
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
File: 5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft (raw, json)
Hash identifier: H3pR49n9Ts9J4QqN/Yc8Wa1kl/LkDOKB7stuulBUnYA=
Subject key identifier: D2:CB:4A:63:66:66:FB:D6:A5:8F:44:7A:74:BB:69:00:9E:86:9E:6C
Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36
Certificate issuer: /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
Certificate serial: 0EE0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
Manifest number: 0EC6
Signing time: Sat 22 Aug 2026 17:37:46 +0000
Manifest this update: Sat 22 Aug 2026 17:37:46 +0000
Manifest next update: Sat 29 Aug 2026 17:37:46 +0000
Files and hashes: 1: 5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl (hash: yy+VK0Vngrl4Jm5G4YaDtgkqmsMYBf+pDUYgFfF72o8=)
2: 6A5EC93A70DE11EC8B944928C4F9AE02.roa (hash: 2vmyMW6TtcbaqXFP7Qp6BP+UrMdH5alLGCt5uNXx+l8=)
3: 9F14D15E70DB11ECACCABD21C4F9AE02.roa (hash: xvrivgHeCdDydOD/ZktKC2lGC9vuqeY8ZsH11+NgJlU=)
4: 6B7E8FC670DE11EC8B944928C4F9AE02.roa (hash: DEYl4xuRBtxqmhzfpUHokIt3OryoQ/FdXNVfb0S7BgA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl
rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3808 (0xee0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183DB7, serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
Validity
Not Before: Aug 22 17:37:46 2026 GMT
Not After : Aug 29 17:37:46 2026 GMT
Subject: CN=6a89de6a-eba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:5d:84:89:9e:4b:31:df:5e:ea:52:42:39:
89:d8:e3:3e:5a:c0:46:97:fd:c1:90:f0:9f:23:fc:
7d:b1:4c:18:ec:b8:96:8c:8e:59:f3:9d:17:04:08:
3e:f6:30:8d:89:95:93:08:74:55:8c:a5:24:a0:aa:
25:95:61:59:ce:99:21:04:5d:95:6b:a5:1c:8d:c0:
e8:d2:98:c3:75:81:93:c7:7b:06:74:09:0f:f0:4f:
1d:77:85:4e:1c:04:b5:02:23:9d:ac:34:cc:9d:ff:
10:e3:ca:c8:52:2f:3e:9f:8a:bb:0a:93:ba:83:8c:
df:0a:9c:c1:0d:7b:a0:c0:26:09:8a:50:e1:6a:f3:
5d:32:00:6d:78:b8:19:87:6f:97:84:ca:6c:03:ff:
05:0b:2a:16:09:a5:90:ae:04:40:52:e1:d9:eb:4f:
90:8e:f1:3a:6e:53:a0:b8:eb:32:34:32:67:53:ff:
5d:f8:ec:7a:ed:c5:75:17:5f:8d:b7:90:ad:fe:d6:
74:16:ad:79:c6:26:9d:80:93:e1:43:3a:cc:17:b8:
25:f6:a5:7f:0b:4c:3a:c8:e1:e7:66:e6:63:b5:12:
68:40:a7:60:4b:d3:3f:17:ff:cc:d4:7c:20:0c:3c:
0e:a1:a1:bd:c9:61:57:40:39:28:d3:85:59:11:a7:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CB:4A:63:66:66:FB:D6:A5:8F:44:7A:74:BB:69:00:9E:86:9E:6C
X509v3 Authority Key Identifier:
keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:47:2a:45:d6:50:97:e1:e5:fe:0d:4a:4b:a9:f1:6d:7b:e5:
cb:c0:17:7b:b9:61:e3:b0:90:1b:04:60:02:90:89:ec:26:71:
de:f7:a0:26:06:76:85:b9:2b:6e:25:ea:24:18:28:98:4f:f6:
fc:2b:75:11:16:72:11:10:3e:35:43:a1:4d:8d:c0:22:e1:6e:
84:7c:d2:83:b0:6b:17:98:d9:91:5f:41:bb:11:38:9b:a3:66:
6b:a0:f8:ff:81:59:26:f6:66:69:7c:06:90:ac:87:b3:08:67:
df:96:1b:d2:13:ba:6b:ed:67:29:87:cb:d2:33:7a:75:be:3c:
e9:58:30:8f:01:92:49:03:08:93:0f:41:d2:eb:58:92:fe:8f:
9f:80:3f:24:31:30:ff:00:81:a2:27:b4:e9:51:03:99:7b:e0:
72:a9:dd:9b:37:ec:dc:ac:f6:76:a8:93:9e:80:a8:db:74:e6:
27:2a:1a:7b:e5:46:bb:36:1d:c2:e3:e0:6e:4b:3b:cf:f5:55:
f7:96:99:0e:e7:e4:b8:c0:7c:fb:87:ba:dc:9f:3b:47:0a:32:
89:f8:76:76:3e:71:f5:fe:60:23:4b:29:a1:a2:82:1c:17:69:
b8:52:af:13:18:2a:a6:11:01:19:94:e0:f8:4b:0f:78:29:46:
17:28:93:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:09:10 2026 by rpki-client