
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
File: r-cn5CCdzfgnYldLXjPICDeHoY8.mft (raw, json)
Hash identifier: 3fyTK2lavI+rrnnqXQ1ptTxEs/Zs3STBH0u+EbRtHfM=
Subject key identifier: F6:CC:B9:55:83:BC:D7:CC:B2:3E:98:9A:21:88:CD:E2:7F:D5:A5:A6
Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F
Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F
Certificate serial: 1FC7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
Manifest number: 1F56
Signing time: Mon 26 Oct 2026 16:00:50 +0000
Manifest this update: Mon 26 Oct 2026 16:00:50 +0000
Manifest next update: Mon 02 Nov 2026 16:00:50 +0000
Files and hashes: 1: r-cn5CCdzfgnYldLXjPICDeHoY8.crl (hash: o4baTs7dAlTMslIN7zSBZ4ru/ZFnVeXKMLCyPfXhTPQ=)
2: 7EFB8A6E885311E6BDE50A80C4F9AE02.roa (hash: yrw/Wliea2v/nhT95C1H6CHn+Y9xHNL1DsyB2AthFt4=)
3: 5C6A7BE6E1F511EEA08A5519C4F9AE02.roa (hash: orzccmiNSicAop/OpjFFJ2tGr1eSdfKFi4jU7YLYc30=)
4: CF946690E5E711EE89AF4E5AC4F9AE02.roa (hash: R0F5zzc+BpzP1/ZU/NVRkNdsAgNiR161974QmuBaZJM=)
5: 882AC358E1F511EE9188A919C4F9AE02.roa (hash: 8+HVn+1aDWLHtIQalu+KT6alxAIGWOxLQB3VgePG+TU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl
rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8135 (0x1fc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AE5F, serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F
Validity
Not Before: Oct 26 16:00:50 2026 GMT
Not After : Nov 2 16:00:50 2026 GMT
Subject: CN=6adf7932-41f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f7:86:e4:e0:ac:5f:89:f8:03:a5:80:10:ea:
00:d6:01:3a:4b:3a:22:5a:a6:1d:a5:c1:5a:39:62:
dc:e1:e2:80:77:8d:9f:77:f0:d9:a0:59:81:e6:16:
7f:87:a4:f9:6b:0d:6a:f4:1a:63:f6:53:ac:df:6d:
3a:79:71:b0:74:66:5c:0d:49:7d:70:f3:d4:91:8d:
ab:68:c7:e3:18:c1:35:4a:65:c9:eb:38:c2:69:b5:
8b:d2:c2:4a:a9:ca:ff:ab:bf:3d:b8:ce:42:0f:03:
1f:19:68:43:2a:89:6b:47:e5:ec:e6:2e:03:e4:2c:
e0:ac:f1:9b:d8:9b:1b:f3:e8:a7:ae:36:0f:c0:10:
4c:b8:12:7a:9e:02:c2:d1:a7:40:e9:56:0e:70:57:
29:56:fa:2b:a0:34:ab:b5:65:c5:ba:ed:14:31:d8:
c2:e8:1f:5d:a9:df:6f:6d:95:90:9f:cd:66:f0:e2:
3b:a6:f3:fa:80:68:44:7e:97:82:1d:b5:6d:64:9d:
96:96:42:05:d2:10:9a:bc:f1:cf:54:e1:99:76:a1:
be:a4:39:3f:c7:6e:7c:13:dc:17:64:4c:14:a9:18:
75:f4:36:b7:46:9e:ce:4a:e2:39:cc:2b:60:4c:9b:
43:67:4d:77:28:bd:0d:bc:34:95:4b:ae:e6:21:63:
be:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CC:B9:55:83:BC:D7:CC:B2:3E:98:9A:21:88:CD:E2:7F:D5:A5:A6
X509v3 Authority Key Identifier:
keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b0:2f:eb:6d:82:61:04:20:fd:58:c9:7f:46:ee:1c:a0:e6:
4a:b6:8d:d1:3f:65:1d:bd:61:e3:93:c6:69:fb:be:13:8a:f0:
69:53:bb:b2:b0:e7:9c:a1:32:88:ec:19:01:77:3e:cd:a2:1f:
0f:f9:40:2e:5d:35:cb:b8:42:9f:5d:a7:61:8c:2f:55:d9:6c:
87:5d:23:21:80:86:3b:71:03:9c:30:1c:f9:8e:1a:84:6b:74:
b0:80:01:94:8c:fc:e2:6e:22:2e:55:5a:a7:af:e2:1f:e0:1b:
57:c9:73:75:ec:fb:46:fd:3e:98:71:cf:25:2d:10:b4:a9:2f:
c6:e0:48:c3:48:34:27:04:b0:d4:4c:7a:e9:73:08:01:f0:11:
28:d6:3b:3b:7a:64:87:60:e3:7a:a5:87:a4:fd:2f:f5:9b:2e:
70:0f:98:55:f1:e2:17:7e:f3:72:6c:bc:f5:c4:33:c7:84:e1:
fc:8f:9c:77:62:08:9e:15:c9:79:db:5e:b1:93:30:33:39:64:
97:f6:f2:a0:09:d4:95:c8:34:dd:fb:7c:40:70:2f:68:22:72:
10:ee:13:70:88:cc:62:3a:a6:a7:75:c8:d2:01:6f:f5:0e:dc:
78:25:9d:a9:9a:e0:fd:41:23:c5:9c:ec:b6:da:15:89:fd:42:
48:f5:14:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:31:11 2026 by rpki-client