
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
File: 05hHRxQle77zpal12QzQ3GW92-8.mft (raw, json)
Hash identifier: 1YjODS4WZKrWWxoDivVvp7XDd+EPr1iObLHSdScE7/s=
Subject key identifier: 30:54:EB:E6:29:43:ED:68:D7:C9:99:28:06:24:E4:5B:62:EC:77:53
Authority key identifier: D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF
Certificate issuer: /CN=A9197CBC/serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF
Certificate serial: 019D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
Manifest number: 0195
Signing time: Mon 05 Oct 2026 04:45:59 +0000
Manifest this update: Mon 05 Oct 2026 04:45:58 +0000
Manifest next update: Mon 12 Oct 2026 04:45:58 +0000
Files and hashes: 1: 05hHRxQle77zpal12QzQ3GW92-8.crl (hash: zmMx+momyYEAcVteLslO4S2AgB8KTIRWlAcU6+imtpw=)
2: 13435546ABF211F0BA77FA0DC4F9AE02.roa (hash: 6Iz+Zjz7W/z2VSOl5A1kVCCKL4JJS2AWEccWCBcTKH8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl
rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 04:45:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413 (0x19d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197CBC, serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF
Validity
Not Before: Oct 5 04:45:58 2026 GMT
Not After : Oct 12 04:45:58 2026 GMT
Subject: CN=6ac32b87-bc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c0:49:9b:d5:79:c1:ea:ea:af:3f:cc:bd:0e:
42:e2:32:c6:cf:0d:80:2f:63:38:a5:6a:33:53:1f:
ae:42:b3:34:be:d9:39:de:48:f4:a5:06:9c:d5:36:
02:9c:d1:cd:7d:b3:c0:84:35:98:4c:3a:47:fe:2d:
07:8f:9a:f7:f9:b4:b4:9d:0e:79:55:3f:49:69:38:
f0:c1:43:6c:9d:39:4b:45:c7:15:00:ce:e4:20:cf:
f2:ab:84:53:22:9c:33:6d:af:44:50:82:31:3e:dd:
8b:25:89:56:9c:4e:3a:01:ff:86:61:f9:a4:db:27:
3b:21:fd:f6:76:d3:65:9d:e5:79:e0:58:4e:b5:79:
f2:20:77:36:46:2c:fc:5b:09:14:63:65:8b:30:3b:
17:24:f5:c1:2b:62:78:8c:24:39:2f:4a:fe:ac:a8:
e3:16:db:08:e5:70:0c:56:71:22:72:ea:19:2e:ce:
45:4a:b6:a3:09:58:a4:7c:1e:94:36:f4:57:29:c6:
c5:ce:a5:a0:e1:d6:d4:7f:ff:0f:24:ac:89:4b:46:
1a:0b:5f:1c:ef:e2:99:13:0c:ff:82:e6:68:aa:58:
0a:2c:74:c5:71:b9:39:2a:4a:eb:7f:81:f1:23:51:
b1:35:41:55:24:c8:fc:09:db:91:8f:b1:00:21:b2:
d6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:54:EB:E6:29:43:ED:68:D7:C9:99:28:06:24:E4:5B:62:EC:77:53
X509v3 Authority Key Identifier:
keyid:D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:01:3e:c8:6a:84:f5:78:15:c2:28:1d:d3:ca:44:c3:13:e6:
03:66:89:86:7c:28:9f:fe:49:ed:da:cc:3a:76:19:80:f8:62:
de:40:47:ec:7c:c1:c7:35:a2:9a:02:99:f1:a1:8b:48:09:8a:
b7:2e:ac:4e:ea:09:99:26:70:45:62:e8:7f:99:8f:fb:13:dd:
d5:e4:d1:54:36:52:1b:9e:4e:4d:29:c7:29:61:b0:e8:78:7a:
de:1e:82:6b:00:ef:89:5d:3f:cf:ac:ed:e3:a9:26:44:ee:29:
9f:7f:51:ed:6f:3c:39:7c:f7:90:1e:06:b7:0b:c2:61:33:37:
d1:08:9c:94:7e:f8:a9:d4:c9:4f:4b:72:25:1b:25:1f:65:f7:
ef:64:f9:0e:30:07:dc:6d:d6:f3:bf:d5:55:d4:31:96:f7:01:
a0:e7:42:c5:c3:e3:fa:ae:f7:04:97:d8:5e:b8:a9:58:0c:b4:
13:e7:82:ff:d0:ea:75:ae:ac:e7:69:7d:36:88:6f:d0:df:ed:
97:5f:f0:60:53:38:48:cf:ff:b1:e5:12:9c:99:2e:47:64:e0:
61:6c:97:3e:7f:06:d8:af:0a:6d:ff:f4:78:e8:b1:39:a7:57:
25:8d:e9:f3:a8:d1:4c:f0:5b:bf:95:41:97:08:58:3d:b8:bb:
7a:58:c5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:38:16 2026 by rpki-client