
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
File: C5sr_BxrLAlndq91fTrxRUfkPnI.mft (raw, json)
Hash identifier: 0J6PMRy1pSMpfYtyyauytKvs8YxohzcRzPSUMLXB6GI=
Subject key identifier: F6:D7:54:17:C8:2F:4C:EE:DC:34:B5:4A:F8:30:BD:66:5E:DF:76:40
Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
Certificate issuer: /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Certificate serial: 129B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
Manifest number: 1284
Signing time: Mon 22 Jun 2026 17:03:43 +0000
Manifest this update: Mon 22 Jun 2026 17:03:43 +0000
Manifest next update: Mon 29 Jun 2026 17:03:43 +0000
Files and hashes: 1: C5sr_BxrLAlndq91fTrxRUfkPnI.crl (hash: HkEN7bhg9yDGSyH7VcHHPKCKdMkaphC1+lnA7qtaAnw=)
2: 60FCDED2F48F11E89651151FC4F9AE02.roa (hash: oM2ZfoKfiRMESikDKbO4c1ZDLXIvdz0FiP6xcgKr7Rg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl
rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 17:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4763 (0x129b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F646, serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Validity
Not Before: Jun 22 17:03:43 2026 GMT
Not After : Jun 29 17:03:43 2026 GMT
Subject: CN=6a396aef-1ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:12:4d:43:2a:b7:53:e5:8c:fb:1d:84:bc:c0:
c0:e0:f0:2b:ac:4c:40:dd:e8:d1:1a:ae:33:df:f0:
5c:6a:c1:da:b0:77:25:79:5d:b1:44:d0:fe:e0:94:
f7:27:b7:7f:d3:1e:10:80:f9:a2:d1:b6:f2:30:19:
b1:e3:2a:45:15:57:76:ec:11:8e:c4:33:71:1a:79:
b9:60:3a:ef:19:2e:c9:89:95:06:23:d9:98:dc:f7:
2f:0d:e2:a4:f3:6b:b9:7e:1b:33:cb:af:17:ff:3f:
e6:6e:ce:af:db:fa:27:78:7d:93:ab:8d:1b:5a:31:
42:fd:53:3e:72:8e:f4:5a:82:e6:a3:50:2c:88:09:
99:91:7a:aa:c0:d8:14:62:4e:0f:cc:2e:4c:e2:68:
54:26:02:9c:84:b3:c5:3e:a0:f0:10:20:3d:8a:f8:
bb:bd:14:22:b8:20:52:a2:07:24:a1:3e:a7:f3:65:
cb:08:fb:f1:93:c4:9a:9b:a9:f7:e2:ff:63:52:5e:
92:10:63:85:bd:39:ff:36:be:2b:83:21:50:d6:a0:
ae:fe:6c:4d:6e:c0:4c:1f:75:0c:3c:dc:b7:84:e6:
f2:3c:48:d3:47:88:49:03:a6:37:e5:a7:67:d9:ef:
da:5b:4b:f5:52:cc:52:89:c7:b3:25:f5:fa:4f:8d:
87:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D7:54:17:C8:2F:4C:EE:DC:34:B5:4A:F8:30:BD:66:5E:DF:76:40
X509v3 Authority Key Identifier:
keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:77:8c:b2:1c:a2:43:a7:eb:41:a2:c0:7d:1b:9b:df:3d:39:
4f:a5:e9:3d:f6:fd:a4:85:b2:0d:df:64:3a:d1:fe:19:45:37:
d1:36:71:76:36:0c:39:bc:4b:ab:31:aa:24:23:13:3d:31:fc:
0d:8d:f4:d5:5f:12:a1:a3:6c:f9:1f:08:cc:fe:ba:df:66:f1:
8b:06:9e:70:9e:df:52:43:e8:48:e6:7a:7b:f5:e2:7d:94:4f:
1f:e9:a9:e0:a5:e7:07:2d:d9:6c:62:b8:e4:c8:86:89:3f:f7:
8b:d8:99:d0:e6:f0:9d:90:2e:c2:2c:21:24:81:14:c3:e9:01:
73:b1:26:be:d2:7f:75:43:59:24:88:c4:9d:1e:79:fc:4a:4b:
e4:0c:ce:ea:4d:83:13:e8:69:b0:ab:15:95:ae:13:60:ea:84:
0d:f2:61:5e:00:f3:5f:b4:89:49:a0:dd:8f:c9:ad:4e:e2:0b:
f6:a6:b5:57:36:97:35:77:cb:a1:00:93:04:16:18:71:05:3b:
ba:eb:be:95:38:86:1b:ad:de:76:0c:55:81:b0:40:54:d1:e3:
cb:3a:0e:49:54:2a:50:17:d1:96:e3:ff:e1:eb:27:55:a6:33:
81:34:1d:f0:1d:7b:eb:f5:b9:ff:20:a6:43:06:f9:35:91:59:
a2:6a:8c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:30:19 2026 by rpki-client