
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
File: s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft (raw, json)
Hash identifier: atIuuNn9oQvDBJTc3bNpX5woCOyvBH6KQCUM5NKRuVQ=
Subject key identifier: 72:76:56:7E:76:CF:54:E4:A7:70:59:51:07:30:30:B5:6F:0E:D4:76
Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
Certificate issuer: /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Certificate serial: 0213
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
Manifest number: 0201
Signing time: Fri 11 Sep 2026 03:23:31 +0000
Manifest this update: Fri 11 Sep 2026 03:23:30 +0000
Manifest next update: Fri 18 Sep 2026 03:23:30 +0000
Files and hashes: 1: s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl (hash: oDEDhMCpSPJOuyJ674TwG6VS9aZchnQLyDSMsUFkUrw=)
2: A97CBD42A06611EFA888B57DC4F9AE02.roa (hash: 4V1R4yBz9L+Ygkp9Jd1O9idd1/44LPhkeQiPf1Qbp1Q=)
3: 762CACD0B04311EF95390327C4F9AE02.roa (hash: cvBldBadb8nJSATgwrsmCmmppZB2HYAM+GSD2SpFaCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl
rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 03:23:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 531 (0x213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917530D, serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Validity
Not Before: Sep 11 03:23:30 2026 GMT
Not After : Sep 18 03:23:30 2026 GMT
Subject: CN=6aa37433-89a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:82:86:94:5f:20:31:d2:a3:35:4d:b2:3d:
30:1d:aa:f3:89:d4:2c:81:50:e4:51:84:85:1d:dc:
78:31:65:f8:83:62:c9:65:33:79:d5:1e:26:a3:7e:
61:dc:a6:7c:59:4c:c6:8a:82:27:36:d8:18:ec:cf:
f3:35:a7:4b:b9:50:65:a8:d9:d6:2f:bc:10:d1:2d:
d4:1f:17:aa:e9:c8:7f:73:9a:b8:72:80:66:d6:f1:
98:54:0f:9d:ac:2b:2e:e8:45:19:54:40:78:d3:22:
3b:00:44:18:fa:70:95:fc:a5:51:46:8a:a8:d9:a7:
d7:f6:fe:17:53:96:c4:44:5d:30:74:04:b3:24:56:
13:90:dd:8b:c5:51:8a:81:3a:e6:f6:8c:64:1b:49:
a1:3a:e9:a7:3d:69:b5:e6:75:9a:3b:9c:aa:1d:59:
c9:eb:d5:f4:c9:c1:8b:b7:20:bd:3a:a7:16:9f:ec:
87:2b:b7:c8:ec:05:00:8a:94:43:73:7f:2d:d7:34:
57:39:ae:9e:17:23:f5:23:6d:e8:ba:09:7d:84:0c:
1e:87:a9:87:2c:12:b5:d0:fd:b6:04:f7:f0:4b:05:
07:a4:64:df:a0:d5:e7:f0:de:60:c9:b9:b7:d3:8b:
4d:e5:89:a6:61:b7:97:94:42:6b:ce:d5:a2:25:43:
fb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:76:56:7E:76:CF:54:E4:A7:70:59:51:07:30:30:B5:6F:0E:D4:76
X509v3 Authority Key Identifier:
keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:0f:85:0b:5d:51:d3:80:3b:5d:b6:0c:8e:86:2b:14:8a:38:
d9:a1:6c:7f:74:55:4e:95:c7:a9:c8:91:01:ba:c7:98:d6:8a:
ab:0e:5c:35:3d:9d:4b:3a:a4:5a:e0:9d:01:a5:89:1d:74:75:
63:9a:f5:0b:f9:ca:ae:fb:d7:a5:dd:19:e0:fa:67:02:89:a7:
23:c8:d5:91:c5:fb:96:0a:ad:88:12:b1:5b:a8:bf:f4:fe:c5:
aa:3d:f2:60:d8:a8:f1:fe:62:12:a1:f7:a7:c8:78:16:9f:4b:
e8:3b:55:51:34:06:bc:8f:6b:4b:48:2a:a3:19:7a:97:74:95:
5a:0d:3b:ea:b5:80:48:6e:b9:bc:de:4a:ec:5d:6b:64:c8:15:
bf:f9:f0:a5:e3:4b:25:e1:a4:3d:be:36:bf:bb:f6:59:f2:a0:
20:67:ca:89:43:83:3b:23:c8:0f:d4:26:77:6e:13:27:5b:5f:
26:67:ad:f3:06:eb:86:3d:14:49:68:2a:19:70:e6:4a:e7:6b:
8e:d7:b7:a4:38:aa:27:d3:90:40:41:81:8c:6b:e1:e4:01:dd:
a2:49:6d:d4:51:d6:e9:22:9b:9c:ef:43:5e:45:fa:86:cd:58:
e0:2b:b1:9e:84:13:fa:03:51:05:32:9f:da:49:99:8a:3b:b9:
97:4c:57:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:30:09 2026 by rpki-client