
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
File: C5I347CGtYw82c5v1JrCYffVJaM.mft (raw, json)
Hash identifier: Any419bDN1a8b7YW3i0PXmLWpRF1t8eJov4JUuEWhWI=
Subject key identifier: 5A:7C:65:49:A7:AB:C7:22:54:73:04:3B:3C:C3:9F:8A:17:99:EA:A3
Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
Certificate issuer: /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
Manifest number: 0145
Signing time: Wed 21 Oct 2026 05:59:40 +0000
Manifest this update: Wed 21 Oct 2026 05:59:40 +0000
Manifest next update: Wed 28 Oct 2026 05:59:40 +0000
Files and hashes: 1: C5I347CGtYw82c5v1JrCYffVJaM.crl (hash: OYYS6BXrLFCvcC3eCtdDJqeHdmMyGA4ug36DX3USd28=)
2: 9C9C1046F7CD11EF9245601CC4F9AE02.roa (hash: DZs/ioNjiGTQdREG+zE+daNHAc/dwChZtpeTTorEq9w=)
3: B4F27262FA2911EFA783CE2DC4F9AE02.roa (hash: uufA5ZmNxri3hkizmrTV+/5I7T9shm+y03oLPhZQF5k=)
4: 24E20F9E6B7011F0ACA1BB56C4F9AE02.roa (hash: RLjdUAVnjKgzwqmaXAIPV1P+6YSNLAkKqfL9Zn2hSIQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 05:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Validity
Not Before: Oct 21 05:59:40 2026 GMT
Not After : Oct 28 05:59:40 2026 GMT
Subject: CN=6ad854cc-b6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e0:62:44:cc:c0:a8:ee:c6:8a:94:a8:ba:69:
07:78:89:ff:f3:3e:1e:4c:88:a4:e8:56:3a:5a:74:
ec:75:6f:71:a5:ab:ed:65:f1:7d:22:35:13:2c:ad:
fc:d3:54:77:0f:2f:35:c8:a1:3a:f6:16:91:75:49:
bb:91:40:d0:fd:9c:4e:0d:88:4c:4d:53:fe:a5:b0:
a3:e0:c0:c0:62:13:c7:d2:5d:ef:5a:3c:7d:42:6c:
be:ad:cb:0a:0d:08:de:a3:bc:2b:0e:5a:55:0e:14:
96:38:14:b0:db:d7:6f:31:9d:36:43:72:bc:75:cb:
f5:6c:3a:f8:b9:9f:48:2e:b8:05:92:22:24:4c:fa:
82:75:57:ea:d4:1b:6d:98:8f:2d:b1:30:d9:d0:95:
02:77:c4:58:1a:e1:e3:fd:c3:11:1f:c5:e1:a3:fc:
58:e2:4f:c7:0a:d1:22:56:8f:3c:d9:60:f3:d8:5c:
f1:a9:4c:fc:28:b2:de:fb:fc:ec:78:4d:1c:af:5f:
97:e8:38:46:79:a4:5e:8f:de:95:e1:5e:70:50:05:
e2:d6:1e:6c:2e:3e:4a:ce:0b:38:8d:f2:81:90:bd:
6a:a4:bd:77:4e:5b:39:08:fe:7f:66:e5:1e:9f:7c:
75:43:33:81:13:1b:1b:6a:0b:d3:e6:fa:f0:d7:0b:
51:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7C:65:49:A7:AB:C7:22:54:73:04:3B:3C:C3:9F:8A:17:99:EA:A3
X509v3 Authority Key Identifier:
keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7d:de:c5:3b:f7:4d:24:82:f3:70:44:51:38:15:c9:db:a4:
e7:ed:fe:d4:f5:af:a7:5a:a1:e4:21:14:25:24:2e:42:f7:54:
39:4f:81:82:69:89:20:35:0e:f8:5e:81:00:2e:e2:13:7c:51:
fb:04:df:25:c9:6d:c3:07:fe:69:39:6a:ac:f7:5b:15:c8:f9:
d3:90:8e:31:c2:36:58:48:54:a5:7d:96:b0:34:13:47:b2:6b:
23:ab:2d:d1:86:51:4b:1d:a7:9c:4d:f0:9f:e5:78:66:d4:55:
71:83:82:c6:eb:a7:fb:d2:a0:2d:67:aa:c3:76:4e:35:d6:3c:
18:76:9c:e7:ff:62:18:f6:73:6b:0c:a7:35:df:2b:fc:8b:2a:
ef:56:e1:71:42:e4:b3:71:e0:4c:8e:cc:11:da:e9:0b:bd:f0:
97:43:23:27:78:fb:eb:68:af:2a:48:8b:c4:96:ec:0d:b6:71:
f1:96:71:2e:83:8f:aa:57:a6:0e:15:d2:ee:61:be:c6:a6:8d:
f5:f0:e8:5e:d5:2e:5d:b1:71:a1:39:fb:eb:e8:61:f8:25:e4:
6a:4b:0a:bd:92:de:01:c7:f7:4f:89:3d:13:ca:78:dd:f2:44:
0e:64:35:af:3f:4a:ab:3f:4b:47:00:d5:97:3f:5e:9e:03:c3:
ae:78:df:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 08:46:17 2026 by rpki-client