
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
File: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft (raw, json)
Hash identifier: egLh2l7L8p765NFdDPMMeBT24A2rsv0c2Tx9pjz0NnY=
Subject key identifier: 93:59:73:3C:85:C8:0A:04:D0:DF:69:0C:E2:4F:EC:01:F4:16:EE:87
Authority key identifier: 0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14
Certificate issuer: /CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
Certificate serial: 0168
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
Manifest number: 0163
Signing time: Sat 03 Oct 2026 05:40:00 +0000
Manifest this update: Sat 03 Oct 2026 05:40:00 +0000
Manifest next update: Sat 10 Oct 2026 05:40:00 +0000
Files and hashes: 1: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl (hash: DNNSziyw8xNhWA+sDo3ov1KHuwh50Cce9OCi9zsiiLc=)
2: D1E78BC0A15D11EFBAE3332CC4F9AE02.roa (hash: J9p77l9cTrTV2+cKIR/IP5JcPOecPcSAMEsYAdt8Ff0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl
rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 05:39:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91637FD, serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
Validity
Not Before: Oct 3 05:40:00 2026 GMT
Not After : Oct 10 05:40:00 2026 GMT
Subject: CN=6ac09530-14d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:2d:31:e5:94:53:0e:f7:84:68:2d:d0:4e:
2a:b9:25:72:35:ea:12:0e:11:74:46:d2:54:39:0d:
3f:af:ef:2e:3b:50:34:28:9c:cb:da:ad:9e:87:f4:
79:96:72:b0:ad:91:54:40:31:84:37:b9:29:52:32:
3c:07:c6:8e:2a:d0:18:db:7d:00:cf:99:4d:01:0b:
ad:ee:d2:49:24:ec:63:49:c0:0f:87:78:46:cf:22:
c0:81:cd:b2:a9:d2:90:50:19:89:11:e9:fc:e4:ff:
11:af:b9:32:6d:24:25:25:1f:8f:ac:db:fd:8b:b3:
ad:c8:1f:a9:4f:82:80:2a:56:55:6b:a1:ef:59:ea:
35:1a:fa:76:3a:a9:52:1a:04:34:8e:b2:4d:e2:30:
6b:f8:29:0e:22:97:c0:87:2d:24:82:a0:04:6d:33:
81:52:b8:d1:b9:48:05:54:24:eb:02:a4:02:9b:5e:
77:b1:f0:e8:c5:6c:0e:86:37:ae:df:72:3d:1f:b3:
bf:48:00:78:da:7f:43:ef:a7:ff:f2:ee:22:5a:65:
fb:fd:fd:dc:0e:7f:a1:5d:73:b4:ce:49:3d:60:dd:
70:ef:77:8a:59:01:62:7f:66:49:7f:fb:7e:09:cb:
1b:24:82:a1:f2:c8:9a:e1:63:8f:92:6a:e4:ed:b4:
1b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:59:73:3C:85:C8:0A:04:D0:DF:69:0C:E2:4F:EC:01:F4:16:EE:87
X509v3 Authority Key Identifier:
keyid:0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b3:fa:39:9f:31:74:80:92:7d:72:dd:d0:64:30:79:76:b9:
7a:43:63:c9:6f:f8:28:20:dd:c9:f6:a9:98:e8:93:3d:5d:d9:
c3:31:8d:aa:df:cc:6f:70:e0:b3:13:fd:c5:9d:65:2a:5c:78:
76:b1:a7:db:0a:46:db:45:12:9f:00:84:29:c9:aa:3e:24:2f:
25:66:ce:6e:16:dc:87:92:e0:0f:bc:e5:8d:ff:40:2f:33:98:
76:e5:75:72:14:fc:8c:93:40:30:34:2b:d8:a7:6b:bd:5f:dc:
bc:8f:89:f5:10:d2:5f:67:93:54:c3:fd:49:07:b3:20:be:c9:
d3:e9:19:40:ab:05:d7:c5:06:20:5f:47:f8:49:ae:a6:cf:33:
7d:10:91:6a:d9:80:4b:55:6d:9f:bc:c5:1a:2a:fa:a7:c9:a9:
ad:50:a0:e9:4d:0d:17:85:38:36:3c:53:85:db:c8:ac:78:6a:
8d:e5:e1:45:7f:ea:53:cf:96:77:00:32:0f:2f:ef:d5:ce:c2:
c9:09:5a:7a:a4:75:5a:ab:97:09:61:40:34:d8:f8:79:db:cd:
b9:72:37:c9:65:c0:42:18:67:5f:60:54:50:8b:e4:67:81:fa:
65:7c:3f:2e:40:c7:69:74:86:fa:48:95:7d:04:d3:88:f8:28:
b4:a3:1c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:11:11 2026 by rpki-client