
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
File: 5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft (raw, json)
Hash identifier: Gp50SR/7Z1UixBH5k5nZlGA4XMhmSbxsNp9W1lnNwD4=
Subject key identifier: 39:E8:C8:6A:C5:6E:6C:72:FA:1B:67:7D:BA:D6:0C:C5:E4:85:57:9E
Authority key identifier: E6:DF:97:60:BC:D1:A1:59:66:51:2C:D4:7B:72:94:C0:6C:02:EE:CF
Certificate issuer: /CN=A9173B07/serialNumber=E6DF9760BCD1A15966512CD47B7294C06C02EECF
Certificate serial: 0895
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
Manifest number: 087D
Signing time: Thu 02 Jul 2026 20:57:39 +0000
Manifest this update: Thu 02 Jul 2026 20:57:39 +0000
Manifest next update: Thu 09 Jul 2026 20:57:39 +0000
Files and hashes: 1: 5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl (hash: AmfTVB7fqmGFZ2uooDZNG5mS12HLZcvnA1wqaxh7agA=)
2: 493468827C1A11EBABA86F44C4F9AE02.roa (hash: gQGxx4gihy9zKWGv8z0Mu143u5DoEGyfqqJKAVo1rfc=)
3: CB3F39368F9711EE927E086FC4F9AE02.roa (hash: I3no8jZBWGF0B/3NwaIAfa0xz/HnjGJbm3/3i5Bkr8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl
rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 Jul 2026 20:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2197 (0x895)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173B07, serialNumber=E6DF9760BCD1A15966512CD47B7294C06C02EECF
Validity
Not Before: Jul 2 20:57:39 2026 GMT
Not After : Jul 9 20:57:39 2026 GMT
Subject: CN=6a46d0c3-0e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1c:fa:fc:e3:aa:17:39:d0:0f:d0:1a:bd:39:
30:51:16:0b:c2:47:32:10:d4:61:a2:ee:6f:c4:1c:
5f:9b:dc:4a:96:35:8b:e6:e1:bd:36:f1:cc:94:88:
3a:27:ae:7a:5b:e1:e6:f8:95:93:37:31:dd:5d:6b:
49:45:42:7c:1a:1f:29:f3:b6:b5:82:c6:6a:89:e8:
cf:68:e8:80:b2:51:4f:0d:61:26:74:75:73:a5:f0:
f3:ce:8d:ea:fd:4d:79:4d:a4:1a:86:6e:ba:c8:b1:
6f:1d:cb:eb:ac:79:99:04:f2:63:17:86:8e:50:d7:
4d:1b:a9:6c:68:1d:aa:d7:da:c2:7e:b7:de:0a:10:
f9:c6:f0:58:75:fb:34:ae:68:26:c5:20:73:c4:ff:
13:1e:15:27:84:ff:05:d8:63:80:a4:99:61:2a:6a:
0d:95:43:e9:63:e5:66:f8:7c:8d:db:4b:8e:ce:67:
cc:5c:d4:d5:77:ce:aa:18:95:e6:8b:33:c3:de:3c:
34:eb:2d:d5:c8:ad:37:d9:c8:18:41:8c:7a:1e:1a:
91:95:28:a0:38:66:b5:56:81:d2:bb:c2:d7:20:d3:
59:a1:7f:32:74:04:88:9f:c5:ab:f6:e5:9a:5d:a2:
bc:d4:37:cc:78:e7:2b:6e:18:8f:19:06:92:cb:ab:
2c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E8:C8:6A:C5:6E:6C:72:FA:1B:67:7D:BA:D6:0C:C5:E4:85:57:9E
X509v3 Authority Key Identifier:
keyid:E6:DF:97:60:BC:D1:A1:59:66:51:2C:D4:7B:72:94:C0:6C:02:EE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ea:71:f6:25:9e:4e:37:02:71:c8:a7:f4:37:9e:8e:f4:64:
6d:7b:e6:e8:aa:1f:cd:54:5a:e8:6d:ae:ee:76:89:a4:34:46:
85:7b:a9:09:75:af:22:e8:17:2e:1c:ad:53:d9:c6:35:09:1c:
56:5e:46:fc:ca:76:6a:f9:d5:0e:91:db:c6:5c:9b:05:44:cb:
fa:55:36:92:9e:e5:71:f0:9c:52:95:de:a2:18:be:24:c5:54:
f3:0b:7e:71:3c:fb:16:e4:8f:33:e3:8c:fb:d4:77:44:ac:de:
4a:89:94:b2:58:52:a5:89:00:6b:12:72:3f:08:3b:51:6a:57:
69:f5:80:16:aa:0a:5a:b2:c2:be:0e:c9:ca:c4:c0:7b:2f:d3:
b1:54:ca:3f:da:1e:c4:b3:9a:92:fa:f2:a1:8a:4a:f4:f7:33:
ad:60:29:f5:35:5f:8f:55:46:2b:b6:eb:80:f8:bb:f3:ad:d7:
c5:d7:aa:c9:ef:8b:83:06:16:27:4c:0e:0f:6e:ff:82:a0:72:
46:cc:73:f6:2f:5a:32:3e:8f:ca:b6:c4:4d:22:98:c2:b6:c1:
89:59:3d:cc:c9:7f:87:15:65:5e:2c:27:bc:15:6e:c9:a9:ca:
1a:95:8c:3c:74:4c:8e:5d:27:39:8e:44:07:1f:9a:d2:a0:f2:
77:08:52:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 09:31:54 2026 by rpki-client