
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
File: 5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft (raw, json)
Hash identifier: z3syc4SgKY2ytcjOgPgAopXcMmwelspxsdIIhg/oUiU=
Subject key identifier: 31:F2:F0:BB:FA:8D:B4:03:A3:A1:8F:BB:BB:82:36:2F:17:3B:D6:10
Authority key identifier: E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE
Certificate issuer: /CN=A91FCEB1/serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE
Certificate serial: 0808
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
Manifest number: 2380
Signing time: Fri 16 Oct 2026 15:57:35 +0000
Manifest this update: Fri 16 Oct 2026 15:57:34 +0000
Manifest next update: Fri 23 Oct 2026 15:57:34 +0000
Files and hashes: 1: 5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl (hash: k8Z05rTmghyYdXU/q7hUpBoG4cLRA7lpNaSGRx2jhjM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl
rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Oct 2026 15:57:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2056 (0x808)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCEB1, serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE
Validity
Not Before: Oct 16 15:57:34 2026 GMT
Not After : Oct 23 15:57:34 2026 GMT
Subject: CN=6ad2496f-d254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9d:3b:f3:8a:4b:35:8b:87:14:fd:32:fd:6b:
84:3a:5f:3e:b8:47:e6:fc:b1:1f:82:07:3c:09:9a:
53:da:45:fb:6c:e6:2e:7e:62:6b:7b:de:f8:8d:9f:
f2:0f:ce:33:36:af:6f:0b:2a:fe:7e:9a:be:fe:86:
a8:ce:e5:b8:9f:e5:8f:82:57:8c:84:ee:16:a6:42:
25:67:bd:f8:71:a9:ed:00:61:7b:6e:e8:ef:35:5d:
57:77:37:c5:1c:d1:91:85:e3:28:4b:21:f8:56:5c:
8e:8e:96:d2:c6:85:40:8d:ec:eb:a3:a1:9e:31:1d:
4e:09:c3:f6:33:0b:15:42:73:e1:3a:46:da:f0:e6:
9a:ab:c0:19:72:f0:90:bf:55:b3:c4:fc:1c:7f:27:
e5:b8:c3:0a:84:e0:17:ef:e6:a3:2c:78:26:04:e3:
7d:2a:90:5b:3c:91:d2:8d:30:50:8b:d1:39:16:43:
44:97:6e:ad:7b:5b:83:a4:41:83:ad:f5:2a:bf:76:
d6:9c:94:8e:e8:02:08:d2:38:dc:8d:cc:7e:29:7c:
98:ed:8e:3d:8d:3d:7e:e1:07:4f:2f:10:fb:4f:ed:
35:d9:84:0a:a9:fd:19:e0:0d:32:05:05:c6:65:dd:
ee:85:7f:0a:12:16:2d:d2:b7:9b:2c:fd:42:2c:46:
2a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F2:F0:BB:FA:8D:B4:03:A3:A1:8F:BB:BB:82:36:2F:17:3B:D6:10
X509v3 Authority Key Identifier:
keyid:E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
db:b4:65:52:e6:50:19:09:c4:45:12:53:56:b0:b6:47:47:ca:
1d:49:b2:ac:26:8f:84:14:f9:71:3b:17:26:58:88:3e:d9:96:
b5:ca:78:b8:4d:ab:47:cc:5f:d2:5d:39:d0:7e:bc:56:a2:51:
ea:03:5c:27:97:5b:5e:a1:b2:db:b8:42:c0:9d:86:fd:b9:43:
8c:f1:b0:75:9b:f1:cb:b2:be:cf:58:db:dd:f7:db:e7:99:f9:
41:9e:be:46:51:43:10:56:0d:f3:0e:b1:bd:88:0d:5f:91:30:
c0:45:c4:04:6c:d7:15:e3:7d:6a:d1:28:47:93:19:68:04:96:
54:12:f4:8e:5c:03:9e:bb:45:e9:1b:fa:f9:a3:d8:bc:42:0a:
d0:29:ae:a4:d5:1f:86:63:7a:67:58:03:83:1c:bd:32:f4:42:
47:04:e1:40:40:c7:26:c7:37:ab:58:0b:0c:44:98:17:3e:6f:
1b:99:fa:2a:e7:63:ce:61:f6:d2:c4:42:ea:38:8d:95:42:e4:
68:c4:5e:2d:59:c0:09:ce:28:ec:fb:12:18:e8:db:7d:70:0f:
50:cf:dc:a4:39:64:1b:65:ac:ae:ca:47:f6:f5:e4:ca:cc:ff:
0e:88:66:e7:2b:f0:69:a4:84:5f:4c:51:18:8c:cd:6d:e8:87:
fa:17:73:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkNFQjExMTAvBgNVBAUTKEU3M0ZCODg2OEREM0I0NjFFQTFBNjczQzdBMzY5NDUy
MzVFOUNBQUUwHhcNMjYxMDE2MTU1NzM0WhcNMjYxMDIzMTU1NzM0WjAYMRYwFAYD
VQQDEw02YWQyNDk2Zi1kMjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlp0784pLNYuHFP0y/WuEOl8+uEfm/LEfggc8CZpT2kX7bOYufmJre974jZ/y
D84zNq9vCyr+fpq+/oaozuW4n+WPgleMhO4WpkIlZ734cantAGF7bujvNV1XdzfF
HNGRheMoSyH4VlyOjpbSxoVAjezro6GeMR1OCcP2MwsVQnPhOkba8Oaaq8AZcvCQ
v1WzxPwcfyfluMMKhOAX7+ajLHgmBON9KpBbPJHSjTBQi9E5FkNEl26te1uDpEGD
rfUqv3bWnJSO6AII0jjcjcx+KXyY7Y49jT1+4QdPLxD7T+012YQKqf0Z4A0yBQXG
Zd3uhX8KEhYt0rebLP1CLEYq6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDHy8Lv6
jbQDo6GPu7uCNi8XO9YQMB8GA1UdIwQYMBaAFOc/uIaN07Rh6hpnPHo2lFI16cqu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS85QzE0QjQwNjNB
MjExMUU3OUFBMEQ1MUNDNEY5QUUwMi81ei00aG8zVHRHSHFHbWM4ZWphVVVqWHB5
cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzV6LTRobzNUdEdIcUdtYzhlamFVVWpYcHlxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0VCMS85QzE0QjQwNjNBMjExMUU3OUFBMEQ1MUNDNEY5QUUwMi81ei00aG8zVHRH
SHFHbWM4ZWphVVVqWHB5cTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA27RlUuZQGQnERRJTVrC2R0fKHUmyrCaPhBT5cTsXJliIPtmWtcp4uE2rR8xf
0l050H68VqJR6gNcJ5dbXqGy27hCwJ2G/blDjPGwdZvxy7K+z1jb3ffb55n5QZ6+
RlFDEFYN8w6xvYgNX5EwwEXEBGzXFeN9atEoR5MZaASWVBL0jlwDnrtF6Rv6+aPY
vEIK0CmupNUfhmN6Z1gDgxy9MvRCRwThQEDHJsc3q1gLDESYFz5vG5n6KudjzmH2
0sRC6jiNlULkaMReLVnACc4o7PsSGOjbfXAPUM/cpDlkG2WsrspH9vXkysz/Dohm
5yvwaaSEX0xRGIzNbeiH+hdzTQ==
-----END CERTIFICATE-----
Generated at Sun Oct 18 12:05:54 2026 by rpki-client