
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft
File: 5nG8sr6VpsiFJxIdiBXovPGKoeI.mft (raw, json)
Hash identifier: 0HzgorvrD0XfCJL0Q9s1nZFxMPgSAZFmyVEU+ud2TdU=
Subject key identifier: 79:5F:DC:2B:07:75:C9:F9:99:A4:B4:64:FF:A9:8E:40:35:C6:FE:7A
Authority key identifier: E6:71:BC:B2:BE:95:A6:C8:85:27:12:1D:88:15:E8:BC:F1:8A:A1:E2
Certificate issuer: /CN=A9124926/serialNumber=E671BCB2BE95A6C88527121D8815E8BCF18AA1E2
Certificate serial: 0AD8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft
Manifest number: 0AC8
Signing time: Wed 14 Oct 2026 19:38:47 +0000
Manifest this update: Wed 14 Oct 2026 19:38:46 +0000
Manifest next update: Wed 21 Oct 2026 19:38:46 +0000
Files and hashes: 1: 5nG8sr6VpsiFJxIdiBXovPGKoeI.crl (hash: fNe4kFounC+/faXxb10e842uGytNTeKx0U5U/YQuHCs=)
2: 209BA8B682DF11EAABBC5018C4F9AE02.roa (hash: F4jan19ZO2wXRROpblsd7HlwIXIUGMlPcZO16eAzRtQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.crl
rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 19:38:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2776 (0xad8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124926, serialNumber=E671BCB2BE95A6C88527121D8815E8BCF18AA1E2
Validity
Not Before: Oct 14 19:38:46 2026 GMT
Not After : Oct 21 19:38:46 2026 GMT
Subject: CN=6acfda46-bdaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:51:c1:ad:ed:7a:b1:ba:d9:0b:ca:f9:1e:57:
b1:41:5e:02:0e:19:c9:54:24:b8:4f:0c:ae:b0:f1:
6c:95:93:85:83:76:e2:f4:06:3c:bd:2c:e3:1e:b7:
6c:a2:21:ea:c5:8f:41:40:d2:21:5b:28:71:a4:fe:
8e:7a:62:e1:79:88:f4:2c:3b:bf:82:c2:6d:71:e0:
6f:5e:de:3f:ec:2a:04:44:c0:09:ac:0b:a1:63:42:
45:41:43:e5:d8:14:37:d8:79:53:0a:36:7b:85:b0:
44:cf:48:1b:0e:0a:08:63:dd:3c:2e:6c:35:01:5c:
2a:13:2d:8e:4a:53:62:62:06:aa:44:fe:90:65:3f:
b3:21:0f:42:87:d2:56:14:a2:ed:11:6c:d6:4d:13:
d3:20:21:7a:37:e5:d2:55:fd:45:20:4a:b4:7a:37:
c8:f8:ae:15:89:1a:59:65:16:ce:5b:16:0f:98:0f:
08:0e:42:7e:8d:5e:44:81:87:4c:d6:8d:2a:09:40:
1d:03:83:8d:cf:92:88:6c:00:c2:83:ef:21:62:8d:
88:96:e1:99:2b:08:0d:0b:f8:d7:f7:ef:d2:27:d3:
0f:b8:07:e2:36:8c:79:ca:6b:85:bd:56:72:1a:26:
2a:b3:90:55:13:3b:7f:d9:4c:49:4d:b7:d6:ab:40:
76:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5F:DC:2B:07:75:C9:F9:99:A4:B4:64:FF:A9:8E:40:35:C6:FE:7A
X509v3 Authority Key Identifier:
keyid:E6:71:BC:B2:BE:95:A6:C8:85:27:12:1D:88:15:E8:BC:F1:8A:A1:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:fd:03:ed:a6:5f:73:48:4c:b0:35:bd:bf:32:9d:94:09:91:
f3:98:de:b2:9c:45:bf:e3:b2:fb:b4:fe:4f:9b:f6:2c:73:19:
8a:88:3a:c1:3b:df:81:99:f8:53:ba:fe:73:1c:b1:c2:a6:50:
fc:e7:12:d3:f9:95:85:f5:78:37:8b:18:ff:0c:c1:54:cf:2e:
50:54:16:6a:30:3c:8e:50:65:12:1d:c8:e0:70:6d:40:d6:69:
2f:41:5b:6b:de:52:4f:41:7c:00:2a:09:2b:9a:c0:7a:b4:fa:
d9:42:92:ca:08:2b:44:09:8f:64:f5:83:4a:ef:03:9e:12:d0:
a4:32:0d:29:f6:8d:da:08:da:ae:b0:9c:ee:24:60:ff:97:ec:
f3:2b:d9:d9:e9:e4:62:28:0e:a7:fe:ef:e0:fe:6d:eb:e1:bd:
6c:3d:16:41:74:68:4c:c5:23:d3:f7:2f:ea:bc:71:c5:26:92:
04:f3:c8:45:4e:a7:55:c7:68:02:25:f0:0f:20:dc:99:4e:e3:
a3:31:01:97:b9:a0:bc:43:fd:7a:7f:fa:ad:db:05:a6:fe:d8:
53:8a:a3:e6:d0:4f:3f:b2:45:a9:1d:ed:7a:ec:4c:5e:c2:f6:
81:56:33:e5:ba:23:c6:30:c4:54:fe:66:31:c5:a1:88:81:ff:
08:3c:bd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:40:07 2026 by rpki-client