
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft
File: M5IbTpqJQaWGu92a-LGIWo8iX6I.mft (raw, json)
Hash identifier: 89DisdWbqMow5i7xfeZFRLVocZqnilWhup4x8sbQFck=
Subject key identifier: 53:20:96:B5:4C:FC:7B:5C:F6:5E:6D:8A:44:AC:04:71:27:71:EF:01
Authority key identifier: 33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2
Certificate issuer: /CN=A9195A3A/serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2
Certificate serial: 356D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft
Manifest number: 356D
Signing time: Tue 18 Aug 2026 15:03:29 +0000
Manifest this update: Tue 18 Aug 2026 15:03:29 +0000
Manifest next update: Tue 25 Aug 2026 15:03:29 +0000
Files and hashes: 1: M5IbTpqJQaWGu92a-LGIWo8iX6I.crl (hash: PvtWHGpHqocqGmErVcUE91pqvLSaPG8dZICUlzoRNhI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl
rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 15:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13677 (0x356d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195A3A, serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2
Validity
Not Before: Aug 18 15:03:29 2026 GMT
Not After : Aug 25 15:03:29 2026 GMT
Subject: CN=6a847441-93a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:aa:63:af:e7:7d:d2:f9:5d:ac:4a:49:ef:0e:
aa:4d:44:00:aa:b4:62:6a:71:df:7d:d3:38:74:be:
4b:1c:34:c3:0f:2e:d6:a3:a4:a4:02:9c:d2:c3:b2:
63:9b:15:66:b3:71:83:01:7d:c9:b7:83:3d:3c:98:
c9:de:ff:0b:29:64:08:90:01:c8:e3:af:99:92:07:
73:35:6a:b1:c4:04:d9:b9:d1:9d:5b:11:ea:95:02:
e2:6d:db:ea:7b:c0:f0:3e:92:b6:e9:86:1f:ea:19:
1f:01:90:09:74:c4:5e:47:f1:fb:71:bc:ff:d7:34:
fe:ff:61:41:ad:d8:26:b2:91:30:69:14:84:84:b4:
34:1b:12:9a:ff:91:e0:84:bb:a0:f0:77:f1:98:75:
1b:cf:79:d4:4e:8f:36:8b:d4:33:a5:8e:a8:51:1f:
5d:e3:92:77:fa:0d:22:e0:90:5d:9b:0e:8c:fa:b3:
18:6c:94:a8:a4:f0:57:54:de:0c:9a:e2:51:77:41:
bf:fb:89:1e:7f:c3:44:ad:2c:5b:03:ae:98:16:b8:
e7:71:cf:92:fb:9a:d4:ae:ce:13:0e:8c:41:28:67:
02:07:34:00:77:17:c4:25:48:d1:5d:f8:4d:4b:60:
e0:f8:19:e9:d7:d0:d4:e9:90:51:6e:68:00:67:6e:
6e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:20:96:B5:4C:FC:7B:5C:F6:5E:6D:8A:44:AC:04:71:27:71:EF:01
X509v3 Authority Key Identifier:
keyid:33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:ac:71:5e:8c:c1:89:77:c4:16:b9:1b:c2:03:64:cc:85:69:
97:5f:dd:4d:86:08:a0:db:aa:b8:6d:19:de:81:fb:c9:a4:95:
06:58:c4:05:ac:d6:ec:83:74:38:d4:13:44:1f:fb:5f:3f:a2:
6f:c4:3c:19:ac:66:e3:21:46:e0:12:c3:09:59:c7:5c:12:22:
47:da:16:d5:6c:e8:b0:02:a3:94:28:14:c1:ca:3f:d6:36:81:
6d:51:4c:fc:88:29:69:73:34:63:30:46:91:e5:39:de:0e:6d:
ef:8b:90:0f:8f:64:69:a9:5b:29:4e:13:f8:34:3a:64:43:50:
62:6b:9f:d4:7b:23:73:d9:3b:d4:b1:7e:59:3d:7d:ba:a6:bb:
40:03:9c:30:0d:0d:20:3e:5a:6d:91:f9:34:ba:f0:1e:ad:f1:
5e:d7:e4:d9:3e:cc:63:78:33:c4:f9:5f:37:ab:15:c9:e2:3d:
2a:64:bc:02:55:b4:fe:3f:c9:93:85:73:07:fe:2b:70:5b:94:
ac:32:86:8e:38:c7:f4:b4:d4:f6:3a:12:18:b7:96:ad:e6:c7:
f5:5b:11:ac:07:33:f5:01:24:f8:07:58:19:8e:3b:91:14:41:
e1:1d:de:67:d8:44:98:ef:60:77:3e:6a:b3:98:a3:3f:88:ab:
a7:e1:ce:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:42 2026 by rpki-client