
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
File: 5pLFtgs-8cIERDn8OQrVbcPLzWM.mft (raw, json)
Hash identifier: j/zo9aCnycQIdT+xo6kyktfUuHpvMqhqltwvNXaFMS0=
Subject key identifier: 2C:D0:84:E6:7A:27:27:03:98:D9:C0:C5:EE:8D:9E:64:F5:D8:A8:62
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 09FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
Manifest number: 093D
Signing time: Sun 20 Sep 2026 20:47:03 +0000
Manifest this update: Sun 20 Sep 2026 20:47:02 +0000
Manifest next update: Sun 27 Sep 2026 20:47:02 +0000
Files and hashes: 1: 5pLFtgs-8cIERDn8OQrVbcPLzWM.crl (hash: S4EMD8ih1Nlel+diErt6IjLoMU+CXk8fYg2Mb8FZU6Y=)
2: 3E7D7BA284C211F1A7B5D86994A30FBC.roa (hash: ZMQ0Cjle4HHKJJB701TyMjkGkmfwfkaUO+r50nwpOlU=)
3: 8BD2406E632411F1916C95348547A888.roa (hash: KwopK0R19S1+uxlTpfk7FIN3YSZadS2BhXibwWAyPY0=)
4: F3643AD6089C11F09BB44535C4F9AE02.roa (hash: h+M8yWQJoBkACzAfTIpQdErBAlAmwZgxPQ+K7UT/ZJ8=)
5: 244B9D1874CB11EEB3C0267DC4F9AE02.roa (hash: NgHinJNOa5WD0lzlF+pCDsZCucZ3Hfmi2lX8TWyz05k=)
6: 79986EE8FE3D11EFB763F62EC4F9AE02.roa (hash: b0d7KFkivg+pSQhSopB2OC7InpEaaI034fHeKJQ1XME=)
7: 9765FB988A5D11EE9E6AA223C4F9AE02.roa (hash: EEYzCbyeqxDaeKgknxCRHT1rePeuinavgu4aD0/oSEk=)
8: D6011C5AAD9811F1B4E8CBF46A11F970.roa (hash: b28Ex1N54w6rpGGP58z8s9hERidI1so2TC9OIUEgb5I=)
9: 215A8FDE4B9E11EEBF766C7FC4F9AE02.roa (hash: n6tcvXpr4IAe1S5u61Xx4m/84oyxH16o7/TxMhPSnE4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2559 (0x9ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Validity
Not Before: Sep 20 20:47:02 2026 GMT
Not After : Sep 27 20:47:02 2026 GMT
Subject: CN=6ab04647-9651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:13:55:ad:36:ef:d9:60:f9:9a:05:89:26:db:
f6:b3:1c:e9:c5:b9:96:cb:b2:c1:7a:44:1c:82:4a:
44:66:bb:c0:c7:a7:2f:4f:f7:0e:64:31:75:ef:fd:
e4:be:0f:54:1f:5d:0c:a1:30:81:c5:5e:22:5f:30:
0f:9c:9d:54:85:f7:01:68:0e:b9:92:5a:78:f5:2e:
e9:01:e7:0c:89:35:d4:e5:66:84:87:b5:5b:cd:90:
41:e8:77:c2:1a:08:83:31:70:96:a8:6d:5e:a9:47:
ee:ce:5e:44:a7:cd:9c:5a:1b:7d:21:22:1a:50:5c:
65:94:90:a3:6a:75:87:41:3f:bb:bf:c4:69:6e:29:
ae:85:23:d6:f2:d2:64:f4:3a:c1:c6:aa:07:8f:52:
7f:e4:8b:aa:ca:01:d2:36:c8:02:11:50:4b:19:ee:
1b:38:52:fa:82:ed:6b:72:d4:5b:21:07:61:f4:10:
d0:38:1d:73:21:1f:bf:f5:c7:1f:ea:0e:75:37:53:
57:7a:e5:04:e6:84:91:55:78:81:fa:cd:50:8a:43:
c4:f6:0c:06:95:ec:16:c1:de:79:cd:e8:d3:7e:12:
ac:68:f6:c2:44:af:d7:20:10:9d:b5:f1:89:dd:85:
20:b7:14:c8:61:95:26:4d:9a:26:93:50:3f:00:ff:
d5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D0:84:E6:7A:27:27:03:98:D9:C0:C5:EE:8D:9E:64:F5:D8:A8:62
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:67:a0:7c:5b:4a:0f:78:a7:46:79:38:3f:66:28:20:1d:17:
17:3f:ea:f6:84:0b:55:5c:0e:30:d5:32:d2:84:cd:12:c4:62:
79:97:d0:b6:fa:61:77:a9:4f:2e:c3:62:fb:72:7d:54:5a:e4:
e1:e6:6f:f2:64:47:17:d5:98:1c:e8:d3:a9:2a:7f:ea:0b:5b:
be:6e:1c:03:8d:09:29:2f:3e:a5:00:1c:66:86:f0:0d:8e:62:
1f:4a:73:68:ce:6a:aa:2a:93:b7:78:eb:f3:0c:61:18:d7:2e:
68:e3:ec:3a:1b:40:0f:fb:d3:c7:a0:36:65:af:e5:43:f1:03:
fe:59:fb:05:6d:32:b6:55:2a:70:26:ab:05:0c:07:af:8f:c4:
f2:48:04:5d:98:d0:53:4c:7d:36:f7:86:78:ad:4a:13:af:d3:
73:ef:6d:4a:22:50:ba:2b:e3:51:5c:f0:78:66:1f:59:16:c1:
37:69:34:71:9f:fa:b1:a6:3b:fd:25:dc:35:2b:2e:d9:27:b0:
c0:a0:4c:32:ff:78:46:4b:0f:2e:cc:ae:3d:08:26:ad:a4:b9:
7b:d2:d5:18:1f:3c:bf:76:cb:d4:b2:28:6a:87:ac:75:86:a8:
f1:11:d7:f8:15:f7:d1:48:83:32:ca:7b:86:ef:ea:86:11:c5:
a5:ad:a8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:17:58 2026 by rpki-client