
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft
File: sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft (raw, json)
Hash identifier: u/eYAujd3p72fsNuNkfQwmGSUNCj+EX/htAjscOlP60=
Subject key identifier: DA:D0:20:76:96:A9:20:33:83:DD:E4:CE:8C:6F:23:4F:75:8C:F1:45
Authority key identifier: B2:9E:45:31:16:74:5C:87:4B:F0:F0:B4:72:45:98:2A:71:D5:26:B5
Certificate issuer: /CN=A911FE83/serialNumber=B29E453116745C874BF0F0B47245982A71D526B5
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft
Manifest number: 81
Signing time: Sat 03 Oct 2026 08:25:40 +0000
Manifest this update: Sat 03 Oct 2026 08:25:40 +0000
Manifest next update: Sat 10 Oct 2026 08:25:40 +0000
Files and hashes: 1: sp5FMRZ0XIdL8PC0ckWYKnHVJrU.crl (hash: MEjiQIVDOrTbahY5+S1DU7SKGVp788l5fc/bcDvO+jI=)
2: 1CF20536001311F1AC4D12CC406F56BC.roa (hash: g4Ud8ofVkhlMNmXk1DVd80+pMPQpIN+9NWS+U7ei8zU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.crl
rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 08:25:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FE83, serialNumber=B29E453116745C874BF0F0B47245982A71D526B5
Validity
Not Before: Oct 3 08:25:40 2026 GMT
Not After : Oct 10 08:25:40 2026 GMT
Subject: CN=6ac0bc04-0a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b8:30:7f:73:e2:92:f7:3c:c3:fc:e3:c9:f8:
de:b4:d7:e2:61:8a:68:28:28:2a:ed:4b:55:ce:dc:
69:26:5f:13:b4:bc:06:60:b8:0d:3e:85:96:bc:56:
da:8a:d4:b8:cd:44:38:53:99:c2:fb:e5:fa:ab:56:
79:47:c6:ec:b9:5e:04:20:57:15:a5:33:6f:5d:50:
fb:2f:2f:e4:42:27:12:20:96:ee:a1:87:bb:39:dd:
f9:62:44:41:29:ca:c2:a2:40:27:a7:63:58:75:ef:
aa:dc:2d:39:91:54:d7:16:3b:86:4f:2e:bb:e5:4f:
e5:9e:63:42:47:a1:78:23:f7:dd:8f:26:e1:f7:fe:
c5:ce:75:a6:9b:f6:1e:67:98:ee:1c:26:14:bb:f6:
45:76:52:ea:6d:0b:df:c9:b8:93:19:d7:19:dc:1a:
6b:a0:10:7c:7d:ee:5d:95:6b:10:26:aa:00:cb:b9:
ba:bb:6c:9b:73:ef:59:f2:53:c9:57:cc:12:fc:70:
c0:53:cf:1d:7e:aa:ba:4c:79:39:a3:7c:89:42:03:
01:6a:75:da:d2:b4:34:a6:eb:8a:7d:ec:e4:98:62:
9c:20:bb:09:69:14:e6:c3:b7:56:ab:ba:97:64:36:
7c:11:ce:da:f0:0d:7a:3d:d4:21:a0:88:8e:40:7d:
f3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D0:20:76:96:A9:20:33:83:DD:E4:CE:8C:6F:23:4F:75:8C:F1:45
X509v3 Authority Key Identifier:
keyid:B2:9E:45:31:16:74:5C:87:4B:F0:F0:B4:72:45:98:2A:71:D5:26:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d9:bd:10:22:a9:bb:77:1b:75:74:dd:0a:4f:4f:67:1a:1b:
03:6b:a8:c2:ca:67:a1:b1:68:ed:f3:2d:94:d4:56:3b:11:b5:
52:4a:a4:75:76:42:89:63:c5:ff:a2:fc:94:2b:56:81:f2:f8:
45:98:67:e1:09:8a:47:9a:99:05:3c:eb:f0:d9:0b:b2:2a:65:
71:c0:47:75:e2:cf:f3:ed:1e:45:1a:a4:b4:32:5c:bd:6a:0a:
20:0b:c0:17:cb:0c:bc:1f:a3:0f:12:41:09:f1:d1:a9:b9:0b:
f1:78:1d:e0:fb:ae:be:92:0e:b3:95:ac:c2:51:be:f9:7f:b3:
fe:8b:65:b3:56:bc:61:72:93:42:1d:dd:83:bc:11:5e:d3:c7:
2e:eb:95:e3:e7:d1:7c:14:28:96:b5:a9:19:e1:28:6a:ef:80:
51:87:8e:d7:5f:55:2c:de:82:93:88:c8:98:d6:f6:ea:d8:ff:
41:6e:ff:d6:46:d1:65:97:3e:b1:20:b6:12:76:1b:c6:c6:9a:
ed:31:b3:8f:65:da:34:c8:18:99:d9:8d:d1:74:ac:e6:62:6c:
2f:03:d0:a4:8b:ed:35:a5:77:cd:62:d2:89:75:4f:a6:31:bf:
9d:81:98:0c:37:6a:0d:0b:5c:b0:10:f3:94:1a:dc:3a:15:65:
0c:cd:68:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:35:33 2026 by rpki-client