
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft
File: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft (raw, json)
Hash identifier: FGdROL47cXmz28MMbBilNwWZF6cVClv2TLNHQNo9PNA=
Subject key identifier: CA:50:05:C3:99:40:EC:59:79:5B:79:30:CD:3F:23:85:71:AA:30:90
Authority key identifier: E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C
Certificate issuer: /CN=A91C3ABA/serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C
Certificate serial: 05A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft
Manifest number: 059F
Signing time: Fri 02 Oct 2026 23:29:55 +0000
Manifest this update: Fri 02 Oct 2026 23:29:54 +0000
Manifest next update: Fri 09 Oct 2026 23:29:54 +0000
Files and hashes: 1: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl (hash: /Aepup4pqH8uMkqX42KEkKC9j58dSoz9i+hF4hqEY3k=)
2: 4B9F1AA6354F11EC8531C34DC4F9AE02.roa (hash: FjlCfaAiS0/SIVjNyB82F27uQR6v8yVVRfaKD0rMx5w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl
rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 23:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1446 (0x5a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3ABA, serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C
Validity
Not Before: Oct 2 23:29:54 2026 GMT
Not After : Oct 9 23:29:54 2026 GMT
Subject: CN=6ac03e73-f69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dc:97:95:f5:3f:bd:e1:93:8b:ca:0a:d6:e2:
31:03:2c:38:58:ba:57:53:bc:b5:22:a6:ef:ec:36:
bc:74:08:0d:67:25:4b:2b:83:34:a2:0e:16:3b:16:
07:61:c1:0e:7d:41:2c:54:1d:db:92:c9:fb:c0:c4:
da:9a:73:50:da:dc:8c:96:12:b6:87:1e:29:44:8c:
87:aa:69:47:89:b0:90:72:1b:b7:60:02:25:14:2e:
0d:0d:e3:09:e9:50:50:e6:9f:92:55:89:6d:e3:4e:
61:df:76:ab:ce:73:54:76:95:2b:6b:8c:09:d5:fb:
72:15:ff:73:1c:26:ed:73:89:7c:de:7b:4d:43:a3:
af:ab:30:36:9f:db:1b:e6:eb:e1:49:55:7c:9f:20:
4c:1d:f4:61:8c:ae:6e:26:61:a4:e2:ba:1e:ea:9e:
30:d2:ad:96:6d:01:6c:61:c2:c9:74:38:9d:73:cf:
c4:94:54:e8:29:eb:fb:cb:cb:28:b4:27:ff:0f:b4:
2d:72:27:91:a1:ff:c6:e8:0d:56:f2:d8:bf:b1:c7:
23:0c:fe:5e:e6:b9:e9:12:a5:f0:98:0a:0e:13:55:
7c:db:1e:d6:e0:a2:f6:22:b1:64:77:65:7e:70:50:
d5:41:ff:3e:e7:fa:ee:76:d0:cc:7b:d1:e4:cf:76:
13:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:50:05:C3:99:40:EC:59:79:5B:79:30:CD:3F:23:85:71:AA:30:90
X509v3 Authority Key Identifier:
keyid:E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:cf:58:36:ac:7f:3e:0e:a1:75:fc:7b:02:f3:87:17:60:bc:
71:fb:67:13:02:50:19:c3:59:de:2c:63:1d:6f:31:6e:fd:e7:
7e:6c:24:09:09:54:74:18:9c:b8:e9:42:a2:1a:73:4c:54:bc:
98:a9:fd:18:b5:3e:39:0a:8a:b9:54:1d:06:65:0c:8d:29:19:
a3:f6:0a:3c:b6:14:43:a9:d1:29:af:b9:35:9d:64:19:f5:23:
e8:11:db:1e:3c:96:59:22:b3:6f:f2:d7:71:6a:4c:66:20:2c:
ba:dc:19:29:43:75:58:bf:dd:9a:37:c4:ae:c6:07:a3:6c:d8:
20:4b:a8:42:12:bb:62:20:ff:a3:aa:5e:3b:3b:d5:a9:3c:37:
99:32:1e:d0:e9:6a:1b:52:77:84:ca:cb:ee:fe:59:bc:3f:04:
2e:1b:3c:84:3a:4a:96:f6:30:02:13:bf:ee:a2:2a:7c:0c:a3:
97:e5:a2:e8:0d:c8:d9:7a:83:a0:27:85:d6:31:77:5c:ec:b4:
ab:66:8e:0e:d1:5a:4d:b2:22:74:85:36:e8:b5:e9:ed:9c:83:
fa:ff:72:18:66:5a:68:33:88:93:23:6c:23:39:df:a6:86:d4:
76:70:26:c6:49:33:fb:83:9f:62:c2:32:45:f2:69:ad:2a:e6:
dc:43:f1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:28:34 2026 by rpki-client