
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft
File: D5BpKh7v5_ChrGi14awJ9wJpccw.mft (raw, json)
Hash identifier: W0liZLhM0ToaRdtGyAczLUjSwSSyHoUT2kfTykS9WDg=
Subject key identifier: D9:78:26:C6:0F:D2:41:41:17:8C:C5:05:53:90:F2:0C:27:93:2B:F5
Authority key identifier: 0F:90:69:2A:1E:EF:E7:F0:A1:AC:68:B5:E1:AC:09:F7:02:69:71:CC
Certificate issuer: /CN=A91185B8/serialNumber=0F90692A1EEFE7F0A1AC68B5E1AC09F7026971CC
Certificate serial: 029E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft
Manifest number: 029A
Signing time: Mon 21 Sep 2026 01:41:37 +0000
Manifest this update: Mon 21 Sep 2026 01:41:37 +0000
Manifest next update: Mon 28 Sep 2026 01:41:37 +0000
Files and hashes: 1: D5BpKh7v5_ChrGi14awJ9wJpccw.crl (hash: 7KdVsLNczRKs4g76cfLbHsbp2A2P0wLSNTD8L7XGhRU=)
2: 61BCB5467F5F11F1BEA7A26F5FA30FBC.roa (hash: SeQUnFSLQHOFUsaseN6yWVAw0Pri/I36or2wIB3les8=)
3: 624A40D27F5F11F1BEA7A26F5FA30FBC.roa (hash: CTuiIjeKzXxi3ZMYeyZBR0nwz6i115ctqbvud5AdBUg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.crl
rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670 (0x29e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91185B8, serialNumber=0F90692A1EEFE7F0A1AC68B5E1AC09F7026971CC
Validity
Not Before: Sep 21 01:41:37 2026 GMT
Not After : Sep 28 01:41:37 2026 GMT
Subject: CN=6ab08b51-8662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:88:e2:50:0e:13:af:26:78:e6:02:5a:a6:
a9:4e:3b:c5:23:0a:a6:65:60:a0:47:cd:46:42:29:
ad:78:94:6b:46:ec:dc:43:7e:24:0c:46:14:29:d7:
a0:b8:16:27:57:b8:32:01:dc:30:ba:65:47:c1:8e:
a7:1f:f1:21:0d:7d:55:96:6e:7e:5f:b4:e8:2f:3e:
95:f9:bc:1e:c8:ef:8f:e4:a7:ad:8a:6a:fa:f0:15:
e3:81:dd:c3:ab:12:ef:ca:2f:46:36:df:90:18:4e:
3e:db:1e:eb:dd:f8:cc:5a:24:98:7f:67:8f:a7:9b:
78:8e:ce:93:cc:31:ee:b3:c3:1b:78:7c:c7:1b:bf:
03:69:2e:0d:4d:af:a0:8c:4e:4d:47:25:83:df:6e:
31:06:cb:fd:c3:ee:8b:18:53:ee:f6:ea:f4:e9:cf:
69:db:21:6d:02:9f:c7:ad:18:70:e0:53:e4:72:b3:
ca:48:49:e0:b2:9c:9d:7a:fc:39:e6:dc:30:21:65:
a2:10:b2:70:9d:ce:fe:58:8c:f6:ce:c0:50:39:da:
19:0e:e6:46:00:d4:10:f9:5d:e2:fb:4b:00:0c:8d:
66:e4:5b:07:70:7d:6e:cd:a4:c7:38:91:af:97:18:
27:c5:b6:bc:18:cf:d3:4d:af:a2:41:2e:4b:38:6c:
86:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:78:26:C6:0F:D2:41:41:17:8C:C5:05:53:90:F2:0C:27:93:2B:F5
X509v3 Authority Key Identifier:
keyid:0F:90:69:2A:1E:EF:E7:F0:A1:AC:68:B5:E1:AC:09:F7:02:69:71:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ff:a9:83:93:94:da:1f:00:5b:9a:d0:77:09:d9:a0:a4:7e:
17:07:11:83:31:33:50:16:c5:20:a5:f6:8d:ee:5c:06:d5:47:
22:78:3a:e0:df:a0:48:fb:35:17:1b:88:a6:43:da:c7:38:a1:
61:05:8b:4f:01:10:e7:60:a5:d6:a1:ff:ef:68:42:9f:d2:3b:
2f:0f:1e:0c:16:2b:e7:86:f5:4c:5e:19:3a:00:7f:20:7d:f0:
ef:0b:7f:08:7a:24:4a:65:cb:21:be:89:45:0b:25:6a:48:b5:
9f:93:35:0f:a0:ea:b3:d0:8b:e0:c9:71:0d:44:34:70:26:71:
64:9e:25:6a:c5:45:a5:09:9f:bd:11:96:60:dd:04:3f:f5:2e:
ad:32:8f:01:d1:a6:19:f3:37:4b:06:48:8f:8d:53:3f:ef:6a:
36:ad:e8:b3:04:ef:39:ad:30:97:30:1a:35:2e:54:c4:34:16:
93:aa:60:5f:31:5e:a2:61:ae:ba:c3:a6:91:a1:56:fd:41:cf:
8a:bc:3b:c4:98:32:df:23:67:85:36:89:43:29:14:59:80:99:
b2:fb:76:68:2e:15:0a:2a:ff:3a:f2:3b:14:c0:35:76:d2:bf:
e8:ee:45:99:f3:70:ea:b3:43:2b:7b:76:12:ec:23:76:70:e3:
29:45:f5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:38:41 2026 by rpki-client