
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
File: 5pLFtgs-8cIERDn8OQrVbcPLzWM.mft (raw, json)
Hash identifier: vdHOwzs7NSTpX9rdgw6x47xsjQpGTPLLEYPpO9ypDSw=
Subject key identifier: 41:8D:32:D2:E0:54:F7:37:60:9D:10:63:68:39:14:86:17:75:8C:1A
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 0A07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
Manifest number: 0945
Signing time: Tue 06 Oct 2026 20:58:50 +0000
Manifest this update: Tue 06 Oct 2026 20:58:50 +0000
Manifest next update: Tue 13 Oct 2026 20:58:50 +0000
Files and hashes: 1: 5pLFtgs-8cIERDn8OQrVbcPLzWM.crl (hash: 7Bl9WA7lr4l+GdBCJ/q3K5C4kkHfJdAEBdZXNzcEo/c=)
2: 215A8FDE4B9E11EEBF766C7FC4F9AE02.roa (hash: n6tcvXpr4IAe1S5u61Xx4m/84oyxH16o7/TxMhPSnE4=)
3: 8BD2406E632411F1916C95348547A888.roa (hash: KwopK0R19S1+uxlTpfk7FIN3YSZadS2BhXibwWAyPY0=)
4: 79986EE8FE3D11EFB763F62EC4F9AE02.roa (hash: b0d7KFkivg+pSQhSopB2OC7InpEaaI034fHeKJQ1XME=)
5: 244B9D1874CB11EEB3C0267DC4F9AE02.roa (hash: NgHinJNOa5WD0lzlF+pCDsZCucZ3Hfmi2lX8TWyz05k=)
6: 3E7D7BA284C211F1A7B5D86994A30FBC.roa (hash: ZMQ0Cjle4HHKJJB701TyMjkGkmfwfkaUO+r50nwpOlU=)
7: 9765FB988A5D11EE9E6AA223C4F9AE02.roa (hash: EEYzCbyeqxDaeKgknxCRHT1rePeuinavgu4aD0/oSEk=)
8: D6011C5AAD9811F1B4E8CBF46A11F970.roa (hash: b28Ex1N54w6rpGGP58z8s9hERidI1so2TC9OIUEgb5I=)
9: F3643AD6089C11F09BB44535C4F9AE02.roa (hash: h+M8yWQJoBkACzAfTIpQdErBAlAmwZgxPQ+K7UT/ZJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2567 (0xa07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Validity
Not Before: Oct 6 20:58:50 2026 GMT
Not After : Oct 13 20:58:50 2026 GMT
Subject: CN=6ac5610a-0786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:94:74:61:7b:42:10:b9:f5:28:51:35:dc:b5:
b2:29:5b:92:ec:f6:1e:ec:5b:3c:3f:68:e1:73:41:
d3:fb:7b:4d:0b:8a:39:3b:96:1b:2b:1c:f9:25:35:
9b:8b:f2:57:2e:23:6b:ba:f3:82:e3:b4:c7:41:98:
92:21:60:2a:f4:df:49:8f:f4:85:41:a5:c9:4f:00:
e6:33:bb:ca:58:ec:67:f1:a3:54:a5:09:e1:2b:f4:
a2:99:0d:47:51:86:c9:32:ee:6c:99:62:cc:e7:8b:
16:9f:ab:33:b0:8c:0f:6f:c7:77:ac:d9:65:38:fe:
91:c1:e2:6d:b0:8d:ea:fe:dd:09:ab:e8:8b:24:3a:
34:a3:b0:25:c3:9c:cc:6a:ab:6b:54:67:7c:3d:1e:
f0:be:13:08:68:0e:07:67:e0:d9:90:bf:89:05:75:
8e:31:14:db:9a:c9:f3:e6:96:68:4c:67:de:fa:13:
68:53:26:88:f5:a1:7c:08:f5:8b:e5:98:ef:28:33:
b3:e7:59:7d:27:96:bf:1d:5c:2a:7d:ec:38:ff:1d:
a1:fb:bd:2b:01:0d:9c:a5:a1:8a:8d:2a:dc:48:14:
bd:23:e4:9b:3d:3a:b9:5f:25:da:e0:89:c1:70:6a:
71:fc:25:21:07:16:14:c5:21:dc:14:b3:74:2e:f5:
51:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8D:32:D2:E0:54:F7:37:60:9D:10:63:68:39:14:86:17:75:8C:1A
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:06:8c:92:32:c9:c0:d2:e6:f1:75:df:a5:c3:61:34:c2:47:
9e:f9:40:03:c7:62:21:a5:19:78:f4:1f:06:72:35:71:d7:03:
db:05:40:e1:c7:ef:ac:9c:56:c0:62:d7:72:dc:dd:2c:20:7d:
a0:cd:2d:15:e9:6e:89:92:90:84:38:8b:5f:bd:0a:8e:33:e5:
fd:8f:30:4e:47:fc:f4:27:da:59:20:db:3e:4f:c6:9c:07:f7:
62:8f:9b:da:6e:01:02:88:29:06:39:28:c2:7f:97:b7:14:46:
a7:46:3f:ab:d5:50:ee:00:49:fb:ed:75:da:84:c8:89:58:7a:
70:a2:83:68:e6:b5:f3:c5:3b:e9:25:b6:2c:3e:d1:59:2e:7c:
9c:7f:e4:2c:84:f7:a6:0e:a4:a7:4c:c4:cb:7d:0a:09:eb:74:
9e:11:3d:fa:3a:15:29:1a:1c:89:fa:25:45:d9:b6:dc:64:ae:
56:32:f7:ee:fa:39:15:35:0a:29:c7:e9:f5:d4:fa:70:5e:df:
5e:9b:19:25:48:04:74:be:e9:a4:83:57:cd:b3:58:eb:c8:b4:
04:b5:70:a0:c7:ff:4c:8e:97:88:51:bb:7b:55:28:8b:46:0f:
03:c8:90:af:ad:81:57:c6:52:fe:21:ef:c1:58:de:ef:52:58:
14:5b:35:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QxRUExMTAvBgNVBAUTKEU2OTJDNUI2MEIzRUYxQzIwNDQ0MzlGQzM5MEFENTZE
QzNDQkNENjMwHhcNMjYxMDA2MjA1ODUwWhcNMjYxMDEzMjA1ODUwWjAYMRYwFAYD
VQQDEw02YWM1NjEwYS0wNzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr5R0YXtCELn1KFE13LWyKVuS7PYe7Fs8P2jhc0HT+3tNC4o5O5YbKxz5JTWb
i/JXLiNruvOC47THQZiSIWAq9N9Jj/SFQaXJTwDmM7vKWOxn8aNUpQnhK/SimQ1H
UYbJMu5smWLM54sWn6szsIwPb8d3rNllOP6RweJtsI3q/t0Jq+iLJDo0o7Alw5zM
aqtrVGd8PR7wvhMIaA4HZ+DZkL+JBXWOMRTbmsnz5pZoTGfe+hNoUyaI9aF8CPWL
5ZjvKDOz51l9J5a/HVwqfew4/x2h+70rAQ2cpaGKjSrcSBS9I+SbPTq5XyXa4InB
cGpx/CUhBxYUxSHcFLN0LvVRZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEGNMtLg
VPc3YJ0QY2g5FIYXdYwaMB8GA1UdIwQYMBaAFOaSxbYLPvHCBEQ5/DkK1W3Dy81j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDFFQS85QzkzMkI0ODE3
M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThjSUVSRG44T1FyVmJjUEx6
V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVwTEZ0Z3MtOGNJRVJEbjhPUXJWYmNQTHpXTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDFFQS85QzkzMkI0ODE3M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThj
SUVSRG44T1FyVmJjUEx6V00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbwaMkjLJwNLm8XXfpcNhNMJHnvlAA8diIaUZePQfBnI1cdcD2wVA4cfvrJxW
wGLXctzdLCB9oM0tFeluiZKQhDiLX70KjjPl/Y8wTkf89CfaWSDbPk/GnAf3Yo+b
2m4BAogpBjkown+XtxRGp0Y/q9VQ7gBJ++112oTIiVh6cKKDaOa188U76SW2LD7R
WS58nH/kLIT3pg6kp0zEy30KCet0nhE9+joVKRocifolRdm23GSuVjL37vo5FTUK
Kcfp9dT6cF7fXpsZJUgEdL7ppINXzbNY68i0BLVwoMf/TI6XiFG7e1Uoi0YPA8iQ
r62BV8ZS/iHvwVje71JYFFs15Q==
-----END CERTIFICATE-----
Generated at Thu Oct 8 05:27:50 2026 by rpki-client