
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
File: 5iFGnNWlePlHq0frDs6Ik5uH6_s.mft (raw, json)
Hash identifier: 3fit3L6xUTzS7Iuq9XVW2NdrtEzNLzGYJxNJThGV/ow=
Subject key identifier: 0F:DE:86:D5:E4:34:00:7E:24:C7:0B:6B:E2:90:17:27:C9:79:2B:A0
Authority key identifier: E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB
Certificate issuer: /CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB
Certificate serial: 04BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
Manifest number: 048F
Signing time: Wed 07 Oct 2026 00:13:01 +0000
Manifest this update: Wed 07 Oct 2026 00:13:01 +0000
Manifest next update: Wed 14 Oct 2026 00:13:01 +0000
Files and hashes: 1: 5iFGnNWlePlHq0frDs6Ik5uH6_s.crl (hash: 2c4Zj/StNqy+iiprvTv1BbWnbQRCUydZUkv48/2ut1Q=)
2: 2B2CF35A35A411ED89F95974C4F9AE02.roa (hash: 8jF/NpHwWErBgGhdC58vIaXRoe97OZ3zIJ5DPfjZVz4=)
3: C8165660822F11EEABA7D533C4F9AE02.roa (hash: TWI7/AHi80APjR4S5j80I9E6yRO+kebGNcad/BHi2Mc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl
rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 00:13:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1212 (0x4bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170982, serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB
Validity
Not Before: Oct 7 00:13:01 2026 GMT
Not After : Oct 14 00:13:01 2026 GMT
Subject: CN=6ac58e8d-acea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:05:df:c9:4d:76:b7:26:bd:cf:57:36:7a:
ff:57:d5:6d:89:2e:ef:bd:fc:fd:e0:fd:2f:f7:ea:
a9:77:83:e0:f1:7b:dc:fa:5a:90:3b:25:f4:ff:f0:
7d:7d:a7:0a:d2:a1:02:1d:d4:b8:a3:26:5b:c1:e5:
51:28:bd:82:b3:94:20:61:7f:6e:41:bb:32:68:5d:
4b:3c:9d:37:d1:a6:94:32:bb:e9:5c:f5:39:1f:06:
37:2a:36:41:82:26:b4:c5:59:9d:c0:f1:91:7e:8d:
55:72:fe:22:17:91:36:5a:e3:89:61:b7:5e:8d:d8:
8d:ef:74:e7:05:bd:9d:b3:43:8c:5b:a1:f2:c8:e5:
c9:8b:e4:69:1a:f2:c1:66:d8:17:26:0e:11:b6:ac:
22:60:01:df:f7:be:0e:29:5e:3a:23:49:bf:f8:5a:
ca:3e:86:62:d8:dc:ff:71:bb:5a:1c:40:ab:f7:35:
dc:e2:df:ae:63:45:23:13:e7:ec:84:eb:d9:38:02:
b5:76:9c:d7:f1:ed:4b:ab:bc:e9:2c:d6:bb:bf:84:
70:18:ed:99:47:d2:b8:6a:d4:ed:bf:97:a4:d0:8c:
9d:b1:12:85:0a:f1:4b:77:a6:7f:19:04:f3:ba:5b:
b9:cb:82:cb:5e:7a:f8:fb:42:aa:7b:52:2e:48:65:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DE:86:D5:E4:34:00:7E:24:C7:0B:6B:E2:90:17:27:C9:79:2B:A0
X509v3 Authority Key Identifier:
keyid:E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f9:c6:4c:99:4a:ac:5e:8f:08:e4:2d:46:30:b5:2e:25:8c:
bc:27:0c:7a:cc:0b:55:a3:a1:23:1d:42:89:c7:85:b8:e8:19:
22:26:c9:d3:cf:3d:9f:3e:68:ca:ca:6e:20:55:2c:73:5f:da:
4a:2b:89:c3:e8:24:82:0e:94:66:ee:72:3b:f7:8e:d7:15:10:
e8:7c:4f:86:cc:ff:45:d1:78:7b:b7:50:57:5a:2f:df:93:57:
40:48:32:66:f9:76:41:be:dc:f2:9b:68:06:dc:29:c8:7c:1d:
2c:b0:4d:92:17:5f:64:ee:0a:5a:8d:8e:a4:8f:b4:55:91:b0:
f5:ba:0f:67:d5:90:18:72:b4:8d:75:ca:6a:37:4e:44:76:cc:
89:46:09:a1:d1:bb:33:a6:50:a6:e8:3d:a5:01:8a:a4:e9:f0:
b1:7e:27:f2:0b:f4:ab:c8:2d:31:99:da:67:16:d3:e0:0b:de:
46:1f:9d:d4:7f:44:09:9f:ea:bc:bc:04:83:cf:49:c4:46:1b:
1b:32:36:09:ff:82:4e:0f:49:54:ec:26:ae:75:9d:b9:41:0f:
6c:0a:8b:51:9f:85:84:92:61:bd:d2:d8:b3:27:7d:35:fa:c4:
d8:5a:94:e2:ca:33:11:1e:d0:38:91:e2:08:2d:ac:20:17:55:
7e:34:dd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:17:02 2026 by rpki-client