
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
File: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft (raw, json)
Hash identifier: uLF/I5iixqNCAoCCbIhe76ZdUAujnYiXgmpKDaUlJqA=
Subject key identifier: 13:ED:FE:16:F2:EE:30:DC:E6:64:18:20:A4:87:DB:A0:06:B5:E0:37
Authority key identifier: E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2
Certificate issuer: /CN=A91DE5E8/serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2
Certificate serial: 02CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
Manifest number: 02BF
Signing time: Sun 01 Nov 2026 02:16:36 +0000
Manifest this update: Sun 01 Nov 2026 02:16:36 +0000
Manifest next update: Sun 08 Nov 2026 02:16:36 +0000
Files and hashes: 1: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl (hash: fsESvpn8diRUHjQ/9ZvnjXuYl3wXB2vnVe35hsMBQqw=)
2: B264EB66A30911ED99A82087C4F9AE02.roa (hash: Qsg2AMGaV0HzjGdO1Hutn0CHA9Q/KYFBqKZc552p7Mk=)
3: 785B44D6F2AF11EF97443030C4F9AE02.roa (hash: yzmWg50nzv8Dnad8AXsujO//BFKjYq1nis/lix16bcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl
rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Nov 2026 02:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 715 (0x2cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE5E8, serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2
Validity
Not Before: Nov 1 02:16:36 2026 GMT
Not After : Nov 8 02:16:36 2026 GMT
Subject: CN=6ae6a104-ab6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:82:4f:1a:a7:5d:d6:7a:4b:fa:d3:03:f7:
23:19:e5:12:24:9e:f0:72:84:df:d7:88:5c:d1:43:
62:54:bb:47:2f:29:15:e8:e7:ea:a7:ef:13:65:51:
9e:ba:c0:3b:8e:67:95:16:78:9e:7e:bb:56:d4:a6:
bc:61:3d:82:33:29:dd:cc:9e:a8:dd:45:c6:25:cb:
bb:e4:60:1f:5b:08:82:4d:3b:ff:04:9d:0b:19:02:
d9:5a:fe:0f:99:01:60:25:4b:a9:7c:32:79:c8:08:
fa:9c:59:d9:bb:dc:97:38:d2:81:a4:2a:cf:95:80:
cd:ee:e4:aa:a2:9b:e7:3a:38:d7:00:72:6f:cc:1d:
04:e8:2f:55:b5:9d:03:b3:4d:74:cd:bf:4d:f2:3e:
00:de:a4:72:5c:8d:ea:3c:73:ae:5e:b8:f4:25:58:
70:f8:52:52:b9:4d:55:7e:ed:9b:d7:05:f6:1d:fe:
a5:76:fe:4b:47:fd:44:df:c1:ff:3f:e4:b0:69:4f:
88:f5:b4:70:7b:6c:0e:83:b1:db:6d:eb:5e:11:79:
ad:66:cb:79:00:15:04:eb:b7:a0:61:af:19:93:79:
83:65:a2:2c:d2:d1:6e:95:b0:c6:d5:9f:a6:79:7c:
46:5d:61:d1:6e:f6:d7:ab:0b:3b:ea:2b:a9:ad:06:
32:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:ED:FE:16:F2:EE:30:DC:E6:64:18:20:A4:87:DB:A0:06:B5:E0:37
X509v3 Authority Key Identifier:
keyid:E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4f:4a:62:a3:08:90:9c:b3:18:b6:0c:2a:0b:97:23:14:51:
69:ce:10:f2:0b:1d:06:e9:38:05:4d:3f:99:78:d5:90:4a:36:
bc:71:6b:cb:44:98:64:f9:b6:9a:6b:8a:42:24:d2:a4:a1:a9:
63:f0:da:ef:c8:0f:94:3d:c2:88:3e:f0:0b:8f:5d:80:8f:60:
ba:90:c2:49:c5:4d:21:3a:bb:42:8a:2e:47:c1:6f:fb:ee:7a:
7f:71:0f:34:ac:73:cb:d7:77:15:2f:45:69:6a:f3:1a:c3:8e:
c7:7f:b9:6f:4d:ef:f2:98:40:4f:d9:70:12:b8:19:59:27:6a:
15:bd:f0:f0:c0:de:e1:db:8c:8b:5c:8d:81:c5:f3:67:d0:70:
8f:e5:52:3b:7d:e0:d4:23:b7:df:10:58:e4:2b:55:a5:1e:3d:
ae:56:6b:9c:21:9a:58:83:10:f9:ed:af:f0:23:a7:75:07:f5:
34:a2:d2:ab:bb:b0:b5:0e:a4:2e:9b:40:75:ab:33:85:3c:77:
93:c5:eb:1a:07:d4:b0:93:62:35:9f:67:12:75:4d:65:ff:07:
dd:f1:6a:7f:d0:3f:42:8d:7b:8e:3f:f6:9e:e4:96:2b:6a:86:
2c:21:d1:48:58:64:fa:c6:8d:56:14:25:54:00:b2:ac:e5:6a:
3a:b7:a3:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REU1RTgxMTAvBgNVBAUTKEU1QjFDRTFENDUzOTE4MTk1QkVCNUNEOTBGNkQ4NzlF
RkU5OTEwQTIwHhcNMjYxMTAxMDIxNjM2WhcNMjYxMTA4MDIxNjM2WjAYMRYwFAYD
VQQDEw02YWU2YTEwNC1hYjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp+6CTxqnXdZ6S/rTA/cjGeUSJJ7wcoTf14hc0UNiVLtHLykV6Ofqp+8TZVGe
usA7jmeVFniefrtW1Ka8YT2CMyndzJ6o3UXGJcu75GAfWwiCTTv/BJ0LGQLZWv4P
mQFgJUupfDJ5yAj6nFnZu9yXONKBpCrPlYDN7uSqopvnOjjXAHJvzB0E6C9VtZ0D
s010zb9N8j4A3qRyXI3qPHOuXrj0JVhw+FJSuU1Vfu2b1wX2Hf6ldv5LR/1E38H/
P+SwaU+I9bRwe2wOg7HbbeteEXmtZst5ABUE67egYa8Zk3mDZaIs0tFulbDG1Z+m
eXxGXWHRbvbXqws76iuprQYyAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBPt/hby
7jDc5mQYIKSH26AGteA3MB8GA1UdIwQYMBaAFOWxzh1FORgZW+tc2Q9th57+mRCi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTVFOC9FOUUxQkYyOEEz
MDUxMUVEQUMxNEVFNkNDNEY5QUUwMi81YkhPSFVVNUdCbGI2MXpaRDIySG52NlpF
S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzViSE9IVVU1R0JsYjYxelpEMjJIbnY2WkVLSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTVFOC9FOUUxQkYyOEEzMDUxMUVEQUMxNEVFNkNDNEY5QUUwMi81YkhPSFVVNUdC
bGI2MXpaRDIySG52NlpFS0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbE9KYqMIkJyzGLYMKguXIxRRac4Q8gsdBuk4BU0/mXjVkEo2vHFry0SYZPm2
mmuKQiTSpKGpY/Da78gPlD3CiD7wC49dgI9gupDCScVNITq7QoouR8Fv++56f3EP
NKxzy9d3FS9FaWrzGsOOx3+5b03v8phAT9lwErgZWSdqFb3w8MDe4duMi1yNgcXz
Z9Bwj+VSO33g1CO33xBY5CtVpR49rlZrnCGaWIMQ+e2v8COndQf1NKLSq7uwtQ6k
LptAdaszhTx3k8XrGgfUsJNiNZ9nEnVNZf8H3fFqf9A/Qo17jj/2nuSWK2qGLCHR
SFhk+saNVhQlVACyrOVqOrejqQ==
-----END CERTIFICATE-----
Generated at Mon Nov 2 06:57:05 2026 by rpki-client