
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
File: _5I0f11UaIEf0lOki_xp_lcKpFA.mft (raw, json)
Hash identifier: iLahD23/2uJLntNqs87k+tKtrSXppAh1VSMYAqvjeE8=
Subject key identifier: 6A:62:2C:1D:12:AA:BF:0F:60:1C:6B:5B:2A:CB:D3:18:C7:88:93:E3
Authority key identifier: FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50
Certificate issuer: /CN=A9191769/serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450
Certificate serial: 013C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
Manifest number: 0139
Signing time: Thu 21 May 2026 05:30:12 +0000
Manifest this update: Thu 21 May 2026 05:30:12 +0000
Manifest next update: Thu 28 May 2026 05:30:12 +0000
Files and hashes: 1: _5I0f11UaIEf0lOki_xp_lcKpFA.crl (hash: IBIi/79+OdLSUYDr6iF/Ga/Y++xlhc9tAmW0+3pddno=)
2: 4D36C07677C311EF84D38A3BC4F9AE02.roa (hash: UonUgi37eGK5+UZSgpaI5VcXY/NpGaUyQWHx23St90A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl
rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 05:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191769, serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450
Validity
Not Before: May 21 05:30:12 2026 GMT
Not After : May 28 05:30:12 2026 GMT
Subject: CN=6a0e9864-7b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:eb:b7:01:80:0b:31:c6:ad:27:2b:06:74:
87:b3:67:ff:46:a2:1b:87:c8:75:f4:35:25:38:1b:
e1:16:04:64:8f:26:40:d0:be:56:32:15:1d:a3:06:
75:30:40:3a:99:88:25:8e:83:b5:f2:71:aa:4b:72:
47:90:96:d6:b7:94:1c:e4:1b:11:0a:26:c4:c9:c2:
7d:cf:8a:84:a0:2b:88:80:4d:4e:64:8c:21:03:d9:
8c:cf:9a:57:82:10:d8:e3:8c:5c:58:c0:ae:19:20:
6a:05:fc:90:96:1e:49:47:04:9c:42:05:e6:45:d1:
71:6b:a5:9c:d0:63:ce:4d:a3:cc:a4:41:76:b9:a9:
c0:54:61:d4:82:07:75:1c:dd:0e:b2:99:83:95:ad:
75:c7:36:2d:ca:88:ba:3d:2b:18:d4:e2:f1:d2:21:
84:68:39:62:e8:ba:50:de:4b:e0:29:1b:60:9f:fe:
c7:3f:ac:ff:e6:0b:9f:66:ae:ec:96:e4:af:e8:dd:
a2:f6:07:f8:e9:0d:d8:45:f3:82:6a:c8:36:f8:e5:
76:01:0e:01:7e:d1:52:bb:59:12:f1:01:e9:53:f5:
e9:c7:f9:2c:48:16:94:21:52:f8:18:c7:e2:8e:7d:
29:50:7d:ac:b1:78:fb:80:b1:31:c2:50:0b:6b:f1:
41:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:62:2C:1D:12:AA:BF:0F:60:1C:6B:5B:2A:CB:D3:18:C7:88:93:E3
X509v3 Authority Key Identifier:
keyid:FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:26:ae:31:ee:56:6d:e5:5e:12:20:10:d5:89:b3:ba:9f:37:
85:1e:2a:47:a1:b3:aa:88:23:fd:95:26:59:95:b7:99:fe:aa:
fa:e4:a8:d6:c5:34:a1:4e:08:98:4f:5e:a9:ad:60:14:88:de:
c4:ea:ab:8f:09:7d:ba:a9:f8:43:4b:53:6b:81:72:72:65:e5:
bb:6a:d3:f2:fb:5c:5a:c2:0e:ba:03:7b:30:62:cd:e2:e5:18:
e2:e3:be:a7:49:4c:d2:fd:c6:1d:48:d8:e5:d2:c2:13:d9:d5:
52:54:a5:10:c3:34:7d:a0:97:26:d2:8e:7a:f9:05:12:52:9c:
e5:1d:06:bf:b7:83:7d:b9:73:48:e5:fc:40:89:7c:3c:93:17:
5d:17:ec:9f:12:56:99:b5:85:06:cc:cd:a5:bf:bd:55:3b:5e:
9c:12:90:5f:a7:0e:29:d7:88:bd:69:bc:61:46:e3:d4:fe:3b:
5e:76:4e:18:90:d6:00:40:5c:2a:3f:00:cd:01:03:f0:7d:72:
db:80:1a:f9:78:63:17:82:1a:47:03:81:78:d5:5d:94:a7:d0:
22:45:98:14:5c:3a:43:82:87:61:f5:c1:a2:32:03:a6:14:a1:
84:4b:df:17:c1:46:85:9c:67:18:49:22:56:1c:06:d5:ab:bf:
f2:e8:fc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:46 2026 by rpki-client