
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
File: 5S3osZGTOKPiVWZOiASKVpihINA.mft (raw, json)
Hash identifier: pG55WShlj39dc3BElr5bdUjYdbrY/FYCAxCtkZ53ssA=
Subject key identifier: E5:29:08:5B:48:26:B0:18:F0:DF:84:79:D2:D6:9D:0E:71:F3:CF:BA
Authority key identifier: E5:2D:E8:B1:91:93:38:A3:E2:55:66:4E:88:04:8A:56:98:A1:20:D0
Certificate issuer: /CN=A9160701/serialNumber=E52DE8B1919338A3E255664E88048A5698A120D0
Certificate serial: 0C43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
Manifest number: 0C36
Signing time: Mon 22 Jun 2026 18:45:04 +0000
Manifest this update: Mon 22 Jun 2026 18:45:04 +0000
Manifest next update: Mon 29 Jun 2026 18:45:04 +0000
Files and hashes: 1: 5S3osZGTOKPiVWZOiASKVpihINA.crl (hash: 3o+OzgGUIoJwdHx+TZdf6o7Y3COcfUx2PaXf9LOlMME=)
2: 6DCC06C231BC11EA9AACCA4BC4F9AE02.roa (hash: NDA9/ZIdOnZog2sK2a7R7CTd4jfshQqjGD+nO4awG3w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.crl
rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 18:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3139 (0xc43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160701, serialNumber=E52DE8B1919338A3E255664E88048A5698A120D0
Validity
Not Before: Jun 22 18:45:04 2026 GMT
Not After : Jun 29 18:45:04 2026 GMT
Subject: CN=6a3982b0-8ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d7:d2:58:21:80:8e:6a:37:aa:63:37:5f:16:
36:be:e8:12:0c:9d:af:fd:f1:0e:d8:40:df:84:85:
e9:11:47:94:b6:f0:8b:89:7a:0b:61:61:00:5a:12:
6e:09:d9:ab:2e:11:4d:e5:f8:06:3c:c2:c3:eb:a4:
e8:f0:0c:4a:87:ee:8d:f6:dd:25:78:b9:7e:6c:d7:
d6:0a:a9:55:a8:5c:a5:fe:32:2d:a1:4d:2a:8c:aa:
ee:b0:93:46:62:37:25:ba:fa:ab:cb:cb:ed:56:c9:
44:c6:22:a6:a2:e6:b9:19:1f:ce:f8:18:b4:73:1d:
36:32:05:2a:99:d9:89:f6:56:85:49:4e:30:d9:17:
34:cf:dc:87:e3:72:aa:2f:09:65:7a:02:c1:5f:09:
69:63:9a:d8:3c:c9:77:1d:8b:49:73:f2:10:7c:9c:
d3:58:40:ff:07:52:96:96:90:e7:0d:61:03:85:1d:
ee:30:7e:3e:36:d5:aa:28:94:49:19:ad:7f:3c:38:
4c:d6:f8:f4:9d:ac:6a:80:3b:81:48:03:75:47:b6:
15:d1:ec:6f:86:c2:09:63:63:57:ba:20:60:76:87:
4c:8b:09:df:8e:03:24:59:c3:88:dc:e9:7a:48:46:
d0:d2:ce:93:5b:9f:a0:eb:7d:50:9d:e7:58:be:bc:
da:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:29:08:5B:48:26:B0:18:F0:DF:84:79:D2:D6:9D:0E:71:F3:CF:BA
X509v3 Authority Key Identifier:
keyid:E5:2D:E8:B1:91:93:38:A3:E2:55:66:4E:88:04:8A:56:98:A1:20:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:61:72:1d:c3:67:14:7f:bb:45:4f:ed:9b:c2:37:f7:b3:f0:
40:75:a5:ec:d1:a6:eb:4a:1f:02:6f:3b:66:de:b3:63:6c:be:
31:11:7b:c1:81:95:e4:fa:e7:37:19:df:24:20:32:98:af:63:
2f:c2:66:a7:b3:7a:e7:51:51:2a:09:8c:7a:e0:ea:17:ef:aa:
a2:85:96:ef:1b:aa:a5:0d:84:ac:69:bb:65:0a:93:d9:ee:8f:
54:3b:ec:20:0e:bc:15:12:b9:cc:27:e0:e8:93:50:87:36:72:
6d:5b:0f:66:00:e1:71:ab:9c:76:f3:ed:5e:71:69:04:4a:f3:
39:22:52:02:09:fb:13:d1:51:be:87:19:e3:e1:9f:85:25:ee:
17:fb:23:3b:c0:47:da:f2:e9:ce:50:c3:69:30:40:4f:65:44:
a7:6b:15:d9:d7:42:5e:9d:74:3e:5c:1d:a0:91:a7:64:ae:bf:
1c:e0:a4:a0:92:44:24:e3:fb:d4:38:87:e5:89:bd:a7:05:c6:
38:ca:23:3c:91:7f:18:6e:6f:c9:ec:72:4d:fa:e8:6a:02:2f:
92:c1:e1:88:66:e6:64:73:40:4d:24:39:df:0e:73:ae:c4:2e:
c9:f4:17:24:17:69:9d:54:f9:f7:b1:9f:9d:f5:0c:b2:ce:47:
56:d1:4c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:16 2026 by rpki-client