
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
File: ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft (raw, json)
Hash identifier: v5VrpPFuEQm47bgg+ZROWExj72hIu3kJh/G3AfdpBEc=
Subject key identifier: 94:D5:F5:A1:10:7B:86:51:23:B7:30:E6:7D:DC:B5:C7:78:BC:D7:F3
Authority key identifier: 72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE
Certificate issuer: /CN=A915FC5C/serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
Manifest number: F0
Signing time: Fri 09 Oct 2026 07:04:40 +0000
Manifest this update: Fri 09 Oct 2026 07:04:39 +0000
Manifest next update: Fri 16 Oct 2026 07:04:39 +0000
Files and hashes: 1: ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl (hash: bUMjdoLY9vImQXPLYECyzS3MBUYSswLVQ3XXC+QzoPc=)
2: D616F9C45CB011F09DD6183AC4F9AE02.roa (hash: b7KSMqHlW/fLzJCiZxf5k1GieLFoYTeHx+A/fvcNQj8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl
rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 07:04:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FC5C, serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE
Validity
Not Before: Oct 9 07:04:39 2026 GMT
Not After : Oct 16 07:04:39 2026 GMT
Subject: CN=6ac89207-cb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c7:dd:cd:6d:3d:d6:c2:2a:e3:fd:94:51:20:
06:5f:98:c3:e1:3e:7c:83:dc:c5:fb:a4:67:80:b7:
b1:a1:fd:50:23:4a:8c:66:96:2d:ca:8c:72:ef:94:
16:52:50:d2:28:c5:71:02:fa:6d:7e:e8:1f:6a:b9:
40:d9:e7:22:7e:29:27:20:b1:dc:14:96:1d:63:a0:
28:82:32:0a:c1:37:64:ea:42:65:c3:e6:04:1d:50:
f9:81:24:fc:ef:c9:ee:7e:91:3d:da:0e:b7:e5:ee:
72:66:59:ce:dd:2d:e5:4c:33:06:1e:8c:ef:70:cd:
6a:b8:ae:44:b3:51:9e:a1:74:bc:8d:25:cc:71:ac:
0d:c0:44:b2:f0:aa:b3:10:78:2d:b2:87:9c:8d:05:
00:ad:cb:25:b4:5c:6e:db:88:20:50:9f:54:fe:0f:
a5:d7:37:24:4e:56:30:e9:46:60:68:6e:3d:c8:09:
b3:f6:26:58:71:fd:70:54:8d:70:c9:7a:0f:c7:cb:
be:4c:29:77:6c:1a:55:5c:87:6c:74:88:64:e8:0e:
94:34:c3:07:c0:6d:9d:2e:a6:6a:3f:f3:46:e8:b3:
04:bb:49:4b:0d:74:9d:7a:59:c2:8f:48:85:db:42:
86:5e:fa:b8:96:4f:e4:fb:12:49:cb:35:e4:31:19:
b3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D5:F5:A1:10:7B:86:51:23:B7:30:E6:7D:DC:B5:C7:78:BC:D7:F3
X509v3 Authority Key Identifier:
keyid:72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a9:ab:df:e9:af:a3:93:76:10:8d:af:81:17:68:f1:a0:b0:
f5:95:1f:cb:a0:15:57:0b:4c:b9:0d:15:c0:a0:7f:4c:f2:ca:
3d:e0:ef:df:de:0c:b6:af:5b:cb:f6:af:25:46:22:2d:a9:fe:
bf:41:91:97:1a:14:6d:48:0e:db:07:5e:aa:63:92:80:72:74:
4c:bb:62:e3:0f:27:d7:6d:62:63:d1:45:5d:d7:2d:b3:af:f3:
9b:33:56:d2:87:f5:06:c9:a1:49:44:dc:14:6d:5f:b2:4e:50:
7f:fa:62:bc:c0:aa:ca:0c:82:b5:15:4e:f8:4b:81:de:71:7b:
e0:e4:d3:46:e5:0d:cd:c0:c0:c5:18:ba:f6:4e:0e:f7:ea:9b:
7f:b6:e5:37:2e:7a:83:4b:71:f2:f9:6a:cd:59:40:b3:0e:25:
08:88:99:f6:a4:52:2e:81:7e:32:2a:b4:81:b4:f5:47:6d:ce:
6d:b3:80:13:97:88:f0:e8:25:ba:67:b0:e2:b5:ce:cb:09:19:
0c:b8:e0:ec:8b:28:67:95:b1:88:1a:dc:1a:0c:ce:8d:a7:0e:
24:68:9d:74:01:40:f6:75:f6:30:32:4b:23:eb:16:d2:88:f9:
ef:cb:bd:93:e7:a3:de:00:3f:68:47:26:03:8b:8d:71:2e:2e:
6d:a7:6e:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZDNUMxMTAvBgNVBAUTKDcyREFCN0NFQkU4QTdGMjc4OERFNzgyRURBNzAxRTQ2
N0Q4Qzc4REUwHhcNMjYxMDA5MDcwNDM5WhcNMjYxMDE2MDcwNDM5WjAYMRYwFAYD
VQQDEw02YWM4OTIwNy1jYjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2MfdzW091sIq4/2UUSAGX5jD4T58g9zF+6RngLexof1QI0qMZpYtyoxy75QW
UlDSKMVxAvptfugfarlA2ecifiknILHcFJYdY6AogjIKwTdk6kJlw+YEHVD5gST8
78nufpE92g635e5yZlnO3S3lTDMGHozvcM1quK5Es1GeoXS8jSXMcawNwESy8Kqz
EHgtsoecjQUArcsltFxu24ggUJ9U/g+l1zckTlYw6UZgaG49yAmz9iZYcf1wVI1w
yXoPx8u+TCl3bBpVXIdsdIhk6A6UNMMHwG2dLqZqP/NG6LMEu0lLDXSdelnCj0iF
20KGXvq4lk/k+xJJyzXkMRmznwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJTV9aEQ
e4ZRI7cw5n3ctcd4vNfzMB8GA1UdIwQYMBaAFHLat86+in8niN54LtpwHkZ9jHje
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkM1Qy8zNjM3ODhFQzVD
QjAxMUYwQjc0NDI1MzlDNEY5QUUwMi9jdHEzenI2S2Z5ZUkzbmd1Mm5BZVJuMk1l
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N0cTN6cjZLZnllSTNuZ3UybkFlUm4yTWVONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RkM1Qy8zNjM3ODhFQzVDQjAxMUYwQjc0NDI1MzlDNEY5QUUwMi9jdHEzenI2S2Z5
ZUkzbmd1Mm5BZVJuMk1lTjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa6mr3+mvo5N2EI2vgRdo8aCw9ZUfy6AVVwtMuQ0VwKB/TPLKPeDv394Mtq9b
y/avJUYiLan+v0GRlxoUbUgO2wdeqmOSgHJ0TLti4w8n121iY9FFXdcts6/zmzNW
0of1BsmhSUTcFG1fsk5Qf/pivMCqygyCtRVO+EuB3nF74OTTRuUNzcDAxRi69k4O
9+qbf7blNy56g0tx8vlqzVlAsw4lCIiZ9qRSLoF+Miq0gbT1R23ObbOAE5eI8Ogl
umew4rXOywkZDLjg7IsoZ5WxiBrcGgzOjacOJGiddAFA9nX2MDJLI+sW0oj578u9
k+ej3gA/aEcmA4uNcS4ubaduLA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 13:17:20 2026 by rpki-client