
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
File: 5JdLhBatO5ndEfOwQFbwx5m3ocs.mft (raw, json)
Hash identifier: fdRmNM8jTLnOnrUABh8u9vQ/uSfG/Eq9pFDbj97HZJM=
Subject key identifier: C5:3F:66:4B:D8:06:61:A7:BD:B0:7F:81:94:29:A5:BB:F1:E5:4A:B2
Authority key identifier: E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB
Certificate issuer: /CN=A91D9CA8/serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB
Certificate serial: 0136
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
Manifest number: 0136
Signing time: Sat 03 Oct 2026 06:14:26 +0000
Manifest this update: Sat 03 Oct 2026 06:14:25 +0000
Manifest next update: Sat 10 Oct 2026 06:14:25 +0000
Files and hashes: 1: 5JdLhBatO5ndEfOwQFbwx5m3ocs.crl (hash: sWsEcFu6sfZXt0lciZ7s60+q09rfZehHr52/oCJQOBU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl
rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 06:14:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9CA8, serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB
Validity
Not Before: Oct 3 06:14:25 2026 GMT
Not After : Oct 10 06:14:25 2026 GMT
Subject: CN=6ac09d41-0188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f6:07:01:cd:bc:53:3c:b7:9b:c7:99:83:41:
3d:42:a8:60:50:b6:8a:11:4c:35:fd:62:b6:c5:61:
0b:e0:ca:b7:16:25:40:92:66:45:e5:4e:8e:a0:c0:
09:53:3b:bc:13:d3:a0:28:09:7d:0b:bc:27:af:4e:
3a:70:0e:61:53:dd:4e:4f:15:33:69:65:42:30:71:
02:ef:81:82:5f:25:df:fa:47:08:24:09:4a:87:d2:
f1:73:cd:4b:b2:ee:cb:9b:24:e6:a1:95:1c:ea:99:
a1:6f:f5:f9:65:1f:74:fe:12:7c:f9:df:5f:d0:a0:
79:42:a0:b3:47:85:3d:4b:0a:fc:bf:92:b8:87:ad:
38:71:55:0b:8f:a3:fb:92:14:9a:ed:35:2a:57:73:
33:43:2d:d4:19:63:63:9c:61:3a:9e:25:e0:7e:04:
21:19:a2:92:15:8c:2d:32:63:a2:6a:42:0a:93:4d:
14:72:e3:d5:62:a2:cb:f2:f4:a9:a6:56:10:a6:d2:
ff:0e:6c:c5:8e:6e:9c:5b:da:a3:40:d0:86:31:4d:
03:4b:96:f6:7d:80:eb:e0:03:f8:d5:0c:f0:23:c0:
82:bb:5e:86:7f:5f:f0:71:7f:91:62:45:8f:ff:f9:
ac:ca:11:86:25:b6:28:fe:d2:6f:bf:2a:69:d8:e8:
79:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3F:66:4B:D8:06:61:A7:BD:B0:7F:81:94:29:A5:BB:F1:E5:4A:B2
X509v3 Authority Key Identifier:
keyid:E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bc:80:1d:2e:93:ce:aa:24:7f:98:08:33:6d:6f:e6:36:fa:
88:e6:cb:4e:f8:fd:af:a4:37:1a:29:bf:5b:36:0c:5a:eb:68:
40:b9:18:44:c8:90:90:82:be:4c:a7:d1:62:c9:9c:fa:32:46:
a4:49:7a:a6:a3:f5:ee:2d:03:ce:67:47:21:f8:fe:6b:f1:22:
d0:d5:40:94:d9:b8:04:b1:c7:6f:43:5b:6d:6c:75:2c:58:70:
a3:70:16:92:a3:ee:40:e9:68:68:7f:9d:8d:7b:63:08:6c:9f:
77:21:c8:a5:07:bc:a3:1f:ae:51:91:94:67:ff:0f:d6:d1:80:
f8:2a:dd:01:9b:ab:ed:3f:32:9f:59:9d:8f:1f:29:83:3f:a8:
2d:1f:78:e5:82:86:36:f8:bd:01:cf:a0:e7:71:c7:8a:88:17:
a5:7d:02:d9:08:dd:97:d4:a1:f4:51:81:82:83:50:f2:29:10:
61:67:ef:65:de:de:ae:54:2f:e3:1a:b1:7a:f6:4a:de:c0:48:
81:05:c9:d4:f3:58:e3:52:dc:2a:ab:76:b8:37:15:7d:7b:84:
32:01:67:54:2b:a6:a0:f5:03:f5:71:89:1d:4e:6b:16:4e:b2:
52:33:87:32:44:d2:e2:91:b5:e5:f0:f2:49:cf:66:fa:5d:25:
d4:b9:43:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:50:24 2026 by rpki-client