
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
File: 5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft (raw, json)
Hash identifier: Co69i2ErVyyps/UGfkI40dZRPPRY45AtvHuXuanJh+Y=
Subject key identifier: 98:82:1C:2E:BA:D4:F4:3C:A3:CF:E4:6A:13:59:A8:E6:59:DA:3A:B4
Authority key identifier: E6:DF:97:60:BC:D1:A1:59:66:51:2C:D4:7B:72:94:C0:6C:02:EE:CF
Certificate issuer: /CN=A9173B07/serialNumber=E6DF9760BCD1A15966512CD47B7294C06C02EECF
Certificate serial: 08AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
Manifest number: 0895
Signing time: Tue 18 Aug 2026 21:00:13 +0000
Manifest this update: Tue 18 Aug 2026 21:00:13 +0000
Manifest next update: Tue 25 Aug 2026 21:00:13 +0000
Files and hashes: 1: 5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl (hash: /MGl3VdOlD/2dhjyek/kWFqMaq5MjAwsAcHfJgma6E4=)
2: CB3F39368F9711EE927E086FC4F9AE02.roa (hash: I3no8jZBWGF0B/3NwaIAfa0xz/HnjGJbm3/3i5Bkr8M=)
3: 493468827C1A11EBABA86F44C4F9AE02.roa (hash: gQGxx4gihy9zKWGv8z0Mu143u5DoEGyfqqJKAVo1rfc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl
rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2221 (0x8ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173B07, serialNumber=E6DF9760BCD1A15966512CD47B7294C06C02EECF
Validity
Not Before: Aug 18 21:00:13 2026 GMT
Not After : Aug 25 21:00:13 2026 GMT
Subject: CN=6a84c7dd-9eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:ab:39:5a:8a:01:80:6b:44:34:11:1e:d7:
51:a9:d4:af:0c:89:be:c1:76:50:ce:7c:5a:9f:56:
3c:2e:74:74:2c:16:60:ae:b4:fb:98:67:aa:a8:00:
86:9c:b1:0f:2c:d9:09:46:f3:25:d4:4f:88:52:95:
bb:39:75:e8:64:ff:ce:ec:33:dd:fa:70:3e:82:3d:
08:19:37:45:81:c2:03:40:58:bf:7b:a4:b9:61:8f:
ba:0b:c4:16:8e:6a:eb:d3:a5:2f:29:46:8b:8c:8a:
4e:d3:f1:f5:51:21:8a:da:75:0e:f2:9e:49:47:d8:
5a:41:da:ce:06:4a:7f:af:c7:98:86:c2:a5:5d:df:
e5:8f:e8:21:b2:c0:c9:df:f3:0e:17:67:7e:c5:22:
7a:c9:c1:9e:e6:58:67:1d:6e:c2:91:e6:c7:e7:6b:
e1:70:d0:87:f6:81:7e:1f:3b:e5:e3:9d:9a:48:68:
c8:8d:56:2a:a5:23:72:ef:22:da:c3:4c:d4:1b:06:
e8:d2:c6:0c:32:05:3d:dd:09:2f:74:0c:cc:d3:47:
ea:ea:1b:31:77:c9:cd:0b:36:f9:4a:0f:ce:f7:74:
7b:16:9a:9a:7c:5d:db:5d:a6:52:fb:40:d6:a6:79:
4c:c6:60:aa:46:c8:d2:f9:cc:73:25:49:04:8c:e1:
93:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:82:1C:2E:BA:D4:F4:3C:A3:CF:E4:6A:13:59:A8:E6:59:DA:3A:B4
X509v3 Authority Key Identifier:
keyid:E6:DF:97:60:BC:D1:A1:59:66:51:2C:D4:7B:72:94:C0:6C:02:EE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:a6:26:bc:7e:ea:7b:c4:1a:b9:bf:98:74:d4:9f:c2:7d:5f:
7c:1a:14:8d:d4:4b:2c:8e:b5:e2:8a:b4:f6:c5:a5:53:b3:a9:
b1:0d:e7:18:5f:0e:da:fc:49:82:e3:ff:82:dd:12:81:d6:36:
31:74:38:d7:66:5e:d5:67:43:22:b5:0f:7d:0d:24:3d:49:47:
d6:4e:eb:73:b5:82:32:cf:77:2e:fd:15:57:da:4d:aa:69:f7:
f2:11:05:34:20:b5:92:49:ee:fe:fd:8e:a4:2b:93:6d:84:27:
78:c2:20:17:9f:f7:18:ae:29:1b:78:0e:55:0a:f6:29:81:41:
24:5d:d6:64:a6:c7:3d:a2:7f:36:f4:c5:20:70:36:cd:39:c1:
68:7a:bb:9c:8f:82:93:44:51:a6:62:88:90:90:34:0d:1a:f1:
17:63:85:e7:d4:0a:1f:9b:e4:d9:17:56:04:6c:63:b3:ab:a5:
be:78:89:57:a1:6a:61:ec:c9:9e:55:04:3a:6c:de:ad:07:33:
bc:2a:8a:c1:1c:57:e6:52:c2:78:2f:94:fb:ef:7f:c3:dc:2e:
e0:c4:1a:c8:6f:58:a8:c9:ec:93:b6:b4:6b:43:ab:a2:18:17:
25:d1:6b:e4:b5:2a:36:3f:e3:31:9f:08:2d:04:47:3c:89:22:
32:4a:eb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:02 2026 by rpki-client