
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
File: V5NDbSKpagYTaFEgO7clmE1wsBc.mft (raw, json)
Hash identifier: qKOrAacSmYOqctxbnUEXw/lAra4Aen0Wj9qiSP2RCoY=
Subject key identifier: F7:2E:DD:AC:DC:94:AF:D4:D3:6B:AF:77:9E:1A:1A:8B:E7:AC:A3:64
Authority key identifier: 57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17
Certificate issuer: /CN=A9159DCD/serialNumber=5793436D22A96A06136851203BB725984D70B017
Certificate serial: 0218
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
Manifest number: 0212
Signing time: Thu 21 May 2026 02:57:54 +0000
Manifest this update: Thu 21 May 2026 02:57:54 +0000
Manifest next update: Thu 28 May 2026 02:57:54 +0000
Files and hashes: 1: V5NDbSKpagYTaFEgO7clmE1wsBc.crl (hash: 5egFVxgxda43iubUJtY4QmCARzAeit627jnI3KObZuk=)
2: 29D600062C3311EEBFF69B6CC4F9AE02.roa (hash: WAXFjuNGhyF26G8uyhpIZtaDvgXLuDPly79bzyrgzCI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl
rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:57:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 536 (0x218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159DCD, serialNumber=5793436D22A96A06136851203BB725984D70B017
Validity
Not Before: May 21 02:57:54 2026 GMT
Not After : May 28 02:57:54 2026 GMT
Subject: CN=6a0e74b2-1e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:21:60:9d:47:77:a8:54:88:ab:18:e0:8f:
54:8a:94:00:60:83:b9:e3:57:e2:dd:d4:da:69:b9:
6e:df:4c:f8:41:c2:68:e7:17:8b:0e:ae:a3:02:fb:
09:e3:c9:12:aa:e9:1f:9b:3d:05:20:e2:38:55:3b:
92:4c:bc:42:0f:c1:64:d9:d1:98:8d:c3:9e:f5:af:
ae:cd:61:95:ff:b8:d9:aa:ea:9f:5c:ab:77:80:f6:
92:8f:6d:e0:8e:e0:22:e9:31:45:bc:63:4b:1f:91:
e9:f4:64:84:f4:52:ee:33:22:78:8d:8b:ea:42:eb:
ab:32:36:00:83:45:d6:f3:9e:b3:23:5f:94:ce:63:
42:6f:aa:1c:85:43:f0:a4:2f:c9:54:98:dd:ad:3b:
b7:16:7e:25:4c:83:92:02:5d:93:df:b2:c4:a7:c7:
4b:1b:5a:78:62:93:2c:81:59:45:e2:f1:b5:d3:9c:
a4:a0:0d:56:ce:dd:02:35:c5:de:16:b3:3a:a3:40:
24:65:64:92:24:32:30:83:ee:ec:30:8e:dc:08:89:
98:ca:39:05:53:23:8b:47:94:26:27:ac:90:92:1e:
4a:dc:ee:7c:51:47:b9:30:fd:cb:50:4b:2b:ae:76:
91:41:1a:87:6f:56:ac:5c:d0:1d:45:04:32:52:dd:
3a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2E:DD:AC:DC:94:AF:D4:D3:6B:AF:77:9E:1A:1A:8B:E7:AC:A3:64
X509v3 Authority Key Identifier:
keyid:57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:82:51:a5:87:c1:f1:9a:c0:e2:b5:0e:0a:f1:63:ec:46:3d:
40:ce:b2:45:96:ec:d6:ed:c6:59:cf:28:81:78:d0:1e:95:ee:
d2:07:40:36:d6:24:53:50:44:5c:d9:e7:f4:ed:cd:c3:f5:cc:
ea:6b:82:e2:13:ef:d4:b4:30:46:1d:30:31:3a:46:a3:dd:25:
c1:7b:c8:e7:9a:56:92:12:c4:e3:d7:d3:9c:0b:fc:b9:2e:29:
c8:d4:6c:17:26:75:5d:c5:56:70:60:bd:9f:f0:da:37:b6:21:
fe:2d:ea:07:55:1e:71:8c:85:3d:03:76:bf:60:4e:e0:b9:41:
aa:af:23:3e:a9:4f:89:22:b7:8b:53:95:ee:ec:89:07:a3:cc:
e3:fb:db:a3:79:56:d3:e1:0e:30:b9:a4:58:1d:bf:85:c2:36:
0f:f4:b3:11:96:cb:fc:0e:d2:d7:a6:54:0b:27:50:61:40:7f:
c5:3a:ee:3e:e2:6f:e8:2e:35:56:29:c9:ab:d4:67:62:88:99:
54:c8:dc:92:f9:45:0f:05:df:18:89:f3:32:09:ff:0f:d2:48:
45:1e:e1:e8:bc:8f:22:8e:17:0e:4c:83:f7:bb:59:58:2e:e2:
28:b9:21:86:bf:2b:e8:7a:f3:3b:a1:df:ef:36:a8:2c:e9:96:
84:de:05:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:52:06 2026 by rpki-client