
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft
File: 5cOmhsg97m0zv-xUHqy0pKCJknk.mft (raw, json)
Hash identifier: bNLTv8TfLj2A0SBDIDSpPT4FrwDpcc8LECcSbDSXt7s=
Subject key identifier: 6E:7E:CC:57:20:77:41:43:B5:C4:0B:2E:84:C5:6C:A4:EC:29:DA:3D
Authority key identifier: E5:C3:A6:86:C8:3D:EE:6D:33:BF:EC:54:1E:AC:B4:A4:A0:89:92:79
Certificate issuer: /CN=A9153AA6/serialNumber=E5C3A686C83DEE6D33BFEC541EACB4A4A0899279
Certificate serial: 17BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft
Manifest number: 17AE
Signing time: Tue 18 Aug 2026 16:43:13 +0000
Manifest this update: Tue 18 Aug 2026 16:43:13 +0000
Manifest next update: Tue 25 Aug 2026 16:43:13 +0000
Files and hashes: 1: 5cOmhsg97m0zv-xUHqy0pKCJknk.crl (hash: WPLy+ldw7oJ196q1dNWmJEU76HlYhWL1KKActjguvJs=)
2: 99C6F94CF52511E7948D5A0BC4F9AE02.roa (hash: NaLzQS9c7fL8mInokKmqBOO4x/Gb8moo1XbJ4Dbrrvo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.crl
rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 16:43:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6075 (0x17bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153AA6, serialNumber=E5C3A686C83DEE6D33BFEC541EACB4A4A0899279
Validity
Not Before: Aug 18 16:43:13 2026 GMT
Not After : Aug 25 16:43:13 2026 GMT
Subject: CN=6a848ba1-583d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7a:75:68:43:45:ac:6f:b1:0f:6d:87:69:14:
ff:bf:7a:2f:a5:ee:80:6d:41:52:28:f1:31:b3:7a:
7c:4a:c1:fe:ac:c6:4c:63:8b:75:ca:a7:5a:15:eb:
5a:f1:b0:35:0e:63:6b:92:6e:bd:c4:c4:53:bb:df:
2e:99:f2:df:73:cc:eb:5b:c4:b4:0f:2d:7e:71:8b:
81:25:7f:9a:0e:bb:a7:78:06:ed:38:7e:e8:db:15:
db:da:8e:99:24:06:88:b4:13:af:66:bc:97:73:54:
fe:88:75:9a:12:3f:8e:9a:ab:c8:07:5f:e6:d7:16:
a4:a9:44:85:ff:26:a2:d1:f9:73:ac:94:12:87:e5:
de:4f:e9:46:9b:6a:4e:6f:61:cf:03:e8:1b:6b:fe:
0c:22:9f:f9:47:8a:20:7f:ab:9d:4f:fd:e0:21:0c:
ab:26:bb:3d:bf:eb:eb:b1:20:6b:cf:a6:bf:be:3b:
3d:69:c9:0e:ac:f9:56:54:18:6b:0a:8b:f3:b6:32:
54:82:dc:73:b0:0a:4b:e9:b2:e0:cb:9e:7b:57:6d:
e4:a9:ce:25:49:78:4e:4d:ca:71:b4:34:3b:a3:d4:
31:68:b8:7d:e5:2f:3d:f1:de:68:49:24:55:70:ab:
5c:a6:a1:22:41:dd:05:35:1d:37:6a:f9:d8:e0:ba:
7f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7E:CC:57:20:77:41:43:B5:C4:0B:2E:84:C5:6C:A4:EC:29:DA:3D
X509v3 Authority Key Identifier:
keyid:E5:C3:A6:86:C8:3D:EE:6D:33:BF:EC:54:1E:AC:B4:A4:A0:89:92:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:42:df:6b:ce:0f:95:c8:07:8e:3f:7b:2d:ca:8f:4a:50:66:
03:00:e4:12:8e:73:09:b8:c4:03:64:5c:1d:b4:54:4a:80:cb:
39:b3:df:60:59:04:cc:07:39:18:9c:65:9a:cc:74:7e:40:07:
6b:93:0f:d4:3d:bd:c8:c7:c2:c1:c0:d2:d6:1e:96:a2:81:6c:
ae:d3:a3:25:97:b3:b8:b8:34:e1:c4:12:43:1a:5a:42:79:6e:
f4:5b:8d:2d:28:aa:7c:bb:5c:99:c1:1d:05:50:a0:fb:06:dd:
e3:d3:96:01:d1:93:b1:4b:c0:7a:f5:c8:b8:b3:42:c5:d1:2c:
fe:3c:83:47:f1:ef:e9:42:cd:ad:7b:15:67:9a:3c:52:94:f1:
88:41:9e:bf:e2:e6:32:67:72:2b:f4:72:4b:db:db:87:9c:bf:
9f:7a:47:8d:87:67:b5:c2:85:d9:77:e8:98:e7:34:16:d4:bb:
00:28:b8:3c:25:11:91:8b:04:a1:27:f7:1d:05:44:d3:f0:32:
87:a4:f5:6c:de:bb:73:a7:74:47:a5:25:fc:dc:3f:64:9a:3f:
2e:00:4a:44:a2:b9:e9:85:a4:01:bb:49:7b:bd:ee:30:36:04:
81:72:65:85:09:a3:0f:f1:ce:b0:d6:35:67:87:2e:c7:fc:e3:
31:7e:b8:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICF7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTNBQTYxMTAvBgNVBAUTKEU1QzNBNjg2QzgzREVFNkQzM0JGRUM1NDFFQUNCNEE0
QTA4OTkyNzkwHhcNMjYwODE4MTY0MzEzWhcNMjYwODI1MTY0MzEzWjAYMRYwFAYD
VQQDEw02YTg0OGJhMS01ODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlnp1aENFrG+xD22HaRT/v3ovpe6AbUFSKPExs3p8SsH+rMZMY4t1yqdaFeta
8bA1DmNrkm69xMRTu98umfLfc8zrW8S0Dy1+cYuBJX+aDruneAbtOH7o2xXb2o6Z
JAaItBOvZryXc1T+iHWaEj+OmqvIB1/m1xakqUSF/yai0flzrJQSh+XeT+lGm2pO
b2HPA+gba/4MIp/5R4ogf6udT/3gIQyrJrs9v+vrsSBrz6a/vjs9ackOrPlWVBhr
CovztjJUgtxzsApL6bLgy557V23kqc4lSXhOTcpxtDQ7o9QxaLh95S898d5oSSRV
cKtcpqEiQd0FNR03avnY4Lp/gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG5+zFcg
d0FDtcQLLoTFbKTsKdo9MB8GA1UdIwQYMBaAFOXDpobIPe5tM7/sVB6stKSgiZJ5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FBNi85QzNEODdFNkY1
MjQxMUU3OTY0NEIwMDlDNEY5QUUwMi81Y09taHNnOTdtMHp2LXhVSHF5MHBLQ0pr
bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVjT21oc2c5N20wenYteFVIcXkwcEtDSmtuay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
M0FBNi85QzNEODdFNkY1MjQxMUU3OTY0NEIwMDlDNEY5QUUwMi81Y09taHNnOTdt
MHp2LXhVSHF5MHBLQ0prbmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnULfa84PlcgHjj97LcqPSlBmAwDkEo5zCbjEA2RcHbRUSoDLObPfYFkEzAc5
GJxlmsx0fkAHa5MP1D29yMfCwcDS1h6WooFsrtOjJZezuLg04cQSQxpaQnlu9FuN
LSiqfLtcmcEdBVCg+wbd49OWAdGTsUvAevXIuLNCxdEs/jyDR/Hv6ULNrXsVZ5o8
UpTxiEGev+LmMmdyK/RyS9vbh5y/n3pHjYdntcKF2XfomOc0FtS7ACi4PCURkYsE
oSf3HQVE0/Ayh6T1bN67c6d0R6Ul/Nw/ZJo/LgBKRKK56YWkAbtJe73uMDYEgXJl
hQmjD/HOsNY1Z4cux/zjMX64wQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:50 2026 by rpki-client