
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
File: 5DMXblmum0dk6179BKQ2hWKrXiE.mft (raw, json)
Hash identifier: 5Tm9fviZofC2qd+lsnNcdUaZhmhHNkh/vovCLuQ1Mos=
Subject key identifier: AB:C2:22:AC:56:C1:D7:F5:1D:07:98:16:AF:BA:F2:F5:E6:B6:52:57
Authority key identifier: E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21
Certificate issuer: /CN=A9180318/serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
Certificate serial: 3552
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
Manifest number: 354E
Signing time: Wed 10 Jun 2026 14:41:03 +0000
Manifest this update: Wed 10 Jun 2026 14:41:03 +0000
Manifest next update: Wed 17 Jun 2026 14:41:03 +0000
Files and hashes: 1: 5DMXblmum0dk6179BKQ2hWKrXiE.crl (hash: WYMSIRKlmXjYp7AY6qt/oA+ODIW1Hy4HQpk5Njq59l4=)
2: 0C8AD31664AA11F189ECB4C08F47A888.roa (hash: /Wy2qPTE6WfGUPhUYPbYqfCwL9kdQFHUmC0zRjD/GhI=)
3: 0D1729E264AA11F189ECB4C08F47A888.roa (hash: 155WPnU1Tdj5XYOx03K5ehKGfW7wOh/lahNdk39EN4o=)
4: 0D982F1A64AA11F189ECB4C08F47A888.roa (hash: RJDowkvQj21DAoDtlHXiHBFKbgMG1RN2lMIdKoUjxS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl
rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 14:41:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13650 (0x3552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180318, serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
Validity
Not Before: Jun 10 14:41:03 2026 GMT
Not After : Jun 17 14:41:03 2026 GMT
Subject: CN=6a29777f-c21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1d:67:b5:f9:7c:8d:11:c2:bc:c8:8b:cd:86:
b9:7b:84:fa:44:cc:42:ba:30:ba:a0:5f:72:62:4f:
95:3f:87:3e:39:bc:98:6e:3d:2e:bf:bc:86:49:7b:
1b:73:e0:73:1d:54:18:37:53:08:04:91:6b:95:b8:
cc:8a:4b:18:ab:06:c9:ea:0e:15:2c:8a:8e:6e:2d:
ce:8b:dd:e6:24:cd:c2:98:4d:4e:2d:59:a5:60:8e:
84:5f:81:3f:ee:1b:72:72:1e:7b:31:e9:31:6b:55:
2a:7a:4a:22:83:c4:7b:de:ac:ab:04:ee:35:64:54:
9a:56:18:b5:fd:10:4c:cd:cc:26:9a:fd:40:d9:61:
d7:04:a6:c5:6f:62:9f:c8:83:b1:7c:38:f9:7a:2d:
97:c3:89:1b:fc:08:15:7b:82:e6:7d:ed:70:29:a4:
d7:26:09:4d:d8:6d:18:9c:00:ba:57:93:92:2e:86:
df:60:93:9d:75:90:70:4c:55:c0:a2:9f:b0:e3:c8:
72:cc:89:86:fc:bd:ab:e6:cd:eb:9a:e1:9e:fd:3e:
f7:7a:73:04:29:3f:23:c1:60:a0:96:34:26:e5:3d:
fb:b2:3d:35:db:bd:4f:44:cf:c2:c6:7b:35:98:8c:
a1:f8:ee:e5:d8:2b:78:3f:f5:5f:83:86:81:71:28:
34:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C2:22:AC:56:C1:D7:F5:1D:07:98:16:AF:BA:F2:F5:E6:B6:52:57
X509v3 Authority Key Identifier:
keyid:E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:45:23:df:29:30:c3:dd:f0:35:a6:91:9e:ca:c1:7a:76:79:
8d:18:77:75:e4:34:9b:5c:6b:9c:a7:14:c1:e5:2d:60:01:00:
02:b4:c2:1a:eb:e4:8b:3d:c4:25:51:a3:39:48:5d:aa:d5:1a:
e8:e0:08:fb:f3:f1:96:9f:fa:4b:6b:99:b0:ba:fe:06:5b:11:
43:a6:82:5a:b4:a9:7d:f2:f4:0b:1a:7b:de:65:e0:7f:ec:3b:
09:cc:15:3f:ce:71:cf:0a:4c:44:5f:2d:d1:68:66:fa:7c:e8:
2a:a3:d2:1a:b0:b5:11:01:a2:bb:2a:97:db:57:00:ff:db:16:
bd:2d:d7:69:3f:93:7e:2f:a0:59:9e:ac:77:68:27:5b:16:84:
3e:19:f7:ae:b8:c6:3f:a7:2d:9c:7c:58:41:b9:0a:b3:00:d7:
b6:d0:40:13:dc:6c:9a:bb:43:cd:06:2c:12:d6:14:b3:ca:0b:
99:5c:a0:4f:f2:3e:f1:84:95:88:3c:bc:50:da:4f:31:04:55:
c1:ca:aa:2a:4c:64:0b:a1:08:51:c0:3e:3e:62:0c:58:50:53:
e7:24:54:65:f2:bf:e0:ff:1e:af:5a:fc:5d:49:75:63:c5:2e:
d0:45:40:87:3b:8d:8e:50:00:45:14:51:c8:60:9e:36:3a:33:
28:f1:90:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:43:05 2026 by rpki-client