
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
File: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft (raw, json)
Hash identifier: 3f5WES5CSsCgq3iH/AWJ9r9LhKdu3UcEnU3FYf9QMZw=
Subject key identifier: 1A:42:7A:B2:D1:2A:71:B2:B6:7B:2C:5A:30:B3:55:C2:40:3F:AA:18
Authority key identifier: 73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76
Certificate issuer: /CN=A91316E5/serialNumber=73987ECCE77E44EB36651E098D33750FA864E676
Certificate serial: 024E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
Manifest number: 0248
Signing time: Wed 07 Oct 2026 02:51:02 +0000
Manifest this update: Wed 07 Oct 2026 02:51:01 +0000
Manifest next update: Wed 14 Oct 2026 02:51:01 +0000
Files and hashes: 1: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl (hash: dCbqWlIi4/VqOu+kVCvQnmbq1R4WgCM9O3rLgZk/FPU=)
2: C1A8182646D011EE8BE5AE80C4F9AE02.roa (hash: GaiJN8sQVRxQhxF84N/8bkdFVJqBpd2e+8ULBvpRalM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl
rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590 (0x24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91316E5, serialNumber=73987ECCE77E44EB36651E098D33750FA864E676
Validity
Not Before: Oct 7 02:51:01 2026 GMT
Not After : Oct 14 02:51:01 2026 GMT
Subject: CN=6ac5b396-b566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:2f:c8:df:53:80:70:8d:33:11:95:c8:78:
e0:da:74:1b:24:6a:58:37:c0:94:99:47:a9:de:8b:
a4:1c:db:48:72:c0:f5:70:b4:9f:ff:89:af:66:14:
03:78:a3:47:a1:fc:7d:b3:70:d1:7d:d8:7f:b1:30:
ec:f3:af:94:af:23:44:5a:d4:83:db:fc:e7:39:bc:
d4:8b:f6:e7:f8:bb:04:66:19:2f:8f:fe:dc:ca:13:
91:02:54:6b:3d:1f:f8:a9:f2:14:67:24:32:ca:58:
96:12:d0:57:29:13:c0:7c:3c:bb:50:0a:6b:04:2f:
91:9b:c5:5e:16:4f:65:d9:ed:36:e5:ec:55:1c:32:
b7:ed:d3:df:c7:14:69:a3:4b:3e:a4:dc:c3:1d:b8:
0a:3e:db:9b:da:32:f9:f0:7e:5f:73:ea:8f:54:1f:
a1:2d:35:ca:b9:79:30:d1:d4:45:4f:15:70:fa:2a:
2c:33:d1:4f:e9:6a:1c:a2:c2:ac:70:98:76:b7:83:
75:bb:32:6b:dd:07:2d:14:f2:6a:62:3c:33:8e:45:
9c:ec:13:97:03:a8:3e:70:de:e4:86:13:52:8b:33:
68:17:4a:56:5c:8c:f2:25:dc:64:0f:44:0e:da:2f:
12:cb:0d:8f:13:b7:fc:e8:e3:80:6c:f4:ce:49:b0:
7d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:42:7A:B2:D1:2A:71:B2:B6:7B:2C:5A:30:B3:55:C2:40:3F:AA:18
X509v3 Authority Key Identifier:
keyid:73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:48:b4:86:fa:6f:3c:8c:67:f6:f4:fe:1b:62:63:33:7a:8e:
ad:cb:a4:a8:6f:c4:45:2c:a0:3c:d5:c9:2b:1f:e9:6c:a8:7c:
72:00:4a:a9:12:49:f6:be:c6:90:c5:7b:52:d6:33:ba:5a:6a:
a3:40:38:9f:be:bb:15:96:93:a2:72:6e:13:1b:d7:51:8a:c4:
fe:28:c9:9a:7c:9a:4a:86:71:aa:ac:23:bd:50:08:ee:3c:f6:
19:bf:a8:cf:75:a6:da:00:c8:4f:57:ec:80:8a:e5:3d:1d:b9:
f4:f1:1a:7c:60:79:3d:ca:e5:ea:40:6f:e9:1b:84:ea:f7:40:
07:5d:0d:a3:c8:10:aa:ba:91:af:5d:41:aa:93:2c:8c:f4:be:
a4:92:43:ca:cb:d1:e9:26:48:e8:1c:f4:08:ac:67:1b:2e:60:
c4:8d:16:1e:f3:95:33:ce:4b:96:b8:47:6a:82:98:fb:3a:14:
36:e3:de:55:c2:77:8a:48:43:55:43:2c:6f:f5:9f:81:cf:c4:
43:b7:e2:03:49:f8:60:a1:22:31:ff:ed:5a:ca:13:39:22:a0:
e4:aa:d4:ca:a7:30:ed:57:a0:e5:b9:a5:d2:fc:fb:a8:74:70:
49:a3:95:50:1f:72:f8:8d:b5:5f:d5:94:e4:d0:72:3f:c3:0d:
e2:59:2b:74
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE2RTUxMTAvBgNVBAUTKDczOTg3RUNDRTc3RTQ0RUIzNjY1MUUwOThEMzM3NTBG
QTg2NEU2NzYwHhcNMjYxMDA3MDI1MTAxWhcNMjYxMDE0MDI1MTAxWjAYMRYwFAYD
VQQDEw02YWM1YjM5Ni1iNTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs+UvyN9TgHCNMxGVyHjg2nQbJGpYN8CUmUep3oukHNtIcsD1cLSf/4mvZhQD
eKNHofx9s3DRfdh/sTDs86+UryNEWtSD2/znObzUi/bn+LsEZhkvj/7cyhORAlRr
PR/4qfIUZyQyyliWEtBXKRPAfDy7UAprBC+Rm8VeFk9l2e025exVHDK37dPfxxRp
o0s+pNzDHbgKPtub2jL58H5fc+qPVB+hLTXKuXkw0dRFTxVw+iosM9FP6WocosKs
cJh2t4N1uzJr3QctFPJqYjwzjkWc7BOXA6g+cN7khhNSizNoF0pWXIzyJdxkD0QO
2i8Syw2PE7f86OOAbPTOSbB9mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBpCerLR
KnGytnssWjCzVcJAP6oYMB8GA1UdIwQYMBaAFHOYfsznfkTrNmUeCY0zdQ+oZOZ2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZFNS81MUY5ODM1QzQ2
RDAxMUVFODFGMjA3M0ZDNEY5QUUwMi9jNWgtek9kLVJPczJaUjRKalROMUQ2aGs1
blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2M1aC16T2QtUk9zMlpSNEpqVE4xRDZoazVuWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTZFNS81MUY5ODM1QzQ2RDAxMUVFODFGMjA3M0ZDNEY5QUUwMi9jNWgtek9kLVJP
czJaUjRKalROMUQ2aGs1blkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANki0hvpvPIxn9vT+G2JjM3qOrcukqG/ERSygPNXJKx/pbKh8cgBKqRJJ9r7G
kMV7UtYzulpqo0A4n767FZaTonJuExvXUYrE/ijJmnyaSoZxqqwjvVAI7jz2Gb+o
z3Wm2gDIT1fsgIrlPR259PEafGB5Pcrl6kBv6RuE6vdAB10No8gQqrqRr11BqpMs
jPS+pJJDysvR6SZI6Bz0CKxnGy5gxI0WHvOVM85LlrhHaoKY+zoUNuPeVcJ3ikhD
VUMsb/Wfgc/EQ7fiA0n4YKEiMf/tWsoTOSKg5KrUyqcw7Veg5bml0vz7qHRwSaOV
UB9y+I21X9WU5NByP8MN4lkrdA==
-----END CERTIFICATE-----
Generated at Fri Oct 9 02:46:33 2026 by rpki-client