
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
File: keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft (raw, json)
Hash identifier: +GwE8+w/pcn765mkdIBvWh3GEfbYhxBvxix9LGSzbR8=
Subject key identifier: 45:44:AA:7D:A0:5E:68:1F:9A:F3:FA:02:61:AD:68:16:D4:5A:62:83
Authority key identifier: 91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A
Certificate issuer: /CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A
Certificate serial: 05C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
Manifest number: 05B2
Signing time: Sun 04 Oct 2026 23:12:05 +0000
Manifest this update: Sun 04 Oct 2026 23:12:05 +0000
Manifest next update: Sun 11 Oct 2026 23:12:05 +0000
Files and hashes: 1: keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl (hash: srXgC96pU95k3WfUELIJm8ypgDfkWUj7W+zlWXV7wO4=)
2: C52B4E0A3FE011EF88794913C4F9AE02.roa (hash: ly19W/Muv8BDmpRPmS2Fe3o0q7TToeFH9ObD8f2QW9g=)
3: 1295B5943FA611EF94664041C4F9AE02.roa (hash: hapzzVKt9oxlCLEwYHK4MTLp4PI8BfiasqodqBtyfb4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl
rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 23:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1476 (0x5c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ACAC, serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A
Validity
Not Before: Oct 4 23:12:05 2026 GMT
Not After : Oct 11 23:12:05 2026 GMT
Subject: CN=6ac2dd45-65ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:41:63:88:90:c3:38:55:1f:fc:49:d3:ad:
55:f3:70:ce:ca:9b:20:65:7a:bb:9b:19:0c:e7:a8:
b5:31:85:c3:f4:02:91:5b:7f:8d:bd:e5:31:58:46:
6c:2c:94:aa:93:c4:3b:aa:9b:2b:96:9f:ad:0d:5d:
55:bd:0b:1b:b8:18:65:ae:e9:29:6d:7c:2b:0c:b2:
23:fe:c4:96:01:ee:ac:27:64:65:5d:e4:5e:84:5c:
7a:c9:03:84:53:5c:3b:6c:25:33:90:57:66:1c:48:
6d:ff:10:37:01:de:e3:88:85:aa:c0:e7:41:0e:24:
69:69:bd:8b:1d:e4:d1:45:b9:a2:45:1a:76:b0:db:
b0:44:ab:be:90:dc:e7:33:7d:0e:28:ff:56:eb:22:
75:f3:c5:d8:a2:04:58:0d:8f:8e:82:39:8b:f0:89:
21:ae:27:d6:3a:0f:0f:46:e0:c5:8d:6a:69:f6:32:
c6:86:35:da:7d:0a:a0:be:7a:71:ee:a6:ec:b7:1e:
0f:9e:63:2b:55:5e:b9:69:cf:d1:c2:be:02:1d:41:
35:b4:15:33:32:4a:f9:5c:fc:ab:01:27:e4:6a:41:
58:0f:12:48:49:bf:35:a8:6b:16:1e:37:b3:97:63:
85:9c:37:58:f8:70:40:67:04:07:9e:fc:88:b3:06:
7c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:44:AA:7D:A0:5E:68:1F:9A:F3:FA:02:61:AD:68:16:D4:5A:62:83
X509v3 Authority Key Identifier:
keyid:91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:96:f3:b5:ed:14:fa:a4:dd:98:28:f2:14:12:ed:99:a2:96:
a1:05:49:d7:43:2c:ce:e2:c9:16:8b:63:a8:60:9b:06:c9:df:
25:de:c9:57:80:fd:7c:01:eb:ba:5e:7b:48:74:1a:e7:74:23:
0f:50:92:22:26:df:80:1f:66:2d:38:94:c8:b1:fb:75:8e:3a:
b0:d4:83:fc:2e:65:80:5b:a0:46:1e:81:68:bd:5a:d3:a9:80:
fa:bb:72:b3:17:33:b1:ec:d0:71:1d:f9:22:13:e2:4e:ed:30:
eb:f4:2a:49:f1:5d:d1:49:cf:89:8b:fd:a9:dc:60:d5:ed:58:
c9:13:c0:a4:b0:84:a6:6f:12:20:39:24:a9:ee:fc:03:4e:2a:
54:f9:5b:a3:1c:a6:72:85:44:f8:41:e7:23:d1:b4:2e:0d:46:
87:e9:61:e0:d8:a0:f8:ed:dd:99:9c:3d:be:29:4b:b0:11:8d:
18:c0:af:99:8c:01:5f:b8:f0:2a:fb:83:9e:7b:29:67:2e:e6:
5c:18:f7:53:77:1d:ab:6d:40:d3:ef:56:5a:d3:b9:ea:a7:2e:
5e:7b:d3:52:49:b7:4c:73:ca:ed:88:6f:ce:45:14:f9:9a:8a:
a0:f2:45:c3:05:08:e7:c1:a5:70:cb:0e:b9:23:d6:d6:87:b0:
3f:f2:b9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:31:29 2026 by rpki-client