
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
File: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft (raw, json)
Hash identifier: rCa2P+7OaBY4R9VT83RxLev06DflnvbizSIJ3mBH1vE=
Subject key identifier: A9:05:F7:AD:F7:41:4A:F4:38:CC:74:EA:59:7C:A6:CC:85:24:B6:C0
Authority key identifier: E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80
Certificate issuer: /CN=A91E554A/serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680
Certificate serial: 0181
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
Manifest number: 017A
Signing time: Mon 19 Oct 2026 05:25:21 +0000
Manifest this update: Mon 19 Oct 2026 05:25:21 +0000
Manifest next update: Mon 26 Oct 2026 05:25:21 +0000
Files and hashes: 1: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl (hash: GaKPyHnGNYeSKTkRB5tpnVv28Agln+E6daX1xnDOK88=)
2: 388A91E0985A11EFA6912B0EC4F9AE02.roa (hash: uSJSVKQ2eb5T6Rs3qb48PEQhXusBNfHf9wMlJhiue14=)
3: qhZ3tYlUNLx4CvsqN-C1p0jr5DI.asa (hash: wis4l1kG1hTGz1dDj73IbjwvA1kqvI9WiQ+qWwiJkF8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl
rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 03:49:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E554A, serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680
Validity
Not Before: Oct 19 05:25:21 2026 GMT
Not After : Oct 26 05:25:21 2026 GMT
Subject: CN=6ad5a9c1-287d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:4e:01:13:94:e4:0c:b6:7c:d2:57:c7:2a:
88:ae:73:9d:f1:14:11:f5:3b:13:ca:2c:eb:25:58:
47:0c:1e:e5:12:24:21:d7:e4:2c:6b:1c:c8:56:15:
38:fd:7e:58:91:7c:a1:40:94:c6:e8:86:98:60:17:
6e:a5:5b:9a:53:dc:ef:ba:d0:88:1d:e1:af:7b:41:
f7:e8:f0:00:90:db:fa:76:8e:34:c4:5a:b9:75:88:
64:a5:af:39:dc:c9:20:a9:9d:81:30:ec:0c:09:b9:
0f:a6:3d:e8:86:6f:d3:68:e1:34:6c:0c:66:ad:77:
77:c0:a1:9c:14:f7:d1:c5:6f:ce:a0:45:72:e0:49:
04:fb:67:3e:6b:e4:80:30:cb:31:53:a4:c2:99:f1:
74:9f:44:5a:03:9c:6c:ac:44:b5:11:b6:c9:26:9e:
57:2a:7e:f2:b5:6a:c8:88:c1:fb:a6:f7:fd:0a:7f:
ea:e7:fa:d0:e9:71:7f:32:8a:cd:84:a4:63:f1:26:
53:9e:9a:c2:01:66:1d:e7:00:fe:66:30:12:88:d6:
c7:cf:5d:a5:af:a1:ab:51:2c:af:14:56:43:bb:f5:
6f:2a:86:fd:1d:df:be:a9:ec:89:e1:fa:e6:d9:a5:
94:b7:af:01:d1:b9:63:66:ef:a4:59:8f:6e:b4:41:
b9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:05:F7:AD:F7:41:4A:F4:38:CC:74:EA:59:7C:A6:CC:85:24:B6:C0
X509v3 Authority Key Identifier:
keyid:E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:30:96:d5:86:ef:5d:4e:75:54:e8:67:f1:22:8f:63:83:bb:
f9:43:92:be:71:c8:ac:e5:d3:0c:22:30:96:3f:2f:34:a0:e3:
3e:3c:c7:2e:10:6f:a1:63:0f:a6:a8:41:a5:63:1a:42:89:15:
54:32:88:32:3f:7b:fd:12:24:37:16:dd:e1:1d:4e:fc:df:d7:
07:5b:86:1f:39:2e:2e:ba:27:3b:d0:38:88:74:79:1c:41:3e:
9f:69:7d:99:b0:20:46:90:aa:4a:0f:de:25:f6:d5:fd:76:54:
2b:a1:23:60:9d:50:00:c7:ec:c5:85:4e:bc:8c:ad:a2:d4:c5:
5e:9c:58:57:3b:68:95:25:7b:ba:fe:d3:be:65:a1:aa:4a:56:
0c:b1:fb:4b:d4:9d:d8:f0:db:68:9a:aa:2d:0f:34:61:ab:91:
bf:ec:aa:fc:b0:e2:f4:89:b8:e7:71:69:ae:06:b7:31:d9:59:
29:21:ce:c1:61:2a:e9:b3:aa:e1:46:f0:7a:52:22:c8:37:6e:
06:f7:a4:fb:4b:a8:4a:e6:41:45:17:13:16:99:63:3c:fe:b2:
d6:8a:7a:3f:83:55:07:81:7b:ce:58:4e:3e:85:8a:3a:e1:db:
18:c4:d9:f4:9a:7f:9f:75:59:6b:f0:61:2e:c4:db:56:e0:1c:
c5:72:66:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 09:18:16 2026 by rpki-client