
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/ordhAFeEME-XSm6NWGpAUycIml0.mft
File: ordhAFeEME-XSm6NWGpAUycIml0.mft (raw, json)
Hash identifier: 8ECzSLJciDxaIrVxKEVqQJhU8a1c4vMePZKaNCbldbY=
Subject key identifier: 9E:84:93:53:9F:BD:6A:1C:2C:96:DF:07:01:1E:76:28:23:65:FD:31
Authority key identifier: A2:B7:61:00:57:84:30:4F:97:4A:6E:8D:58:6A:40:53:27:08:9A:5D
Certificate issuer: /CN=A91923E1/serialNumber=A2B761005784304F974A6E8D586A405327089A5D
Certificate serial: 26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ordhAFeEME-XSm6NWGpAUycIml0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/ordhAFeEME-XSm6NWGpAUycIml0.mft
Manifest number: 05DE
Signing time: Sun 04 Oct 2026 23:12:17 +0000
Manifest this update: Sun 04 Oct 2026 23:12:16 +0000
Manifest next update: Sun 11 Oct 2026 23:12:16 +0000
Files and hashes: 1: ordhAFeEME-XSm6NWGpAUycIml0.crl (hash: 6jHfLFNXH3y/J6xDr/sLP8G3Flj6QPKm5wLzmIVh7+w=)
2: D7F68AC88BAF11F18DC99137ACEE528E.roa (hash: 6xRVo6naiADGyUh5hdnY9XCvlMgfuKg8NEjgI902K9s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/ordhAFeEME-XSm6NWGpAUycIml0.crl
rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/ordhAFeEME-XSm6NWGpAUycIml0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ordhAFeEME-XSm6NWGpAUycIml0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 23:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91923E1, serialNumber=A2B761005784304F974A6E8D586A405327089A5D
Validity
Not Before: Oct 4 23:12:16 2026 GMT
Not After : Oct 11 23:12:16 2026 GMT
Subject: CN=6ac2dd51-71bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:2f:77:a2:25:bb:cb:7c:ae:c6:91:65:6a:
80:ed:d1:c1:0b:8f:83:d3:47:f3:e2:46:3f:a9:09:
4b:95:41:10:56:44:b1:d7:1d:95:7e:3f:05:64:71:
5b:e0:d5:d9:05:0e:f6:96:4e:c3:af:34:5a:60:fa:
00:d5:9b:ea:39:f0:e7:90:34:6f:47:52:47:47:65:
3c:55:bd:c8:d1:11:ee:99:50:9a:e7:ab:54:1a:0a:
9a:75:ce:77:f8:8a:24:0a:f2:c6:9b:43:ea:f5:08:
3c:b7:e1:81:db:d2:21:9f:64:6b:b1:63:b6:89:c8:
17:66:80:b8:4c:a0:e7:0e:47:9b:b0:c2:85:8a:98:
48:d4:9b:6f:ea:6d:40:03:84:f7:11:61:33:ee:0f:
95:0a:ea:fd:87:d1:db:a6:b3:3d:89:5c:f9:a7:41:
59:4a:71:a4:e9:9b:c5:82:05:ca:69:d3:ba:4d:c5:
07:8e:88:43:2a:b1:be:4c:e9:53:80:7e:ce:38:93:
1e:26:29:74:fc:1f:80:33:28:c3:4d:69:bd:e5:56:
98:5c:00:d1:f3:d2:60:6f:f3:24:dd:83:e5:0c:2b:
85:62:ea:fe:b3:fc:18:de:a8:68:85:f0:a0:91:2d:
e9:76:ea:b1:6c:ba:3b:4c:77:f0:66:e3:f6:00:87:
20:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:84:93:53:9F:BD:6A:1C:2C:96:DF:07:01:1E:76:28:23:65:FD:31
X509v3 Authority Key Identifier:
keyid:A2:B7:61:00:57:84:30:4F:97:4A:6E:8D:58:6A:40:53:27:08:9A:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/ordhAFeEME-XSm6NWGpAUycIml0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ordhAFeEME-XSm6NWGpAUycIml0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/ordhAFeEME-XSm6NWGpAUycIml0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:92:c1:96:60:e7:3f:72:88:b5:42:06:9a:ca:38:93:ae:7d:
50:71:bb:21:f7:30:62:01:1c:65:c1:ca:ce:f3:e2:4f:3e:5e:
5d:f9:37:3b:9f:cb:9d:1f:65:77:3b:c7:37:dc:55:d4:a3:1f:
e2:23:45:53:23:f5:87:cc:7d:fb:52:a3:03:31:f2:48:7e:0b:
fd:49:f1:d6:2d:bc:0f:0f:c1:b3:13:bd:dc:f1:8a:da:7a:01:
87:9d:a7:7b:e8:6a:c6:dd:e9:4d:db:2d:98:ed:7c:bd:23:06:
5f:75:80:4c:c9:c3:31:ca:49:d9:14:89:bd:ab:af:5b:d5:44:
b1:5e:5f:a7:07:95:24:35:36:08:a1:5e:0c:6c:ef:74:77:d5:
84:de:9d:3c:c6:07:f5:1e:a1:93:b7:f7:51:d6:2a:85:c4:7a:
8b:0f:52:2c:dc:d1:85:83:c8:ac:51:c3:8e:7e:ec:af:64:32:
cb:39:c9:3f:bd:f1:30:14:a8:cf:10:dc:2c:32:57:1c:c5:9d:
fe:3c:2b:d8:c4:f7:03:35:16:91:7f:d0:08:ed:8c:e0:53:72:
b0:91:18:66:82:b3:3e:b0:d3:d3:cc:19:95:b8:07:b7:a4:27:
14:7d:26:21:0a:d5:cc:f8:f1:07:cf:cc:88:1e:9f:79:67:88:
cb:fc:cf:5b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MjNFMTExMC8GA1UEBRMoQTJCNzYxMDA1Nzg0MzA0Rjk3NEE2RThENTg2QTQwNTMy
NzA4OUE1RDAeFw0yNjEwMDQyMzEyMTZaFw0yNjEwMTEyMzEyMTZaMBgxFjAUBgNV
BAMTDTZhYzJkZDUxLTcxYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIGi93oiW7y3yuxpFlaoDt0cELj4PTR/PiRj+pCUuVQRBWRLHXHZV+PwVkcVvg
1dkFDvaWTsOvNFpg+gDVm+o58OeQNG9HUkdHZTxVvcjREe6ZUJrnq1QaCpp1znf4
iiQK8sabQ+r1CDy34YHb0iGfZGuxY7aJyBdmgLhMoOcOR5uwwoWKmEjUm2/qbUAD
hPcRYTPuD5UK6v2H0dumsz2JXPmnQVlKcaTpm8WCBcpp07pNxQeOiEMqsb5M6VOA
fs44kx4mKXT8H4AzKMNNab3lVphcANHz0mBv8yTdg+UMK4Vi6v6z/BjeqGiF8KCR
Lel26rFsujtMd/Bm4/YAhyDfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnoSTU5+9
ahwslt8HAR52KCNl/TEwHwYDVR0jBBgwFoAUordhAFeEME+XSm6NWGpAUycIml0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyM0UxLzJBRjRCMzc0MzIy
NTExRUNBMjg1RjM0MUM0RjlBRTAyL29yZGhBRmVFTUUtWFNtNk5XR3BBVXljSW1s
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvb3JkaEFGZUVNRS1YU202TldHcEFVeWNJbWwwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky
M0UxLzJBRjRCMzc0MzIyNTExRUNBMjg1RjM0MUM0RjlBRTAyL29yZGhBRmVFTUUt
WFNtNk5XR3BBVXljSW1sMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBGksGWYOc/coi1QgaayjiTrn1Qcbsh9zBiARxlwcrO8+JPPl5d+Tc7n8udH2V3
O8c33FXUox/iI0VTI/WHzH37UqMDMfJIfgv9SfHWLbwPD8GzE73c8YraegGHnad7
6GrG3elN2y2Y7Xy9IwZfdYBMycMxyknZFIm9q69b1USxXl+nB5UkNTYIoV4MbO90
d9WE3p08xgf1HqGTt/dR1iqFxHqLD1Is3NGFg8isUcOOfuyvZDLLOck/vfEwFKjP
ENwsMlccxZ3+PCvYxPcDNRaRf9AI7YzgU3KwkRhmgrM+sNPTzBmVuAe3pCcUfSYh
CtXM+PEHz8yIHp95Z4jL/M9b
-----END CERTIFICATE-----
Generated at Tue Oct 6 21:50:00 2026 by rpki-client