
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
File: keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft (raw, json)
Hash identifier: 9BaWwZbKvjqPb4Ni6DcwWWLEh3EoBET5PMKn3KG+MWc=
Subject key identifier: 85:A2:EA:33:8F:2C:7B:C6:D9:80:6D:EA:7A:2C:16:D2:9E:02:13:D2
Authority key identifier: 91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A
Certificate issuer: /CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A
Certificate serial: 05C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
Manifest number: 05AE
Signing time: Sat 26 Sep 2026 23:14:58 +0000
Manifest this update: Sat 26 Sep 2026 23:14:57 +0000
Manifest next update: Sat 03 Oct 2026 23:14:57 +0000
Files and hashes: 1: keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl (hash: GtGtR8FNpECVhhpix9MUfsqEtQ8EuKaW6eC7BufSTLg=)
2: 1295B5943FA611EF94664041C4F9AE02.roa (hash: hapzzVKt9oxlCLEwYHK4MTLp4PI8BfiasqodqBtyfb4=)
3: C52B4E0A3FE011EF88794913C4F9AE02.roa (hash: ly19W/Muv8BDmpRPmS2Fe3o0q7TToeFH9ObD8f2QW9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl
rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 23:14:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1472 (0x5c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ACAC, serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A
Validity
Not Before: Sep 26 23:14:57 2026 GMT
Not After : Oct 3 23:14:57 2026 GMT
Subject: CN=6ab851f2-0842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e7:31:84:35:91:cc:f7:43:bf:a7:b8:a2:97:
8c:e4:ef:4b:be:4c:d2:97:3a:86:93:d1:26:28:d0:
5f:11:42:a5:06:83:3c:be:19:78:30:31:7e:86:28:
90:24:63:38:ae:06:9e:cb:22:0a:55:5d:99:08:d9:
d0:7a:5c:25:d4:3c:3f:0d:a7:10:7e:e9:11:2a:c9:
37:d0:b1:0e:c3:ab:7f:30:24:79:16:ed:d1:c6:6c:
0c:0e:65:c9:00:28:18:c4:75:9a:07:6a:16:18:c7:
7d:10:18:ad:f4:45:c2:bb:5d:2c:eb:16:1f:e1:75:
d0:b5:3a:61:a0:d8:77:3d:31:88:53:36:7b:4c:e0:
6f:6d:8a:e8:5f:22:d7:a4:7a:cd:b9:9a:7a:73:c0:
57:94:cd:52:45:58:46:9f:3f:d2:e3:ff:59:e2:6c:
1b:b4:15:5e:62:86:a9:94:73:5e:c7:ef:9e:50:74:
46:ab:77:47:ea:1d:64:ed:f5:50:f3:e6:7e:92:d8:
7b:b4:e6:62:f2:32:81:d9:b7:23:59:69:b0:31:01:
c4:e1:44:49:af:c9:9b:59:6e:44:17:5b:8b:a1:b4:
3e:c9:be:a5:55:ad:2d:46:1e:b0:98:7f:ad:4e:a1:
05:8a:49:6f:8f:37:ed:d3:73:eb:2c:07:88:88:b4:
eb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A2:EA:33:8F:2C:7B:C6:D9:80:6D:EA:7A:2C:16:D2:9E:02:13:D2
X509v3 Authority Key Identifier:
keyid:91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:30:cc:13:26:a7:31:4c:b9:18:02:f0:79:ea:9b:d6:76:50:
b8:90:8a:e3:78:ec:cb:49:04:55:4e:1f:1d:95:c3:7e:c1:62:
2c:f0:cb:27:71:a1:d9:30:4d:97:a1:27:9e:32:d2:1c:57:de:
a5:7f:d2:68:31:5c:00:5a:15:e5:39:02:fa:53:43:82:d7:c4:
cb:a2:ad:6c:a6:2a:9b:7d:6f:d0:31:61:4c:71:d4:92:d1:61:
49:87:46:05:1c:ba:2c:36:0f:dc:79:34:ec:92:04:4c:b0:4e:
dc:4d:ae:57:c0:6e:8c:f6:ce:e4:5a:23:32:82:8f:3e:07:10:
35:fd:93:bc:7e:12:9f:3f:ec:68:80:51:26:e8:0c:cf:15:c2:
51:bb:7a:b2:0b:5a:27:8f:e1:0a:96:b2:00:1d:c6:51:b6:4a:
82:ee:47:77:5e:6e:4d:11:59:e0:7b:9f:dc:4c:e5:87:0c:d1:
d4:4a:78:31:22:48:b0:e1:fe:be:d0:62:43:f7:10:8a:30:72:
04:a5:af:89:55:e0:96:f8:7d:28:7b:7f:8b:24:df:75:7e:8f:
75:52:bb:4c:26:f7:ee:66:2b:73:04:6a:30:e2:3f:e5:67:49:
b2:8d:d5:77:47:e1:83:a3:57:eb:92:83:dd:a3:73:f8:f0:fa:
17:ad:6b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:14:42 2026 by rpki-client