
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
File: 5esYDNbcUWxm01KwR7npxaUCcOM.mft (raw, json)
Hash identifier: oYqVvw9Hd4LFZ8G/woEbQzCzdZWVF5W5E6IYB/8BZUA=
Subject key identifier: BA:92:45:35:51:71:30:C6:F4:3D:E5:43:E3:A1:20:44:B1:30:AD:83
Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3
Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
Certificate serial: 09E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
Manifest number: 09B0
Signing time: Sat 24 Oct 2026 19:55:14 +0000
Manifest this update: Sat 24 Oct 2026 19:55:13 +0000
Manifest next update: Sat 31 Oct 2026 19:55:13 +0000
Files and hashes: 1: 5esYDNbcUWxm01KwR7npxaUCcOM.crl (hash: uNv9zKwokqzpJ0oJaeXtECvXedHKz5SJts4Vom3bl5U=)
2: E22ECDEAC4F811EAB8D31113C4F9AE02.roa (hash: lQ/3nAQf4fzpG3flWZ1bQNZV2nX5+LaWRtwGSAAXvQo=)
3: E2E21364C4F811EAB8D31113C4F9AE02.roa (hash: YYMIfPwumcmcT+KqlaRMhjt2vH8N9klrHhnG1serhGs=)
4: 6AE50E1C21E011EBBF36CD21C4F9AE02.roa (hash: ZBwiWWEpUFGcjnXgByvOw2xw6RsYvq4909rtKc6B0Yg=)
5: 36945EC2232711EBA0F14F17C4F9AE02.roa (hash: nZ518Nz9fUSUGAttUGH5/qKoCq89W4AtGeuzfS/iSCc=)
6: F1A54AC47A5611EB876D281FC4F9AE02.roa (hash: EUasz824UMnO9MbqeXwiSlVPuEsrQs/XfaxHe0QouAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl
rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 19:55:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2528 (0x9e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
Validity
Not Before: Oct 24 19:55:13 2026 GMT
Not After : Oct 31 19:55:13 2026 GMT
Subject: CN=6add0d22-1f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:21:a6:35:10:99:6e:df:bf:27:0d:99:3a:29:
99:87:3e:c6:13:35:85:0d:a8:e2:f0:5b:20:bc:45:
22:1d:d6:ef:70:0e:3e:66:8c:82:b5:2c:0c:b0:e7:
a2:34:e8:d7:6b:2a:ce:1a:b0:d9:61:88:4c:9e:95:
1f:23:aa:0e:17:0a:ba:0d:95:fe:7d:56:e7:89:8c:
7e:7c:41:dc:1a:a6:d4:55:1b:f8:dc:4d:cf:ca:e1:
f4:19:f3:68:5f:98:fe:af:59:d9:c8:bb:37:b2:fe:
8f:08:75:5e:3b:19:f6:0a:37:06:3a:fa:fa:10:63:
56:e0:66:2e:48:01:76:f5:02:c5:a0:24:c4:cd:2a:
d6:61:fa:76:a4:68:1a:7f:89:7b:76:bd:2a:02:95:
94:d6:c2:68:05:84:33:75:d2:23:54:8b:5e:83:6e:
64:42:83:26:07:28:18:35:3f:af:8a:a9:28:5e:37:
6c:e6:fc:72:e7:3b:37:9f:d4:9b:3c:9f:1d:c7:03:
d9:0e:3b:e3:41:3c:a4:2a:42:5f:e1:9c:a3:03:a2:
f7:71:5f:43:e1:18:67:68:a4:f4:94:35:64:15:a9:
ff:31:de:2c:8e:ca:e7:17:8b:27:9a:6a:e3:84:b2:
23:f7:68:4e:ad:44:30:57:5a:d7:46:91:ea:5f:c3:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:92:45:35:51:71:30:C6:F4:3D:E5:43:E3:A1:20:44:B1:30:AD:83
X509v3 Authority Key Identifier:
keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:f1:12:dd:1c:94:4f:c3:d3:17:97:d9:5a:d0:e7:86:92:ac:
15:34:f8:a4:e3:73:03:b9:d5:86:16:04:82:af:b4:1c:ce:aa:
62:01:4b:b7:28:13:73:a6:35:0a:b8:12:ff:b5:52:9e:1f:fc:
59:3c:29:f8:fd:25:38:34:87:c4:a3:1e:3a:25:78:ec:ee:c2:
83:d3:d2:c5:2f:41:28:c3:b1:8f:f4:04:bc:4c:76:07:c3:65:
d3:4e:69:08:1b:58:c7:b4:f3:7e:8c:04:8b:9b:86:1d:c1:0f:
22:8f:76:22:07:5a:05:b4:8c:1e:aa:b1:f9:c1:fc:17:d8:f2:
87:11:59:f9:60:4e:9e:e8:0a:7d:dd:4f:9b:aa:b1:36:82:f1:
dc:61:c1:2e:c3:d6:06:3c:52:25:c5:46:c7:5a:27:6f:e5:0c:
86:c4:4f:74:9d:b2:93:f2:d6:c2:36:c6:55:3c:93:e6:45:dd:
43:2e:75:c4:1b:51:c3:d8:86:ee:f2:cd:d3:b2:e1:59:54:a1:
33:52:fc:54:b7:9c:fc:3b:49:35:f6:28:c5:00:d8:22:f7:53:
e5:39:a6:ca:55:40:e6:97:ab:2d:ed:d1:df:c5:e7:11:19:58:
e1:76:cd:ad:8f:50:fc:5f:46:7e:65:63:2b:b8:9e:10:a2:50:
db:c5:7b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:42:27 2026 by rpki-client