
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
File: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json)
Hash identifier: C4T/RdMCNGdVtgTpzE4SMffZ4bCy9iwIyR9eWCzm0dI=
Subject key identifier: 9C:E4:1F:AA:E5:3D:0B:2A:E7:26:06:3C:A4:1E:75:A9:60:B4:5E:D9
Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03
Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
Certificate serial: 09AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
Manifest number: 099E
Signing time: Sun 04 Oct 2026 20:01:13 +0000
Manifest this update: Sun 04 Oct 2026 20:01:12 +0000
Manifest next update: Sun 11 Oct 2026 20:01:12 +0000
Files and hashes: 1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: 3Mot/Pf0qhdIjaWDeA/xc+5UPJY4hKYiu5qoEWp2L5Q=)
2: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: TRtCWEacfScERXGsANUVPFpqIEC3+bt+vk9acDdl/Bg=)
3: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: juRf6DKubWHLyUVCkZq0DoXL3LBiJ5IdHL3Dkg0ZIH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl
rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2479 (0x9af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
Validity
Not Before: Oct 4 20:01:12 2026 GMT
Not After : Oct 11 20:01:12 2026 GMT
Subject: CN=6ac2b089-5f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:33:88:aa:93:5b:a7:ce:ff:64:b7:0f:47:5f:
b6:96:96:9e:66:55:5e:8d:d2:ae:81:da:b5:b9:67:
0d:49:b6:84:79:a0:ce:75:a9:04:40:6a:01:42:e4:
75:c5:81:fa:27:a8:fd:2f:b4:01:4f:93:bb:27:c7:
12:00:c0:6a:77:11:62:00:94:36:c3:53:ee:6b:17:
7e:3e:07:5e:a0:6e:b5:f1:28:5f:90:a9:a3:c3:c8:
8f:cc:9e:ac:5e:55:51:84:81:29:7a:da:8e:c2:6e:
6a:e7:21:72:89:2e:5d:a1:af:8d:69:37:dd:9f:a7:
28:8d:ce:d7:cd:c6:f2:de:50:82:a2:0e:71:fb:d2:
a9:cc:5a:84:2d:d1:5a:59:01:08:43:10:53:84:68:
f2:6f:21:9e:63:9a:87:c1:5e:e6:fd:f9:64:78:70:
7d:bf:ce:e5:9b:91:56:dd:6d:79:43:26:9e:94:c8:
cc:80:17:0a:62:65:17:31:b5:58:da:c7:27:16:62:
61:e6:82:16:6c:99:a0:00:9e:92:77:d2:96:94:68:
67:63:1b:ce:d5:76:94:2a:8e:41:2d:34:71:8e:8c:
d5:88:21:44:a6:39:4a:5c:e3:88:72:97:12:10:bd:
67:3f:26:b3:b0:f0:5d:00:51:88:23:97:ae:68:75:
e7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E4:1F:AA:E5:3D:0B:2A:E7:26:06:3C:A4:1E:75:A9:60:B4:5E:D9
X509v3 Authority Key Identifier:
keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:22:06:22:84:95:7e:6d:b3:04:97:8b:96:6c:b8:24:a9:ee:
7f:cc:68:58:bc:98:62:3f:48:7d:32:8b:1a:d8:9f:f3:c5:22:
53:97:c9:3a:0d:94:1f:83:04:52:13:d9:45:7d:dd:64:07:26:
68:92:94:81:e4:5d:83:a7:32:cc:91:8f:b7:61:58:25:37:40:
12:6c:a7:0e:74:ef:65:70:de:6d:c6:d8:c0:c9:4b:66:26:6b:
a9:91:d6:21:c3:87:5b:7f:3c:23:60:f5:51:cc:d6:5d:44:e3:
f5:fd:68:23:82:8b:3c:1c:f2:08:29:24:c0:52:8f:c8:28:67:
7e:c9:85:81:de:71:db:22:b9:eb:7c:d7:53:22:88:16:42:9d:
96:3d:6f:45:b5:90:52:17:c5:84:da:a4:ac:1d:b7:66:4e:70:
7e:0d:40:6d:d9:e9:7b:b7:f6:04:7e:48:3b:32:f5:ad:ff:1b:
c3:88:c6:a4:28:14:5f:25:e2:a8:e7:d0:a1:86:94:7e:4c:ac:
26:7c:c2:cc:e0:c1:bd:18:3c:3b:79:8f:b6:0b:a3:8f:cb:71:
bc:ff:42:c2:30:64:5a:2b:fa:40:81:24:2a:cc:c5:a6:bd:bc:
ef:24:1a:73:28:4f:44:5c:4c:13:97:73:89:93:a7:e0:43:22:
87:1b:5a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:53:30 2026 by rpki-client