
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
File: -nL57HMUa01gWMiKYGr6AzMOA1E.mft (raw, json)
Hash identifier: h0WuRgp+ZABjRSI1OwXqMNH5dc9QMl2pbHx8ohenM3I=
Subject key identifier: 5B:F2:4A:0A:DD:57:1C:78:9D:80:62:99:74:E4:23:04:F3:A6:FB:D8
Authority key identifier: FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51
Certificate issuer: /CN=A91B2D56/serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351
Certificate serial: A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
Manifest number: A5
Signing time: Mon 05 Oct 2026 07:35:53 +0000
Manifest this update: Mon 05 Oct 2026 07:35:53 +0000
Manifest next update: Mon 12 Oct 2026 07:35:53 +0000
Files and hashes: 1: -nL57HMUa01gWMiKYGr6AzMOA1E.crl (hash: Uc/i5BRWduLLEb4Ib4AB3ATVeENULtMGceITCGkxlIA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.crl
rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 07:35:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D56, serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351
Validity
Not Before: Oct 5 07:35:53 2026 GMT
Not After : Oct 12 07:35:53 2026 GMT
Subject: CN=6ac35359-7130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5e:a7:8e:c6:4b:a4:ff:65:ea:cd:0e:ef:c7:
ad:bb:05:32:9f:f8:74:a9:ab:17:15:6e:28:c4:e0:
43:35:fe:42:6c:37:78:8e:4b:c1:95:c5:e6:95:c3:
d3:3d:02:b8:f9:43:32:33:cf:79:e3:17:29:66:79:
53:72:3c:ef:92:c8:2a:56:9a:2d:5d:bd:57:69:b5:
04:c2:1f:fc:7b:d7:4e:60:3b:2f:c2:e8:7e:bc:b9:
84:95:e1:1b:ee:af:87:22:08:41:46:25:44:7a:5c:
37:72:bf:25:3b:ef:5d:9f:1e:14:59:c2:5f:92:10:
f1:6e:0c:37:ca:22:71:0e:ab:65:6c:7d:ef:da:c5:
10:b1:ef:a9:4b:a7:ef:18:64:ea:68:37:6d:04:11:
2f:ed:0e:94:81:8a:6d:45:6d:3d:dd:18:76:e5:56:
91:b0:cc:32:cc:82:2f:fa:9d:73:f4:94:48:ea:97:
c7:1b:38:36:21:c0:98:6f:e1:03:11:e0:0f:5c:1d:
1f:dd:3f:3c:b6:e4:0a:6f:c4:c3:ab:dc:5b:d7:df:
1d:e9:60:14:4b:06:3b:67:a1:b4:8d:3f:2d:54:64:
79:20:06:06:93:1c:8d:b9:8e:31:27:3a:b7:a1:82:
24:b2:02:de:81:40:e6:30:8a:a5:06:26:2a:62:cd:
bf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F2:4A:0A:DD:57:1C:78:9D:80:62:99:74:E4:23:04:F3:A6:FB:D8
X509v3 Authority Key Identifier:
keyid:FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:61:62:db:d2:c9:7a:1a:d7:0b:dd:fb:5e:2c:fa:ce:4a:61:
35:eb:77:31:87:a5:40:f6:e8:e9:36:ac:86:42:66:bd:fe:70:
e7:3d:a5:53:0b:4b:88:d7:63:ee:c9:76:13:8f:c5:7f:8e:f6:
82:0e:7e:b6:f1:f9:d5:2c:ac:ae:03:7a:63:e7:3d:ca:33:8c:
63:60:1c:3f:7b:18:84:0f:e3:ae:bb:2b:93:d9:97:28:d0:87:
55:d4:a9:ba:7d:76:8d:8a:12:06:2d:ef:c5:ee:b8:bf:b0:61:
2f:70:63:14:3a:8d:b7:dd:8f:30:c2:d4:26:73:2f:38:5d:27:
c6:d0:2a:46:72:09:40:6d:91:a5:38:34:82:19:32:1c:b8:25:
56:4e:d7:4f:e7:ae:fe:73:4c:7e:06:6e:c3:a5:f3:e6:f7:a1:
5f:d8:fc:ba:62:f2:42:32:29:cc:fd:09:55:20:70:b4:42:38:
eb:a7:d3:bb:20:af:f2:63:d6:c5:9e:ca:49:1f:fc:14:33:6a:
56:14:b5:82:37:9c:42:80:a0:af:a2:9b:08:cb:1a:67:86:4a:
d1:06:09:4f:b4:6f:e5:c8:59:fc:52:38:22:6d:50:d6:42:20:
f4:e6:b2:aa:17:7b:de:42:64:3f:8f:b8:14:8a:9a:c6:c5:0c:
4e:dd:2e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:59:13 2026 by rpki-client