
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft
File: 5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft (raw, json)
Hash identifier: yMnzpT25qDVFkf52vqbxLxauN4eGDbyALCqAYaUz/oU=
Subject key identifier: 7E:4A:4B:94:AF:A4:76:5E:C3:08:3D:56:DD:C1:DA:56:07:3B:9A:AD
Authority key identifier: E6:0E:21:41:D7:1D:B9:FC:89:FA:BF:B5:FD:AD:03:72:DF:A3:37:D0
Certificate issuer: /CN=A917B633/serialNumber=E60E2141D71DB9FC89FABFB5FDAD0372DFA337D0
Certificate serial: 0173
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft
Manifest number: 0173
Signing time: Sat 03 Oct 2026 05:26:34 +0000
Manifest this update: Sat 03 Oct 2026 05:26:34 +0000
Manifest next update: Sat 10 Oct 2026 05:26:34 +0000
Files and hashes: 1: 5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl (hash: saxyU3cktDFm0UJRHtUWe/42/vrOI8C5FyYpyNOCxww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl
rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 05:26:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371 (0x173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B633, serialNumber=E60E2141D71DB9FC89FABFB5FDAD0372DFA337D0
Validity
Not Before: Oct 3 05:26:34 2026 GMT
Not After : Oct 10 05:26:34 2026 GMT
Subject: CN=6ac0920a-05cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a8:bc:bb:3f:07:ac:e9:cc:ed:54:f8:1c:23:
68:41:18:84:5c:27:80:48:d8:2d:71:f3:ee:40:82:
e4:22:d7:9d:13:9c:57:5c:c2:7d:fb:2d:78:f0:ec:
62:12:46:5f:b4:2b:30:0e:ff:63:49:6e:d1:97:72:
f7:cb:af:c9:11:6f:98:31:22:7d:d4:c9:9e:4c:30:
e0:76:5d:c6:e8:df:e7:0e:53:e8:8d:53:14:7c:7c:
5d:1b:d1:1b:f2:db:9c:36:e9:78:2f:c0:31:a9:dc:
23:60:d3:cc:19:7f:ac:6f:9a:53:8d:1e:91:b9:7f:
3f:5e:fb:6e:9c:8b:60:7f:de:62:11:34:7d:f6:48:
aa:90:6b:d5:c1:cb:94:b6:1c:a2:99:f5:f7:f7:2e:
14:8d:62:89:96:ee:f0:be:c5:36:5c:89:a4:68:41:
e1:a3:92:c4:da:50:2e:59:52:17:02:93:d8:dd:7a:
fb:bb:93:da:08:fd:b7:38:c2:82:e9:06:c3:f3:ec:
95:d0:33:b3:98:57:cc:01:9d:60:4d:8a:db:a6:4e:
b7:e2:a0:61:7a:61:09:1b:ee:99:ff:97:88:0d:60:
7b:0e:90:38:fc:cf:fc:9f:93:9a:d5:de:d3:12:78:
0a:ba:9c:54:fe:54:4f:31:2e:b2:bb:aa:86:8f:87:
0d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4A:4B:94:AF:A4:76:5E:C3:08:3D:56:DD:C1:DA:56:07:3B:9A:AD
X509v3 Authority Key Identifier:
keyid:E6:0E:21:41:D7:1D:B9:FC:89:FA:BF:B5:FD:AD:03:72:DF:A3:37:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:27:f9:50:e6:2f:16:e3:64:a3:ae:c1:20:f6:71:d6:6d:5d:
a9:b0:32:a3:94:03:90:8b:6c:48:5f:d2:22:d1:c3:c7:b1:a2:
b2:6f:22:d7:cf:d0:c3:72:f8:0a:f7:c0:cb:9a:67:9f:b4:c5:
0c:ea:23:f7:3d:5d:0e:81:4b:d3:db:18:3b:e1:e5:1b:8b:3e:
6e:5a:9e:5b:fe:b2:4f:7b:e6:19:26:33:f5:42:90:19:e3:b5:
56:e3:b9:40:dc:de:cc:7d:6e:35:9d:da:fd:bb:87:ce:ac:c2:
3b:a4:d1:f9:a5:d7:de:83:53:2e:55:00:8f:cb:72:a1:b7:f5:
5a:77:88:81:b9:29:11:24:0c:e6:26:bd:ea:4f:2e:57:1a:23:
c2:88:2c:cd:09:81:86:9e:43:9c:a5:8d:00:21:0a:97:72:a0:
b6:67:d2:98:35:45:25:d9:46:77:7b:4b:7c:a4:51:bd:5e:5a:
31:8c:eb:6b:e9:e3:9b:90:e4:79:9c:bb:58:b9:f8:f2:dd:8e:
ac:e8:1e:f0:16:d9:af:c2:92:21:3c:23:ee:c1:6b:ae:69:4c:
0b:98:8a:65:1c:a5:4f:c5:b5:de:4b:89:fd:7a:4a:61:1e:ec:
1e:5f:41:73:0f:f7:b8:63:20:d9:cd:39:7d:f2:03:cd:2c:2f:
97:b5:a9:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I2MzMxMTAvBgNVBAUTKEU2MEUyMTQxRDcxREI5RkM4OUZBQkZCNUZEQUQwMzcy
REZBMzM3RDAwHhcNMjYxMDAzMDUyNjM0WhcNMjYxMDEwMDUyNjM0WjAYMRYwFAYD
VQQDEw02YWMwOTIwYS0wNWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyai8uz8HrOnM7VT4HCNoQRiEXCeASNgtcfPuQILkItedE5xXXMJ9+y148Oxi
EkZftCswDv9jSW7Rl3L3y6/JEW+YMSJ91MmeTDDgdl3G6N/nDlPojVMUfHxdG9Eb
8tucNul4L8AxqdwjYNPMGX+sb5pTjR6RuX8/XvtunItgf95iETR99kiqkGvVwcuU
thyimfX39y4UjWKJlu7wvsU2XImkaEHho5LE2lAuWVIXApPY3Xr7u5PaCP23OMKC
6QbD8+yV0DOzmFfMAZ1gTYrbpk634qBhemEJG+6Z/5eIDWB7DpA4/M/8n5Oa1d7T
EngKupxU/lRPMS6yu6qGj4cN5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH5KS5Sv
pHZewwg9Vt3B2lYHO5qtMB8GA1UdIwQYMBaAFOYOIUHXHbn8ifq/tf2tA3LfozfQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjYzMy9EOTE2NUVCQTg2
RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi81ZzRoUWRjZHVmeUotci0xX2EwRGN0LWpO
OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVnNGhRZGNkdWZ5Si1yLTFfYTBEY3Qtak45QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjYzMy9EOTE2NUVCQTg2RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi81ZzRoUWRjZHVm
eUotci0xX2EwRGN0LWpOOUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWCf5UOYvFuNko67BIPZx1m1dqbAyo5QDkItsSF/SItHDx7Gism8i18/Qw3L4
CvfAy5pnn7TFDOoj9z1dDoFL09sYO+HlG4s+blqeW/6yT3vmGSYz9UKQGeO1VuO5
QNzezH1uNZ3a/buHzqzCO6TR+aXX3oNTLlUAj8tyobf1WneIgbkpESQM5ia96k8u
VxojwogszQmBhp5DnKWNACEKl3KgtmfSmDVFJdlGd3tLfKRRvV5aMYzra+njm5Dk
eZy7WLn48t2OrOge8BbZr8KSITwj7sFrrmlMC5iKZRylT8W13kuJ/XpKYR7sHl9B
cw/3uGMg2c05ffIDzSwvl7WpSA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:20:50 2026 by rpki-client