
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
File: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft (raw, json)
Hash identifier: c2o42XGf+v8kQUTFf7dIJo7NLqdsb+CUIF/XnadJADg=
Subject key identifier: BD:13:A9:82:60:10:FC:20:4F:DC:4C:3E:BA:65:FF:27:DB:01:E7:8E
Authority key identifier: E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69
Certificate issuer: /CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169
Certificate serial: 0191
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
Manifest number: 0187
Signing time: Sat 19 Sep 2026 04:40:27 +0000
Manifest this update: Sat 19 Sep 2026 04:40:27 +0000
Manifest next update: Sat 26 Sep 2026 04:40:27 +0000
Files and hashes: 1: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl (hash: TJDeVvUGeF7XENt/FG10y3+XvwfeLT6KC5YtPW35VxU=)
2: 4CA4BE8E667411EF8E723587C4F9AE02.roa (hash: Je69DOenUud2l/CtIOyINuqm56Y7r+pSuPgQPd3u0+o=)
3: 4D06CD2C667411EF8E723587C4F9AE02.roa (hash: zXaiTn1OPuqTOi1DnfJ2nxhGdbrJsBTMVyTGh2dj7aY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl
rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170DD8, serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169
Validity
Not Before: Sep 19 04:40:27 2026 GMT
Not After : Sep 26 04:40:27 2026 GMT
Subject: CN=6aae123b-5041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:2e:44:65:89:ea:32:bb:bb:2c:87:89:d6:
f9:f0:1c:ad:ca:db:a5:56:35:1c:da:18:ea:6b:87:
fc:6e:a2:ee:f9:eb:75:17:1f:79:da:9c:5c:ee:b8:
46:90:e3:28:5c:f9:7e:b7:84:7d:b8:d7:8a:23:dd:
9d:b1:ef:8a:52:a3:db:1c:f3:ec:7b:14:e9:6f:ec:
8e:fa:34:94:2f:53:81:7e:cc:31:95:a6:7d:8c:0d:
b6:5d:fb:40:bc:fa:a5:82:89:cb:d3:24:3b:86:dd:
3b:f0:7c:75:26:74:41:83:a4:df:4c:c1:25:d5:2e:
6e:99:7a:36:0c:b6:30:49:53:24:09:a0:af:31:ea:
92:f3:c8:72:d8:b0:18:4f:d9:50:2f:c5:02:13:b0:
50:df:f1:5c:87:bf:38:4e:e5:5d:ff:94:c3:38:75:
2d:84:06:f5:60:61:ec:5c:ce:22:e4:50:85:07:ba:
bd:46:c6:25:47:13:ac:f2:24:5e:85:be:cb:a7:0c:
58:dc:d3:12:3d:7a:33:4d:36:9a:dd:ac:dc:9a:3a:
18:05:ee:a4:6e:cb:20:d4:3a:9e:a9:8b:15:1c:6e:
b9:66:32:af:a4:92:21:5e:3a:35:cc:09:11:67:5f:
0d:e0:19:47:2b:11:64:f0:ef:24:fd:17:18:50:9d:
48:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:13:A9:82:60:10:FC:20:4F:DC:4C:3E:BA:65:FF:27:DB:01:E7:8E
X509v3 Authority Key Identifier:
keyid:E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:19:22:8b:8f:ad:46:80:98:de:44:ad:08:5e:a9:39:da:d1:
5d:91:47:3c:3b:96:68:21:f0:d3:82:54:3d:73:41:29:d5:d8:
12:0b:9b:d6:d7:a2:98:f7:5e:67:a2:be:e6:01:e1:48:2b:02:
49:43:a1:17:25:cf:df:cc:b2:af:be:b6:c5:da:20:f7:f9:99:
ee:84:9a:dd:50:10:a8:b5:67:fb:23:03:49:92:10:56:97:f4:
38:83:66:b2:f2:79:63:8e:3a:b5:ff:35:85:35:c4:a1:67:9b:
b5:68:e8:12:2f:de:de:01:a0:07:82:72:6f:7d:73:55:6c:b1:
26:8e:99:62:57:db:a0:60:e4:37:19:ed:10:8d:1a:7b:21:d3:
b9:97:f1:b8:a8:da:45:4d:33:81:88:6a:2b:4d:1c:c7:1a:43:
d8:0c:97:99:60:b9:a6:cc:53:55:79:0a:8d:21:d4:5a:0f:8a:
1c:6f:6e:9e:8a:bb:8e:2f:24:65:4f:c2:c2:c5:41:b9:c2:6c:
be:13:d1:63:fc:ed:92:6e:2e:75:73:7f:13:16:d9:6b:a3:5f:
1e:f7:24:df:16:ff:e9:6d:bb:97:4d:a4:56:d8:da:61:e7:91:
f6:27:89:54:bf:ba:19:dc:4f:71:5e:5f:2e:54:6b:b0:36:6b:
3f:82:65:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzBERDgxMTAvBgNVBAUTKEU2QjU0RDAyN0NFMzQ5OEJGMzVFNEQwNjVCQzQ3OEE5
MzZDMTYxNjkwHhcNMjYwOTE5MDQ0MDI3WhcNMjYwOTI2MDQ0MDI3WjAYMRYwFAYD
VQQDEw02YWFlMTIzYi01MDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvqIuRGWJ6jK7uyyHidb58BytytulVjUc2hjqa4f8bqLu+et1Fx952pxc7rhG
kOMoXPl+t4R9uNeKI92dse+KUqPbHPPsexTpb+yO+jSUL1OBfswxlaZ9jA22XftA
vPqlgonL0yQ7ht078Hx1JnRBg6TfTMEl1S5umXo2DLYwSVMkCaCvMeqS88hy2LAY
T9lQL8UCE7BQ3/Fch784TuVd/5TDOHUthAb1YGHsXM4i5FCFB7q9RsYlRxOs8iRe
hb7LpwxY3NMSPXozTTaa3azcmjoYBe6kbssg1DqeqYsVHG65ZjKvpJIhXjo1zAkR
Z18N4BlHKxFk8O8k/RcYUJ1IUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL0TqYJg
EPwgT9xMPrpl/yfbAeeOMB8GA1UdIwQYMBaAFOa1TQJ840mL815NBlvEeKk2wWFp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEREOC9BNjZBNzVFRTY1
QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZdnpYazBHVzhSNHFUYkJZ
V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVyVk5BbnpqU1l2elhrMEdXOFI0cVRiQllXay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MEREOC9BNjZBNzVFRTY1QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZ
dnpYazBHVzhSNHFUYkJZV2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmRkii4+tRoCY3kStCF6pOdrRXZFHPDuWaCHw04JUPXNBKdXYEgub1teimPde
Z6K+5gHhSCsCSUOhFyXP38yyr762xdog9/mZ7oSa3VAQqLVn+yMDSZIQVpf0OINm
svJ5Y446tf81hTXEoWebtWjoEi/e3gGgB4Jyb31zVWyxJo6ZYlfboGDkNxntEI0a
eyHTuZfxuKjaRU0zgYhqK00cxxpD2AyXmWC5psxTVXkKjSHUWg+KHG9unoq7ji8k
ZU/CwsVBucJsvhPRY/ztkm4udXN/ExbZa6NfHvck3xb/6W27l02kVtjaYeeR9ieJ
VL+6GdxPcV5fLlRrsDZrP4Jliw==
-----END CERTIFICATE-----
Generated at Sat Sep 19 09:14:30 2026 by rpki-client