
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft
File: 5Ihhomij6U17foS6dO6vR3KJZwk.mft (raw, json)
Hash identifier: IhSYr6UYhyG3/6iGz4FVfRU6XB2gHl+jn7mOqKE/kms=
Subject key identifier: 0A:E6:E0:05:D6:99:C3:C2:6D:1A:53:23:7A:AA:A5:54:E3:01:10:75
Authority key identifier: E4:88:61:A2:68:A3:E9:4D:7B:7E:84:BA:74:EE:AF:47:72:89:67:09
Certificate issuer: /CN=A91D3060/serialNumber=E48861A268A3E94D7B7E84BA74EEAF4772896709
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ihhomij6U17foS6dO6vR3KJZwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft
Manifest number: C1
Signing time: Wed 07 Oct 2026 07:22:02 +0000
Manifest this update: Wed 07 Oct 2026 07:22:01 +0000
Manifest next update: Wed 14 Oct 2026 07:22:01 +0000
Files and hashes: 1: 5Ihhomij6U17foS6dO6vR3KJZwk.crl (hash: GGz3nRanRNsKOAzIrflSa8eGR8NQnh4nP87jNdkCFaA=)
2: 0FCEAD129CF111F0A76B5F3AC4F9AE02.roa (hash: ifQONvULGYpYHvM+bvP3PgrTKc94bp+crLb4/d1Vd4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.crl
rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ihhomij6U17foS6dO6vR3KJZwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 07:22:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3060, serialNumber=E48861A268A3E94D7B7E84BA74EEAF4772896709
Validity
Not Before: Oct 7 07:22:01 2026 GMT
Not After : Oct 14 07:22:01 2026 GMT
Subject: CN=6ac5f31a-b5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:e0:2d:47:f8:89:06:ec:62:b5:04:ad:fd:
f5:32:d5:17:7c:f9:5d:c9:41:0e:7d:fe:f4:11:0f:
77:75:81:49:15:02:ae:98:7e:9c:42:40:7c:f0:83:
d6:df:ee:67:aa:b8:44:35:a4:23:b2:53:96:41:af:
d4:0b:a0:24:b0:b9:3d:c8:6c:7e:3b:e2:69:39:70:
b9:1e:10:77:8f:30:16:c8:c4:1a:b8:de:56:50:31:
3c:b4:3e:55:c1:fb:c0:6d:13:aa:e8:8a:93:90:6c:
50:41:23:51:13:1e:25:91:a6:71:93:ca:96:1b:ab:
29:8e:f0:bd:35:a4:4d:22:3d:a7:49:ed:2e:1c:eb:
3b:c2:41:82:94:b9:c9:00:64:b6:fe:eb:0d:8a:63:
2d:9e:39:ca:af:dd:43:59:2d:36:c2:fe:5b:58:9c:
5c:e7:e3:98:f5:c1:19:24:b5:fc:e7:95:c7:eb:c1:
01:a8:1f:45:f3:cf:ff:17:41:80:19:67:77:81:3c:
60:41:ef:14:60:e4:ea:b0:3d:e0:18:91:eb:dc:1c:
2d:d2:47:fa:1d:8c:9f:31:ea:91:28:03:e1:76:cb:
1b:b8:9d:19:56:1d:50:dd:88:2e:ca:b7:16:ce:77:
c2:c2:bc:af:f5:8e:9c:23:f2:9c:27:ce:8e:fd:b1:
b1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E6:E0:05:D6:99:C3:C2:6D:1A:53:23:7A:AA:A5:54:E3:01:10:75
X509v3 Authority Key Identifier:
keyid:E4:88:61:A2:68:A3:E9:4D:7B:7E:84:BA:74:EE:AF:47:72:89:67:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ihhomij6U17foS6dO6vR3KJZwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:cd:43:35:1d:7b:ee:68:5e:3d:31:a6:ba:74:8c:1a:26:1c:
1e:0d:57:76:23:e6:78:fc:6a:41:cd:36:25:76:e7:0d:51:2a:
3c:41:2c:29:a3:08:55:8e:f6:50:6b:75:84:d0:6d:f9:d1:55:
7a:f3:a4:0a:8d:f4:6d:5f:16:21:7c:cf:88:03:84:22:3a:75:
87:d5:14:35:8f:ec:c2:7c:97:97:73:42:14:aa:5c:0c:33:5b:
df:8a:b7:05:07:95:b9:ec:26:51:33:f5:d3:8f:49:8d:26:4a:
3d:fe:af:68:c1:07:29:a5:f9:7c:96:58:95:8f:bd:2f:90:06:
ed:e9:80:0a:3a:7c:f2:12:df:ed:e0:a2:7d:cc:fe:e1:b4:ed:
c4:ab:1f:ec:a1:73:84:cf:71:aa:ea:0a:64:b7:a4:b1:d7:1e:
5c:97:4b:65:57:86:e6:78:2e:e6:5d:20:b4:2b:eb:c7:f5:a5:
9a:96:ca:60:19:5c:15:cd:ab:64:e2:70:d8:bd:76:ee:f9:17:
97:9d:0d:ef:bb:4b:92:52:92:9a:57:18:22:7e:a9:e4:b4:7c:
0f:81:95:11:43:d8:e4:19:d2:9f:b8:4b:9d:1f:63:b8:2d:7b:
46:bc:1f:28:91:b6:ae:c3:bd:e5:30:f7:c3:d7:23:ff:50:e1:
c3:69:f0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 15:18:30 2026 by rpki-client