hROC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA3rs48LDGE03WR6ZPBgj1PBavcuxjfap9vbi6fCAJJHEh1NBimBoD9Zz1fc4zA
QS7dudzAvzkC8S/N1qprSba5jrnH7E+68Y4LaPcD6r6pQFGgoXN8A6ngciW1EWf6
qbUXu90FRoW94PF32gwuwbSXw2dpP0fBoA+CDamGI0dibqePBw92kO4vgrKkR2E4
bx7jujauDrXWOKje9VXC3JxCFB/rehTF+I0XkBUDniym8+BTa/5oVzmXsiy6//mZ
eHSsx3i1KEPdJaazPQkfv5ft9VYFywnC8GMMDdYig6V7LaGsA739Sf48o9+afzK0
ZMle/CgNJdYg5De4qEhq9lWY
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:25:04 2026 by rpki-client