
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft
File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json)
Hash identifier: 4bu+ISufyCDhah9u/rerk7tsB6T0c9F3Uz9aby9SJGg=
Subject key identifier: BE:2F:13:35:06:B3:0E:F2:44:4A:F6:F3:01:58:5E:AC:BB:56:B7:F4
Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2
Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2
Certificate serial: 0467
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft
Manifest number: 0451
Signing time: Mon 05 Oct 2026 00:12:43 +0000
Manifest this update: Mon 05 Oct 2026 00:12:42 +0000
Manifest next update: Mon 12 Oct 2026 00:12:42 +0000
Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: qCkofX8Vd1b/H12Y2xJ5V8PE8u6lTpGPnyCDwFf0Uos=)
2: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: fOCLl/2VKdNa0vhoLYzfZhLV3T1IotJ/iZtFzsPrmrk=)
3: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: YL8hbnsNwgCnn/NcUCv0iY/57aut2UGD2Ataw87mmvw=)
4: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: 8QW6SQzpdf8WqjCw4pnkX0HYCGVvI59bpneK0fchnuE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl
rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 00:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1127 (0x467)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2
Validity
Not Before: Oct 5 00:12:42 2026 GMT
Not After : Oct 12 00:12:42 2026 GMT
Subject: CN=6ac2eb7b-ffb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:92:4b:fa:61:ac:5d:2a:da:45:50:78:dc:94:
eb:5a:7d:90:34:69:34:25:aa:c2:48:74:ce:56:2f:
4c:c7:ba:79:79:2b:db:31:6c:87:3d:06:0e:35:37:
ee:68:4d:06:8d:65:26:38:af:c7:1b:e6:b6:31:3f:
44:b2:c9:48:e5:e5:9e:ca:e8:b4:2f:cf:1c:a3:ee:
5e:db:c4:be:b8:5a:4d:ca:5c:b6:80:92:2d:62:14:
62:7e:b0:a2:e0:96:8b:ba:ae:76:76:fb:93:24:f9:
6b:31:6d:d9:6b:a1:6b:ae:c8:78:a8:43:df:76:2e:
6f:26:65:c2:a8:c3:b6:0d:a5:7b:ee:ef:9e:25:8f:
b5:ad:b4:5f:37:3a:d3:ba:84:1f:4b:1a:d7:e8:46:
4d:a6:67:0f:0b:34:aa:93:3e:c8:8f:20:ac:25:d3:
c6:f8:1b:04:20:06:61:4d:2e:87:c2:b7:cb:30:f3:
51:b8:ae:30:86:9e:52:b0:d4:20:8f:de:b5:14:cd:
75:e4:22:b9:d7:8b:fe:71:a5:f5:13:1e:f6:e9:28:
90:7d:fc:dc:c2:27:0b:94:1e:83:20:c1:c7:d9:ae:
c3:5a:e5:e5:43:b3:85:52:a1:9d:bf:a6:15:8e:1b:
35:09:24:be:3e:a6:41:72:5c:91:e8:29:0e:f8:fa:
25:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2F:13:35:06:B3:0E:F2:44:4A:F6:F3:01:58:5E:AC:BB:56:B7:F4
X509v3 Authority Key Identifier:
keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:47:8c:81:95:73:e2:af:35:9b:5d:3e:57:d1:e3:5a:90:8d:
27:34:e8:b1:12:ed:ad:a3:a0:0a:24:21:a3:26:c1:36:5d:27:
5b:22:50:72:64:39:27:8a:d6:25:89:6c:7f:3f:37:39:e4:be:
dd:62:fe:b8:3b:7c:f6:bf:0c:39:63:1b:1a:0e:65:89:01:bb:
e5:d3:fe:64:9d:03:28:29:48:ed:6f:fa:2d:24:ee:2e:dc:12:
c6:c0:cc:c7:6e:3a:34:0b:9a:e2:40:14:31:76:b0:1d:f6:ef:
0f:4d:9b:04:b8:ed:56:db:30:8d:d0:4a:6c:b9:d9:93:95:14:
d3:72:7f:d4:32:73:b7:13:8c:c8:2b:41:b6:7f:3f:e1:32:7b:
19:d4:f0:e5:c1:90:f6:4d:48:16:ed:98:1f:02:8c:7c:e7:f7:
4c:05:4d:35:68:65:ea:76:8e:92:20:54:a1:96:44:f5:0f:43:
ba:87:ab:98:5c:06:93:ca:c1:a1:d2:1e:d3:1f:76:9f:3e:6b:
8d:91:ac:89:81:44:dc:a4:35:72:b2:9d:c9:ea:6a:ad:11:a3:
12:8e:10:cf:41:5d:b6:e2:d4:f8:56:70:a0:55:ed:9d:25:fd:
1a:28:0f:b5:47:53:76:60:54:58:09:9a:50:de:75:94:82:89:
4f:c2:11:78
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4
NzVCQzZCRjIwHhcNMjYxMDA1MDAxMjQyWhcNMjYxMDEyMDAxMjQyWjAYMRYwFAYD
VQQDEw02YWMyZWI3Yi1mZmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqZJL+mGsXSraRVB43JTrWn2QNGk0JarCSHTOVi9Mx7p5eSvbMWyHPQYONTfu
aE0GjWUmOK/HG+a2MT9EsslI5eWeyui0L88co+5e28S+uFpNyly2gJItYhRifrCi
4JaLuq52dvuTJPlrMW3Za6Frrsh4qEPfdi5vJmXCqMO2DaV77u+eJY+1rbRfNzrT
uoQfSxrX6EZNpmcPCzSqkz7IjyCsJdPG+BsEIAZhTS6HwrfLMPNRuK4whp5SsNQg
j961FM115CK514v+caX1Ex726SiQffzcwicLlB6DIMHH2a7DWuXlQ7OFUqGdv6YV
jhs1CSS+PqZBclyR6CkO+PolOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL4vEzUG
sw7yREr28wFYXqy7Vrf0MB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC
MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh
X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy
TFE2TmFMQXZzUTZIVzhhX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa0eMgZVz4q81m10+V9HjWpCNJzTosRLtraOgCiQhoybBNl0nWyJQcmQ5J4rW
JYlsfz83OeS+3WL+uDt89r8MOWMbGg5liQG75dP+ZJ0DKClI7W/6LSTuLtwSxsDM
x246NAua4kAUMXawHfbvD02bBLjtVtswjdBKbLnZk5UU03J/1DJztxOMyCtBtn8/
4TJ7GdTw5cGQ9k1IFu2YHwKMfOf3TAVNNWhl6naOkiBUoZZE9Q9DuoermFwGk8rB
odIe0x92nz5rjZGsiYFE3KQ1crKdyepqrRGjEo4Qz0FdtuLU+FZwoFXtnSX9GigP
tUdTdmBUWAmaUN51lIKJT8IReA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 03:09:55 2026 by rpki-client