
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
File: 5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft (raw, json)
Hash identifier: Z98hx6JCCCrMvXvrZxOTW+R9+/wo7NNp0WNgX0JA/1Q=
Subject key identifier: C6:A3:55:EA:19:65:BC:AA:EC:7D:E3:63:52:1B:06:1A:22:22:22:8E
Authority key identifier: E6:DF:97:60:BC:D1:A1:59:66:51:2C:D4:7B:72:94:C0:6C:02:EE:CF
Certificate issuer: /CN=A9173B07/serialNumber=E6DF9760BCD1A15966512CD47B7294C06C02EECF
Certificate serial: 08C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
Manifest number: 08AD
Signing time: Sun 04 Oct 2026 20:40:13 +0000
Manifest this update: Sun 04 Oct 2026 20:40:12 +0000
Manifest next update: Sun 11 Oct 2026 20:40:12 +0000
Files and hashes: 1: 5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl (hash: Xn+VxQL7ZVcok10l0qhgiSzuGWM+mZZ0P8O4npdDHLw=)
2: 493468827C1A11EBABA86F44C4F9AE02.roa (hash: gQGxx4gihy9zKWGv8z0Mu143u5DoEGyfqqJKAVo1rfc=)
3: CB3F39368F9711EE927E086FC4F9AE02.roa (hash: I3no8jZBWGF0B/3NwaIAfa0xz/HnjGJbm3/3i5Bkr8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl
rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 20:40:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2245 (0x8c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173B07, serialNumber=E6DF9760BCD1A15966512CD47B7294C06C02EECF
Validity
Not Before: Oct 4 20:40:12 2026 GMT
Not After : Oct 11 20:40:12 2026 GMT
Subject: CN=6ac2b9ad-9616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2b:86:8e:cd:ba:ab:34:57:8b:dd:c0:5f:84:
18:3f:51:06:48:e8:09:1d:27:34:d9:ac:5e:3d:9b:
fb:da:ce:41:1a:8d:98:f5:22:79:ed:37:b0:e4:18:
69:84:91:76:8c:39:d3:90:89:4e:0a:16:24:61:a1:
51:76:fe:a7:cd:a8:12:d2:a4:8f:57:c9:09:42:2e:
46:5b:70:74:41:cc:da:b8:67:d2:51:18:1d:c5:f8:
7c:bc:e0:70:f2:a7:d7:45:7d:ca:a1:6b:9c:1f:f1:
4d:f4:b2:4c:9a:cc:e2:a0:8a:4c:68:a8:cd:ac:a1:
18:4c:94:eb:f0:87:52:18:a1:84:d5:82:b7:d7:0c:
cc:da:62:49:0f:aa:fc:dc:2a:44:58:34:e1:65:cc:
68:2d:88:c2:4e:66:84:d1:19:4c:f2:3e:5a:dd:87:
ee:41:6e:f9:c3:72:5f:4b:ee:eb:7c:a0:c8:e6:31:
66:35:70:34:0e:0f:ff:50:29:40:61:56:cf:b1:70:
7f:47:74:98:a7:99:a9:00:ea:3d:d0:99:a6:2a:23:
69:cf:fb:5d:97:ae:3d:f4:74:2b:00:1a:4e:60:d5:
0c:00:9f:20:71:97:aa:73:11:0e:de:fe:50:d7:0f:
96:71:54:9a:98:4c:89:bd:12:1b:a4:11:d6:0d:8a:
4e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A3:55:EA:19:65:BC:AA:EC:7D:E3:63:52:1B:06:1A:22:22:22:8E
X509v3 Authority Key Identifier:
keyid:E6:DF:97:60:BC:D1:A1:59:66:51:2C:D4:7B:72:94:C0:6C:02:EE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:0a:cb:d8:3f:02:d4:24:87:99:a8:0a:b0:19:74:cd:2e:a7:
a9:b9:05:ab:c6:43:92:52:21:4c:2f:00:d7:a3:16:c3:d9:16:
7b:05:48:59:f4:05:cb:f0:bf:ef:24:93:fe:38:52:4d:d7:b1:
6e:3f:e8:1d:5f:c4:40:c9:e5:ce:76:a1:10:ea:4e:ea:79:d6:
1d:14:54:b5:1a:1a:f6:bb:7e:6b:5a:cf:d0:14:6b:52:40:ec:
6a:2b:60:c0:f0:4a:38:fe:c7:7e:df:10:bd:a9:06:63:fa:20:
f2:55:43:9e:f7:fb:e3:3c:a6:57:e5:41:be:26:1b:e6:79:c2:
d0:78:ad:70:eb:09:19:f2:73:d5:62:44:a7:e6:62:d1:33:e2:
2a:5b:49:a3:90:4e:5b:14:4a:05:10:5c:d6:6a:83:33:f7:6b:
ac:7b:6b:05:d5:bf:5f:e4:19:38:63:f5:e6:ed:58:e8:bb:23:
4c:73:28:8a:32:1f:bc:18:e6:1e:2a:3a:bf:e1:ef:7e:e6:fd:
f1:13:9e:f6:a7:2a:5e:e5:4a:07:8d:6d:8a:01:68:49:c7:62:
4c:5f:ad:d1:3f:bc:da:7b:f4:b9:4b:1c:11:a9:68:de:e6:79:
7c:5e:02:5a:47:40:81:11:dd:eb:da:e6:0f:65:b4:81:10:21:
51:de:ce:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 14:40:51 2026 by rpki-client