
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft
File: 5zsrW0iY5HX_6GmyTTSFzsh90Us.mft (raw, json)
Hash identifier: B5NTZUdgtKkL+u5NJuMN8ItpngYEPHIF99xeDPsG0j8=
Subject key identifier: 91:59:D7:04:4F:14:48:C0:FF:5C:EA:AD:91:12:AE:2F:6A:FE:E5:4C
Authority key identifier: E7:3B:2B:5B:48:98:E4:75:FF:E8:69:B2:4D:34:85:CE:C8:7D:D1:4B
Certificate issuer: /CN=A9181C93/serialNumber=E73B2B5B4898E475FFE869B24D3485CEC87DD14B
Certificate serial: 0240
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft
Manifest number: 0238
Signing time: Wed 07 Oct 2026 03:02:23 +0000
Manifest this update: Wed 07 Oct 2026 03:02:23 +0000
Manifest next update: Wed 14 Oct 2026 03:02:23 +0000
Files and hashes: 1: 5zsrW0iY5HX_6GmyTTSFzsh90Us.crl (hash: 1DKUCj/L+h/Gsk+tdGMwEXg8ozBqc8Fdbn+Ks1xDEE4=)
2: A2ED9CA2619D11EE8699DD20C4F9AE02.roa (hash: +lWWO9i+47FRbNqWoktdoiVNQPkrt6DN94tfbAGRugY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.crl
rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576 (0x240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181C93, serialNumber=E73B2B5B4898E475FFE869B24D3485CEC87DD14B
Validity
Not Before: Oct 7 03:02:23 2026 GMT
Not After : Oct 14 03:02:23 2026 GMT
Subject: CN=6ac5b63f-e5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:19:2f:84:ca:36:56:24:3c:ae:c4:8e:ba:
5c:ef:e9:97:dc:c0:29:16:63:8b:19:3c:8b:dd:f2:
57:15:1b:31:03:89:a2:99:d0:0e:1c:8b:d2:3a:66:
f9:0e:04:99:cc:15:31:c8:4e:97:48:23:be:74:b3:
11:c2:d8:cf:30:ee:11:0d:cd:53:0d:2c:94:a9:14:
28:46:db:08:34:a1:2c:6c:e9:38:ce:32:db:2c:07:
86:e1:d2:1c:4a:d5:2d:07:3d:46:51:5b:db:08:f9:
a8:a4:ea:33:32:72:38:81:61:1a:b2:39:ee:0e:3c:
4e:51:9d:26:c2:6d:e0:64:09:43:70:d0:2c:48:11:
02:77:24:bc:d1:40:32:5d:7e:a5:90:da:b0:4b:fd:
7e:83:41:1b:a3:5b:b1:ff:1d:e0:90:30:51:51:5d:
c2:4a:f5:10:88:04:ee:4d:60:6a:b6:ea:9c:be:27:
e8:fb:36:de:9c:0d:bf:f2:8f:56:44:02:6e:66:be:
e5:74:18:e5:b6:b0:4b:60:bc:fa:51:03:db:d8:ba:
79:f8:1c:a6:0d:66:86:41:b1:15:20:86:9f:82:e3:
83:8b:ed:8e:05:2b:4e:50:53:ab:e5:9e:02:0d:b4:
1b:f2:aa:13:a4:9c:66:64:bf:30:b7:31:57:bc:a3:
2d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:59:D7:04:4F:14:48:C0:FF:5C:EA:AD:91:12:AE:2F:6A:FE:E5:4C
X509v3 Authority Key Identifier:
keyid:E7:3B:2B:5B:48:98:E4:75:FF:E8:69:B2:4D:34:85:CE:C8:7D:D1:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ef:83:2e:48:0d:af:89:b7:2d:04:d3:b3:3f:70:5d:0c:be:
63:0c:69:73:2d:3a:70:20:01:80:c9:ba:31:e5:cd:98:1b:b3:
6d:c5:e9:c2:13:a3:b4:f0:0f:bb:e4:3b:48:e2:8d:37:36:d7:
11:50:70:69:4b:ac:d7:a3:60:b5:f6:fe:07:a0:6d:b6:5e:58:
d0:e6:e1:4d:a3:88:c2:89:1d:8f:c8:53:b0:55:a0:9b:05:ca:
db:68:be:2c:54:30:c2:ef:67:1c:b9:41:05:00:3b:44:25:51:
43:ec:8b:95:f9:79:2e:e2:02:3f:e2:be:8f:cd:6d:69:17:5d:
0d:9e:8f:c0:12:07:3f:43:4e:ed:83:23:b4:19:19:ab:e8:0a:
a7:1b:c7:a3:90:f8:ed:bc:71:48:84:ce:3b:b4:f3:44:d7:9c:
d4:ad:45:d2:a6:74:65:57:28:98:5f:a5:e6:b3:ca:b0:67:8e:
c4:c3:e6:a4:e4:0b:87:5a:e0:e6:92:04:87:06:2a:33:3b:53:
0a:f3:08:90:9e:88:b0:13:78:ff:d7:29:35:9a:71:c5:5f:0d:
30:47:db:d8:d9:19:c6:32:a3:8c:22:92:2a:73:1b:8a:03:44:
85:fd:84:f0:c5:19:29:16:c6:e2:66:49:03:0a:27:de:68:46:
65:40:44:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODFDOTMxMTAvBgNVBAUTKEU3M0IyQjVCNDg5OEU0NzVGRkU4NjlCMjREMzQ4NUNF
Qzg3REQxNEIwHhcNMjYxMDA3MDMwMjIzWhcNMjYxMDE0MDMwMjIzWjAYMRYwFAYD
VQQDEw02YWM1YjYzZi1lNWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsf8ZL4TKNlYkPK7Ejrpc7+mX3MApFmOLGTyL3fJXFRsxA4mimdAOHIvSOmb5
DgSZzBUxyE6XSCO+dLMRwtjPMO4RDc1TDSyUqRQoRtsINKEsbOk4zjLbLAeG4dIc
StUtBz1GUVvbCPmopOozMnI4gWEasjnuDjxOUZ0mwm3gZAlDcNAsSBECdyS80UAy
XX6lkNqwS/1+g0Ebo1ux/x3gkDBRUV3CSvUQiATuTWBqtuqcvifo+zbenA2/8o9W
RAJuZr7ldBjltrBLYLz6UQPb2Lp5+BymDWaGQbEVIIafguODi+2OBStOUFOr5Z4C
DbQb8qoTpJxmZL8wtzFXvKMt/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJFZ1wRP
FEjA/1zqrZESri9q/uVMMB8GA1UdIwQYMBaAFOc7K1tImOR1/+hpsk00hc7IfdFL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUM5My82RDBGNjQwRTYx
OTcxMUVFQTYyQTM2NzZDNEY5QUUwMi81enNyVzBpWTVIWF82R215VFRTRnpzaDkw
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzV6c3JXMGlZNUhYXzZHbXlUVFNGenNoOTBVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MUM5My82RDBGNjQwRTYxOTcxMUVFQTYyQTM2NzZDNEY5QUUwMi81enNyVzBpWTVI
WF82R215VFRTRnpzaDkwVXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApu+DLkgNr4m3LQTTsz9wXQy+Ywxpcy06cCABgMm6MeXNmBuzbcXpwhOjtPAP
u+Q7SOKNNzbXEVBwaUus16Ngtfb+B6Bttl5Y0ObhTaOIwokdj8hTsFWgmwXK22i+
LFQwwu9nHLlBBQA7RCVRQ+yLlfl5LuICP+K+j81taRddDZ6PwBIHP0NO7YMjtBkZ
q+gKpxvHo5D47bxxSITOO7TzRNec1K1F0qZ0ZVcomF+l5rPKsGeOxMPmpOQLh1rg
5pIEhwYqMztTCvMIkJ6IsBN4/9cpNZpxxV8NMEfb2NkZxjKjjCKSKnMbigNEhf2E
8MUZKRbG4mZJAwon3mhGZUBE/w==
-----END CERTIFICATE-----
Generated at Wed Oct 7 13:15:48 2026 by rpki-client