
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
File: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft (raw, json)
Hash identifier: 0CkZhlDs+ZmFpcVWaKRs/tkStIrIBpK0Ubm7W1blmU4=
Subject key identifier: 58:F3:D2:4C:A0:F7:B6:85:BA:68:A6:37:D6:12:97:24:8F:E4:DD:A2
Authority key identifier: E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79
Certificate issuer: /CN=A91D9F0A/serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379
Certificate serial: 14A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
Manifest number: 147C
Signing time: Fri 04 Sep 2026 16:51:09 +0000
Manifest this update: Fri 04 Sep 2026 16:51:08 +0000
Manifest next update: Fri 11 Sep 2026 16:51:08 +0000
Files and hashes: 1: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl (hash: 2BkLLe9Km63Mcuc7mQjm+SlhbwWxgVpRmrNc490kRg0=)
2: 3F6E94ACF5CF11EF90104A57C4F9AE02.roa (hash: r9JGVgj9zikJ7F79B2BaZrfg6rmzbuab3Jau6eNt9Fs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl
rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 16:51:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5288 (0x14a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9F0A, serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379
Validity
Not Before: Sep 4 16:51:08 2026 GMT
Not After : Sep 11 16:51:08 2026 GMT
Subject: CN=6a9af6fc-7180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:40:85:43:8e:96:3f:ac:f4:c0:8b:55:51:1a:
6a:5b:99:37:94:8d:4b:71:6d:0e:cb:60:4c:aa:a0:
10:6e:64:0e:d2:5d:33:bc:16:69:05:f9:98:96:11:
7f:5f:59:71:02:1b:26:69:89:1b:19:df:99:9b:15:
c6:18:1e:aa:17:28:a1:07:62:e3:d9:87:e4:40:26:
8c:d8:26:55:df:b6:20:31:f8:65:88:8d:fa:f5:b3:
0d:ec:84:50:b9:40:34:38:55:63:66:66:77:93:ac:
5a:7e:b7:cf:08:24:32:43:5f:6a:c9:1f:83:0f:05:
7f:0a:01:c6:de:07:d8:29:0e:8a:4b:60:1a:73:1f:
db:d3:6f:cd:dc:03:67:ac:6e:db:fc:d2:3d:8a:06:
ee:b8:0d:33:29:af:e5:8a:ce:16:0a:f5:21:29:95:
ce:d3:ad:01:b7:7b:f9:fd:69:3e:3c:4a:2e:14:ea:
db:4a:2d:48:04:60:8f:fb:28:41:01:f9:17:3f:af:
0f:ac:d2:48:82:16:00:d8:85:b5:4e:b0:34:1d:2b:
aa:cf:95:c2:fa:94:94:0e:90:51:b5:d1:fb:33:9e:
ed:57:50:f3:cf:cf:b9:f8:17:f1:92:fa:09:a2:9c:
3c:5d:47:6b:95:cd:54:8a:9d:32:8b:f1:c8:3e:52:
dd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F3:D2:4C:A0:F7:B6:85:BA:68:A6:37:D6:12:97:24:8F:E4:DD:A2
X509v3 Authority Key Identifier:
keyid:E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:29:4f:4a:d1:76:88:0a:5e:25:97:8d:bf:ef:47:e7:73:c8:
b2:af:5f:d7:13:b0:d1:74:a7:e0:7c:37:53:d7:e0:39:a1:a6:
a0:c9:42:a3:99:c6:f5:15:7d:55:32:d2:f7:40:ec:f8:4c:4d:
bb:60:45:b9:d7:40:b2:fd:c1:36:c5:9e:b4:83:0c:f2:94:c0:
51:7f:68:5e:21:b0:64:db:93:8e:01:f1:41:10:6d:54:4a:f0:
94:7e:86:62:83:68:85:e8:5c:d2:59:18:11:3e:b1:b1:c0:2f:
93:d8:a1:10:be:3d:73:de:41:c4:26:39:61:65:75:1c:4f:0f:
18:50:67:72:db:dc:af:2d:18:7f:20:39:02:a4:9e:80:5a:03:
af:41:37:d1:ec:c5:00:59:3e:27:6a:03:80:c9:38:19:36:94:
f5:5e:5f:14:77:8e:a0:61:ab:0f:ac:6f:55:c8:ad:86:d9:16:
a5:c7:fa:7e:cd:6c:f0:e1:73:88:15:27:52:25:f3:24:fb:da:
07:a6:36:e9:81:1e:b2:e0:3b:40:02:ed:41:bd:b0:f6:74:b9:
89:83:11:a7:ca:db:24:e7:c1:03:7f:df:60:b8:54:aa:3b:02:
f1:91:ff:15:d0:17:f9:09:3e:74:e4:60:5d:9d:b3:79:17:ff:
14:e7:63:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDlGMEExMTAvBgNVBAUTKEU0NkJCRjAxNzY4OTU2RTg2NkFFQzQ0M0YyQkIxMzUw
MUYyRTczNzkwHhcNMjYwOTA0MTY1MTA4WhcNMjYwOTExMTY1MTA4WjAYMRYwFAYD
VQQDEw02YTlhZjZmYy03MTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2UCFQ46WP6z0wItVURpqW5k3lI1LcW0Oy2BMqqAQbmQO0l0zvBZpBfmYlhF/
X1lxAhsmaYkbGd+ZmxXGGB6qFyihB2Lj2YfkQCaM2CZV37YgMfhliI369bMN7IRQ
uUA0OFVjZmZ3k6xafrfPCCQyQ19qyR+DDwV/CgHG3gfYKQ6KS2Aacx/b02/N3ANn
rG7b/NI9igbuuA0zKa/lis4WCvUhKZXO060Bt3v5/Wk+PEouFOrbSi1IBGCP+yhB
AfkXP68PrNJIghYA2IW1TrA0HSuqz5XC+pSUDpBRtdH7M57tV1Dzz8+5+BfxkvoJ
opw8XUdrlc1Uip0yi/HIPlLdOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFjz0kyg
97aFumimN9YSlySP5N2iMB8GA1UdIwQYMBaAFORrvwF2iVboZq7EQ/K7E1AfLnN5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUYwQS9FODYwMjFENkEy
M0MxMUU4OEE2RkU2NkNDNEY5QUUwMi81R3VfQVhhSlZ1aG1yc1JEOHJzVFVCOHVj
M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVHdV9BWGFKVnVobXJzUkQ4cnNUVUI4dWMzay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OUYwQS9FODYwMjFENkEyM0MxMUU4OEE2RkU2NkNDNEY5QUUwMi81R3VfQVhhSlZ1
aG1yc1JEOHJzVFVCOHVjM2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkylPStF2iApeJZeNv+9H53PIsq9f1xOw0XSn4Hw3U9fgOaGmoMlCo5nG9RV9
VTLS90Ds+ExNu2BFuddAsv3BNsWetIMM8pTAUX9oXiGwZNuTjgHxQRBtVErwlH6G
YoNohehc0lkYET6xscAvk9ihEL49c95BxCY5YWV1HE8PGFBnctvcry0YfyA5AqSe
gFoDr0E30ezFAFk+J2oDgMk4GTaU9V5fFHeOoGGrD6xvVcithtkWpcf6fs1s8OFz
iBUnUiXzJPvaB6Y26YEesuA7QALtQb2w9nS5iYMRp8rbJOfBA3/fYLhUqjsC8ZH/
FdAX+Qk+dORgXZ2zeRf/FOdjGQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:08:49 2026 by rpki-client