
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
File: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft (raw, json)
Hash identifier: 5DpFObeqGu8DbV60racf6ldzAIDJRX1B91L6UYGxbyo=
Subject key identifier: 4B:27:CE:D8:6D:2D:28:AB:CC:0C:6A:BE:5C:A0:2A:66:24:9F:AB:C6
Authority key identifier: BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
Certificate issuer: /CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Certificate serial: 05A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
Manifest number: 0597
Signing time: Sat 28 Mar 2026 23:06:29 +0000
Manifest this update: Sat 28 Mar 2026 23:06:28 +0000
Manifest next update: Sat 04 Apr 2026 23:06:28 +0000
Files and hashes: 1: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl (hash: xBtE9E1Y/pAsa07UZCcF0zOdAs/kqrD0Fmf5K5sAxgE=)
2: 37FE553E5CAB11F08FCD0029C4F9AE02.roa (hash: 7vsEdUjO68wSnI82MSqqLNl6M5rdXWQoFEtu17LQhaE=)
3: 9B741CFE0C3411EDB8619843C4F9AE02.roa (hash: NVoTvNqptu8+2EEc4xwQ1XFeD946dIqVcf+QNOuWx54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 23:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1447 (0x5a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186B80, serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Validity
Not Before: Mar 28 23:06:28 2026 GMT
Not After : Apr 4 23:06:28 2026 GMT
Subject: CN=69c85ef5-8c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:0d:43:d4:42:7a:15:30:0c:1e:8f:3d:95:
13:51:07:09:76:86:f9:9a:b1:61:0d:8f:18:b2:93:
c0:de:66:b0:64:90:97:79:33:a3:db:db:82:de:73:
de:c9:0d:7c:ad:5a:0d:24:3b:cd:74:84:3b:30:04:
88:33:0f:c8:06:3f:22:35:d8:4c:02:d5:23:8b:59:
60:ee:5d:11:fa:01:06:b0:15:c4:af:43:fb:60:5c:
b6:e9:28:41:ed:42:d9:d3:19:4f:53:b1:8a:00:d6:
3a:69:46:c4:d6:c4:6a:94:68:a5:ee:59:07:55:24:
e6:76:39:40:e1:fd:7e:11:43:8c:c4:6a:3a:ca:97:
34:f3:7d:7e:a2:79:45:17:05:5f:51:52:e1:d5:f4:
ff:41:08:cc:e2:74:8f:6d:62:47:b3:e5:c7:05:80:
77:aa:e9:32:3a:7d:27:fd:51:58:6e:a2:01:5e:92:
9d:bc:2f:31:7d:8e:f5:c0:4a:67:07:f4:13:76:87:
59:10:23:ea:57:52:60:08:ed:a5:1b:f6:b4:3d:69:
ce:f8:14:08:96:f2:f4:d5:35:7e:80:bf:c1:68:c3:
b8:b8:d6:29:62:05:17:69:6c:5a:99:45:8d:df:64:
43:44:36:fe:51:61:af:f3:87:9d:58:48:2e:9d:ab:
78:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:27:CE:D8:6D:2D:28:AB:CC:0C:6A:BE:5C:A0:2A:66:24:9F:AB:C6
X509v3 Authority Key Identifier:
keyid:BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ef:42:e9:c3:55:cf:50:10:ee:4f:85:74:09:68:ce:dc:2e:
b6:ff:f2:d1:53:a6:b3:27:5f:a3:0c:fe:c7:e1:cc:da:49:16:
a1:7a:22:14:c1:c0:bc:d1:47:ec:14:3f:58:89:b7:f9:4e:e4:
dc:9a:5e:15:28:31:76:13:d1:23:3d:35:27:a2:14:55:c8:ab:
37:66:ee:a0:21:ac:ca:4c:65:e8:5f:43:94:fe:c3:34:cc:bf:
b4:0a:e0:15:3a:12:ad:13:36:10:38:07:9a:b2:a7:8c:1d:15:
d2:e3:72:87:c2:12:2f:e0:38:e1:4e:ed:b7:10:de:bc:a3:5c:
4e:a4:e2:4b:39:89:e2:fe:97:68:3d:89:c2:42:d3:df:3a:da:
f4:7e:53:68:ec:6f:0d:19:e9:2e:cc:e7:52:3c:6e:c7:3f:3d:
e6:a9:15:4d:02:1b:67:cc:8b:4f:f3:51:cf:d0:d5:fc:c6:2b:
2f:ce:31:da:78:21:a6:82:48:e0:5d:ee:62:0b:28:e8:dc:53:
0d:f9:a7:5b:5a:39:5e:ea:a8:71:9e:d2:52:97:fd:49:d0:22:
e0:2f:0f:ac:68:cd:67:00:35:d0:96:c6:72:27:87:f6:f0:12:
ae:13:0c:6a:aa:d0:71:45:e5:1d:8f:40:08:10:2d:50:da:fb:
e3:d5:00:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:49:28 2026 by rpki-client