
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft
File: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft (raw, json)
Hash identifier: rVBRoeLQu/W38v5IaFxXK7kyEwWNibGrngoVm/lRV58=
Subject key identifier: 64:6A:0F:8A:E6:0D:FA:BC:D8:0D:EB:C7:24:E5:0B:31:FF:D0:FF:0C
Authority key identifier: E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1
Certificate issuer: /CN=A914C7F8/serialNumber=E50963D70468727356B78B7FC4380974429B64E1
Certificate serial: 0298
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft
Manifest number: 0285
Signing time: Tue 27 Oct 2026 02:12:12 +0000
Manifest this update: Tue 27 Oct 2026 02:12:12 +0000
Manifest next update: Tue 03 Nov 2026 02:12:12 +0000
Files and hashes: 1: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl (hash: Unwo8kozTI8gcS/uCd4zp/5bG+I8PKPQiL3ia+bjeX4=)
2: 960C9032C72711F0BD856955C4F9AE02.roa (hash: qtYHDF7MGXV3CNn5trlAgoV0imEdai1To/X8YfcEDdc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl
rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 02:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664 (0x298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C7F8, serialNumber=E50963D70468727356B78B7FC4380974429B64E1
Validity
Not Before: Oct 27 02:12:12 2026 GMT
Not After : Nov 3 02:12:12 2026 GMT
Subject: CN=6ae0087c-f10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4b:93:8e:0e:04:e5:99:82:a1:7d:b4:9d:d7:
73:f9:50:cc:c0:4b:93:b0:de:aa:b2:77:0b:a8:8d:
84:d1:d7:24:f8:12:ee:71:8a:8f:c2:e9:19:f1:0c:
77:7b:64:87:9b:8c:70:c8:9e:4d:2c:e2:86:ef:92:
8a:aa:26:6a:dd:71:85:80:4c:0a:0f:23:75:44:51:
60:e3:ab:91:ce:50:39:40:4a:7f:84:50:b4:d5:9f:
77:a8:43:8d:53:26:d8:65:65:b4:f3:a0:4e:a9:e5:
bb:27:eb:6f:24:0f:60:b2:5b:c3:af:d7:9b:02:4f:
56:3f:24:f7:52:49:cd:17:f7:63:6c:e0:16:7a:91:
46:ed:6d:2a:cf:69:b9:a4:41:04:ca:2b:44:89:6c:
0e:bd:96:b0:96:c4:09:23:b7:9b:0c:b2:4d:36:18:
7b:4a:b9:91:85:1f:57:2a:24:ff:63:c3:7a:78:f7:
b4:e7:f1:59:af:5f:0a:48:56:fa:9e:f2:5a:8f:db:
d6:bd:31:ac:35:3e:6a:a9:e7:55:7c:bc:33:d2:11:
71:87:fb:9d:bb:4e:4c:ca:fe:6e:51:48:70:77:4f:
4a:ac:c0:c7:9d:3d:e8:9b:3c:b8:4a:4e:76:a7:f0:
d4:ce:6f:1b:8a:e2:22:13:11:a9:16:5d:fe:2a:89:
10:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6A:0F:8A:E6:0D:FA:BC:D8:0D:EB:C7:24:E5:0B:31:FF:D0:FF:0C
X509v3 Authority Key Identifier:
keyid:E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:a0:d1:62:d8:c6:59:16:11:18:21:3b:06:f5:b5:ce:ce:b5:
c4:f6:a9:bf:fb:c8:06:3f:3e:fd:e0:b3:45:ab:4f:2f:c6:a7:
f5:1b:3f:bf:bf:1c:dd:28:34:7e:50:bd:2a:ee:f3:26:4e:8c:
01:9e:58:71:09:23:42:6e:d1:5d:29:f8:3a:3a:58:bc:32:c1:
23:b0:bb:d0:7e:9e:91:67:8a:90:4c:7e:af:08:09:1a:1a:e1:
11:53:77:5b:48:7d:30:83:c5:c1:4d:5d:8c:d4:74:ee:ed:68:
3c:a8:e5:96:f4:33:ae:e7:8f:67:88:20:03:5c:d1:e5:8a:c4:
50:96:d7:77:7c:99:0b:58:65:05:37:df:9c:aa:e2:ba:4f:ed:
cd:5d:0a:da:ef:7f:5a:ae:53:66:c5:dc:bf:94:3f:e6:22:ab:
a7:0c:52:a8:6b:71:de:ec:8f:5f:e6:6c:08:fd:93:41:2d:c9:
6f:6f:bf:03:34:ea:1a:1d:5c:6a:26:b2:8b:ac:58:4a:6b:7f:
a4:57:7e:fc:f3:ad:65:af:73:5f:e8:61:d1:84:23:a1:ef:38:
48:fb:e3:88:b4:37:15:f5:ce:19:15:52:8e:56:56:0d:dc:01:
26:d5:1a:6d:0c:d2:90:87:83:20:fd:70:f0:1c:4f:ba:58:65:
2c:2e:b9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 04:45:09 2026 by rpki-client