
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft
File: 5HXUQnchUazw-uprObkBK9Ij05M.mft (raw, json)
Hash identifier: zFPc8gImnIW4dAytZvTbkQh0NjSBZeADrCpLR2w8X+4=
Subject key identifier: E7:EF:7C:0A:1E:9F:D4:D5:E9:7C:E1:DC:CB:17:F8:6F:11:34:5F:8F
Authority key identifier: E4:75:D4:42:77:21:51:AC:F0:FA:EA:6B:39:B9:01:2B:D2:23:D3:93
Certificate issuer: /CN=A912809D/serialNumber=E475D442772151ACF0FAEA6B39B9012BD223D393
Certificate serial: 0228
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft
Manifest number: 0222
Signing time: Wed 07 Oct 2026 03:18:57 +0000
Manifest this update: Wed 07 Oct 2026 03:18:56 +0000
Manifest next update: Wed 14 Oct 2026 03:18:56 +0000
Files and hashes: 1: 5HXUQnchUazw-uprObkBK9Ij05M.crl (hash: RjLR3A759ZQpux0W/FYXBNbv8Uzc52ZxlgkNh7p1RTk=)
2: 2BBE96C284FC11EEAA5EAA5DC4F9AE02.roa (hash: PBDYtXzBKsX1NmPtB32fhdWOYzhQ9QZAE+Uffi18nz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.crl
rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:18:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912809D, serialNumber=E475D442772151ACF0FAEA6B39B9012BD223D393
Validity
Not Before: Oct 7 03:18:56 2026 GMT
Not After : Oct 14 03:18:56 2026 GMT
Subject: CN=6ac5ba21-998f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:5c:75:8f:49:8b:6c:e3:7e:8c:3a:74:59:
b1:39:3b:4b:c3:81:6a:ea:e6:5c:e5:de:73:57:0b:
65:df:97:fd:cd:02:4a:41:ad:4b:04:ec:25:0e:4c:
e8:23:24:f9:18:2e:49:f1:ed:bd:96:c3:11:51:81:
8c:df:7a:d9:8a:2b:0c:c7:a0:4b:e2:d5:46:31:3d:
10:62:15:67:29:d9:cb:4e:35:84:5e:6d:d7:18:a8:
b3:d9:b3:c5:e3:93:09:06:5c:73:f1:38:bd:bc:9f:
3b:97:6b:7c:e3:37:2e:d0:6e:11:72:d2:bc:55:53:
2e:67:86:f6:31:b6:f9:2b:08:b8:ef:2b:0b:5d:08:
3e:eb:3c:30:2c:82:59:51:eb:37:55:d9:39:a0:8c:
28:bd:2b:f3:a7:25:ab:da:7d:69:3e:f2:fd:78:62:
6e:68:85:ba:84:17:da:a1:80:7b:c7:8c:85:99:52:
b7:04:79:df:1e:5b:61:c2:12:cd:db:d8:8f:c3:41:
c3:8a:bf:33:6a:49:49:d3:3f:55:c4:71:e2:0b:a4:
9c:5a:43:70:ae:29:b7:7d:41:73:a6:67:10:f5:39:
c3:b9:72:f2:25:48:9b:b1:f4:c9:70:03:9b:b6:e8:
73:a8:6e:1e:c7:96:01:78:9d:95:5b:dd:d1:7b:2e:
52:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EF:7C:0A:1E:9F:D4:D5:E9:7C:E1:DC:CB:17:F8:6F:11:34:5F:8F
X509v3 Authority Key Identifier:
keyid:E4:75:D4:42:77:21:51:AC:F0:FA:EA:6B:39:B9:01:2B:D2:23:D3:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:47:d4:65:c5:8c:8b:64:fb:ec:68:48:b8:93:71:36:83:13:
1a:54:60:f0:77:6e:43:1b:f5:fa:39:34:ed:f8:59:3c:0e:21:
97:38:c1:56:ad:be:84:e6:f1:11:18:f6:b7:e2:ea:07:ee:bd:
29:cb:43:7b:ef:62:59:5b:dc:f7:90:f5:64:cd:9e:78:43:f0:
5b:75:b0:93:4f:dc:1a:f9:1d:a1:c8:ca:c3:b4:44:2a:1b:12:
00:04:2a:be:25:de:64:59:bd:d6:1c:92:fe:8d:7c:92:3d:b0:
d5:a9:0f:60:4d:29:04:47:e9:e3:b3:f3:dc:a9:dc:18:96:31:
14:1c:12:f0:4e:81:dd:84:b2:ab:12:6e:95:34:43:2e:eb:7d:
2d:1f:f2:38:a6:34:f3:0b:8c:4f:c0:0f:2a:96:c6:84:b8:39:
1e:0b:cf:dd:05:36:a4:ca:f8:88:d8:d4:1f:bb:1b:56:50:35:
70:b7:99:ac:3d:13:1c:e2:15:6b:e3:05:52:57:2b:85:94:b5:
ca:80:c7:75:ed:94:33:49:92:4d:06:04:00:d7:05:d6:2e:3c:
97:68:92:82:fd:2c:61:d6:ff:5f:24:17:ce:4b:46:ba:ee:20:
fd:6e:e5:f2:ba:a2:8b:12:f5:6b:f9:f7:82:94:c4:70:72:ab:
23:04:54:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 10:17:47 2026 by rpki-client