
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
File: 5DMXblmum0dk6179BKQ2hWKrXiE.mft (raw, json)
Hash identifier: J6C3UUcmD+1YAMY9G67oBPmkaKsZ09XzicGdiPa6w4k=
Subject key identifier: 80:D3:02:60:C5:41:AC:05:11:DC:04:5C:B2:52:F0:68:32:7E:85:92
Authority key identifier: E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21
Certificate issuer: /CN=A9180318/serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
Certificate serial: 356E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
Manifest number: 356A
Signing time: Tue 04 Aug 2026 14:41:31 +0000
Manifest this update: Tue 04 Aug 2026 14:41:31 +0000
Manifest next update: Tue 11 Aug 2026 14:41:31 +0000
Files and hashes: 1: 5DMXblmum0dk6179BKQ2hWKrXiE.crl (hash: teTv7b8SrdGC8YfXKJHeEbdyv6eA0WQ50eIb9w1AWMQ=)
2: 0D982F1A64AA11F189ECB4C08F47A888.roa (hash: RJDowkvQj21DAoDtlHXiHBFKbgMG1RN2lMIdKoUjxS8=)
3: 0D1729E264AA11F189ECB4C08F47A888.roa (hash: 155WPnU1Tdj5XYOx03K5ehKGfW7wOh/lahNdk39EN4o=)
4: 0C8AD31664AA11F189ECB4C08F47A888.roa (hash: /Wy2qPTE6WfGUPhUYPbYqfCwL9kdQFHUmC0zRjD/GhI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl
rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Aug 2026 14:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13678 (0x356e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180318, serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
Validity
Not Before: Aug 4 14:41:31 2026 GMT
Not After : Aug 11 14:41:31 2026 GMT
Subject: CN=6a71fa1b-7481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:a2:35:10:2f:f8:bd:a6:00:f6:bb:14:fa:
21:ae:ea:81:0d:07:53:76:98:aa:d1:9c:e6:e3:e7:
5a:6d:72:df:ae:f5:cd:0f:78:ab:c7:a1:2d:e5:28:
64:9e:af:e8:0b:eb:de:9d:b0:07:45:68:b1:97:58:
96:49:73:4d:bc:e7:22:0d:31:27:8a:03:fa:98:a8:
e9:f6:5b:6f:2a:c7:2a:aa:e6:bc:49:70:c2:ed:b0:
16:64:02:c9:7d:20:fb:11:72:00:88:94:d8:f3:9c:
67:08:37:49:3e:f9:ca:b0:ed:91:27:9f:a2:a8:a3:
4c:5c:3b:9f:a1:84:74:2b:3f:65:bc:2b:69:99:7a:
58:0f:57:67:8e:eb:00:d2:8a:8f:5a:88:98:40:e4:
f9:cd:2e:5d:f7:00:ce:66:b9:d7:b0:b9:53:02:4f:
61:ba:4a:aa:ec:2f:5c:cc:f3:64:af:f3:7e:dd:22:
d8:f1:74:22:f3:87:cc:df:61:ce:88:82:68:d9:c5:
94:d0:89:68:d6:27:6d:64:5d:01:3a:7b:93:59:d3:
0e:d2:6f:c2:c7:a1:a8:95:41:86:15:45:82:74:4c:
6e:2b:0d:59:f1:b8:7e:7e:c7:b5:c8:0a:d0:99:12:
10:d5:58:04:57:02:5a:87:3e:d6:e6:01:75:34:35:
0b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D3:02:60:C5:41:AC:05:11:DC:04:5C:B2:52:F0:68:32:7E:85:92
X509v3 Authority Key Identifier:
keyid:E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:26:33:8a:49:54:55:2f:6e:2e:9e:97:9f:89:29:3b:ce:4d:
12:b4:dc:fa:d0:cc:94:f7:cf:00:d3:82:a7:22:45:63:81:b8:
6f:5b:4f:c2:f7:da:ac:5f:78:e5:9e:93:0e:72:55:10:0b:01:
d9:10:71:fa:9c:4a:f6:c1:ec:b5:c9:35:51:d6:33:f3:b3:b1:
b1:53:4f:10:78:a6:78:8c:18:09:55:a1:f4:38:4d:1e:d6:0d:
4c:36:3d:3f:57:86:e5:c6:37:76:af:97:cd:7b:d6:7f:53:ec:
21:69:74:cb:ce:78:e8:d8:bd:9e:fc:20:80:2a:2d:08:d8:b4:
ac:b5:a7:cf:fa:73:91:7a:4a:71:9e:ea:b4:bd:7f:ce:2f:cb:
a8:29:29:7d:18:34:51:83:03:0d:27:2d:a6:d8:a0:d0:a3:5f:
ec:7b:ef:b0:e2:42:7a:1a:e8:ed:1b:bf:33:68:19:21:0d:db:
c1:ed:41:4f:a3:16:f2:46:96:96:97:66:de:4a:3e:55:73:29:
0e:14:12:d1:b5:43:f2:55:b4:f5:31:16:c8:06:b4:db:6a:15:
59:8b:c3:3c:ef:77:88:53:d2:35:e5:e6:de:f3:15:e8:ec:4c:
74:ce:7f:d0:cf:66:07:33:63:b2:6c:0e:6c:c5:57:d1:01:41:
81:b0:04:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 20:08:47 2026 by rpki-client