
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft
File: _5Lsi9gN-r3TbmPJr0ynqG3ealc.mft (raw, json)
Hash identifier: uKXthEn8Y4hilGA6kc8Bz0yu4RFZmQ4/N4dH0zhbEQs=
Subject key identifier: 2F:17:26:16:47:D6:3E:D5:DC:13:B3:09:C6:01:91:DD:7A:4D:2B:88
Authority key identifier: FF:92:EC:8B:D8:0D:FA:BD:D3:6E:63:C9:AF:4C:A7:A8:6D:DE:6A:57
Certificate issuer: /CN=A917D82E/serialNumber=FF92EC8BD80DFABDD36E63C9AF4CA7A86DDE6A57
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft
Manifest number: 82
Signing time: Mon 05 Oct 2026 08:14:44 +0000
Manifest this update: Mon 05 Oct 2026 08:14:44 +0000
Manifest next update: Mon 12 Oct 2026 08:14:44 +0000
Files and hashes: 1: _5Lsi9gN-r3TbmPJr0ynqG3ealc.crl (hash: 1uTITmL3e/F9eIOPClZa6F/JNtAuwFhqvfe4Xh6vV70=)
2: F98F88FA7B4D11F1B405B1A597A30FBC.roa (hash: BpqLsVApY9HvMtOZTXGvPmVaZLx/kdyWheeXJkSjNHg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.crl
rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 08:14:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D82E, serialNumber=FF92EC8BD80DFABDD36E63C9AF4CA7A86DDE6A57
Validity
Not Before: Oct 5 08:14:44 2026 GMT
Not After : Oct 12 08:14:44 2026 GMT
Subject: CN=6ac35c74-ea96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:28:a3:84:4e:21:b5:6b:dd:5d:f8:24:a5:cd:
47:ed:00:99:fd:80:da:91:32:c0:c1:d3:6d:65:7b:
e7:34:7e:04:de:e1:58:59:a8:36:f7:5b:f0:3e:55:
58:23:07:7a:14:ba:1f:1f:f7:fc:fc:dd:4b:04:58:
9e:da:c5:04:5b:1f:1d:28:58:fb:51:0c:0f:23:36:
8b:f2:2b:ca:7b:51:81:f8:e5:d6:22:7d:fe:20:79:
04:c4:ee:61:eb:ae:a9:e4:e8:03:0c:91:a3:33:3e:
e7:8f:35:65:71:b2:d2:23:e6:5a:b0:1f:70:1d:ea:
cf:99:53:f5:04:73:4b:17:85:59:fd:24:a9:68:58:
0e:5d:c3:fe:ba:c4:97:60:df:f9:3d:7b:5a:c7:97:
d5:c7:ab:c4:00:c7:64:66:b6:ab:0e:a9:fc:22:90:
e4:e8:6b:42:90:f6:7e:8e:8b:aa:80:1f:60:28:c8:
6f:ad:05:65:32:da:42:d5:72:1a:8e:53:8d:3f:be:
95:46:11:3b:10:fd:3b:33:42:0c:cc:28:26:c4:21:
14:8f:36:de:a2:00:76:2f:ac:27:8e:e1:10:b7:84:
54:e3:92:7d:a3:f2:bf:f7:68:6c:ac:0a:f2:25:4c:
c3:8e:47:54:53:a3:ec:60:eb:a4:50:61:c3:83:78:
d4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:17:26:16:47:D6:3E:D5:DC:13:B3:09:C6:01:91:DD:7A:4D:2B:88
X509v3 Authority Key Identifier:
keyid:FF:92:EC:8B:D8:0D:FA:BD:D3:6E:63:C9:AF:4C:A7:A8:6D:DE:6A:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b9:27:f9:cd:7f:39:cb:cc:16:16:60:23:ae:82:91:bc:03:
41:84:bc:a9:db:70:39:b1:bf:49:ec:a8:7e:7e:d5:16:13:f7:
f1:79:18:b4:c5:e3:ce:13:26:f6:06:ef:f5:90:4d:20:fe:09:
fc:a8:2c:b0:c6:93:ef:26:35:f9:67:ca:5a:6d:ff:70:1e:c8:
c7:ad:2d:ac:31:1c:55:3d:e2:6b:ce:d4:8a:4e:31:c6:07:3c:
ba:d2:6b:f9:1c:3c:46:f1:d5:e4:70:2f:fe:c9:87:e0:00:61:
83:4c:fe:15:3f:23:a9:89:11:60:06:46:ce:99:0c:15:52:30:
ef:a2:2d:26:5c:14:c9:44:20:d5:61:39:3d:21:ce:5d:86:e5:
a6:36:ce:a3:ab:6d:23:32:a1:2f:e7:64:3f:0d:b5:f6:4b:bd:
6a:8b:4e:f8:19:47:7b:ba:80:55:7b:01:1c:85:84:61:30:83:
c1:6d:9b:19:f2:24:5d:fc:35:6d:bf:6c:1e:a2:63:e7:ad:50:
2c:55:44:30:0f:9f:9b:1d:7e:39:29:0b:0d:28:7f:54:69:d9:
d1:d3:9f:2b:ca:53:79:25:48:50:50:ad:31:73:c4:1c:c5:2d:
a2:fc:50:14:ef:b0:93:46:42:73:82:c8:c4:44:f6:e4:b8:fb:
21:d0:57:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:05:59 2026 by rpki-client