
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
File: s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft (raw, json)
Hash identifier: P+QGhCVZ62Ou2sgkR5SK0rOXeW3Zm1DJuzeFsBrrggY=
Subject key identifier: C5:2C:A7:9E:7E:33:69:0B:7A:A2:A3:4B:F6:8F:89:0A:35:A1:73:5A
Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
Certificate issuer: /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Certificate serial: 0219
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
Manifest number: 0207
Signing time: Wed 23 Sep 2026 03:07:48 +0000
Manifest this update: Wed 23 Sep 2026 03:07:48 +0000
Manifest next update: Wed 30 Sep 2026 03:07:48 +0000
Files and hashes: 1: s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl (hash: cAyDPH2aKMc49hM/DAP0wsEDnDaiqRWX3hz2QYUhi/8=)
2: A97CBD42A06611EFA888B57DC4F9AE02.roa (hash: 4V1R4yBz9L+Ygkp9Jd1O9idd1/44LPhkeQiPf1Qbp1Q=)
3: 762CACD0B04311EF95390327C4F9AE02.roa (hash: cvBldBadb8nJSATgwrsmCmmppZB2HYAM+GSD2SpFaCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl
rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 537 (0x219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917530D, serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Validity
Not Before: Sep 23 03:07:48 2026 GMT
Not After : Sep 30 03:07:48 2026 GMT
Subject: CN=6ab34284-c7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:90:5d:d1:fb:4e:26:59:9e:8e:6f:bc:62:
dd:f2:8c:73:ef:ee:25:70:52:19:d0:f6:cb:7a:22:
c7:98:88:84:02:4d:ac:f9:52:76:79:c6:d2:c2:65:
33:0e:91:fe:f7:12:3a:a8:12:e1:2c:88:dc:7d:08:
d4:0b:01:9a:34:e8:56:ae:53:53:3e:43:5b:46:90:
1b:41:c9:93:c7:d3:10:7e:02:05:9f:ee:07:07:56:
ad:80:01:52:e2:f1:a2:db:ca:e7:29:46:46:40:75:
a3:db:5a:24:75:98:9b:0b:bb:9f:2c:44:45:a3:b1:
bd:a8:c5:58:94:15:88:2f:03:8d:24:fa:21:d9:23:
f6:a0:e8:6d:78:d4:e3:22:69:08:b9:e3:95:50:78:
41:e8:70:4f:e3:91:eb:19:34:dc:32:f8:37:65:19:
91:9c:09:f8:be:69:19:4f:41:35:96:00:09:a7:ec:
da:f4:a3:17:1d:f4:67:c8:66:bf:33:0b:07:14:d7:
85:ab:ec:76:86:a4:42:2f:a0:e8:c8:35:09:a7:e0:
95:f6:96:26:54:19:38:a0:43:91:b8:f9:28:b5:2a:
c9:69:89:dc:79:8a:7e:7d:0f:79:2d:f4:72:76:9e:
a3:ef:38:d7:69:ac:92:b5:50:19:07:f5:8e:d1:c3:
e9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2C:A7:9E:7E:33:69:0B:7A:A2:A3:4B:F6:8F:89:0A:35:A1:73:5A
X509v3 Authority Key Identifier:
keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:53:23:37:11:7d:b0:50:8c:9a:11:6d:4b:8b:8c:19:18:0d:
c1:a9:48:f2:6d:8a:d5:ae:73:4f:eb:04:75:1f:e3:73:1d:e2:
5c:0d:2c:3d:dd:ff:7d:b3:24:c8:38:f5:d6:fd:a2:25:95:fa:
cd:ed:8f:b6:ce:7d:8f:59:d4:ff:48:59:48:df:8f:18:19:4b:
d2:67:05:08:62:e0:9f:99:48:06:f6:71:66:08:49:7b:00:ac:
c9:e8:70:2e:03:f4:0b:95:b8:7a:14:9a:98:72:db:77:e1:d2:
c0:cc:4e:9f:1f:08:08:2c:89:8d:7a:58:e7:5a:fc:38:47:04:
41:3b:40:ce:de:ab:73:ca:02:cf:ea:7f:7c:f9:7c:dc:15:12:
b2:98:6e:d0:b5:99:72:94:63:9f:df:04:90:27:97:e6:ef:04:
80:f5:21:25:e8:1f:b1:39:d4:f0:ba:7f:8f:06:bb:dd:d9:35:
74:50:f3:e8:cb:61:ee:fd:a7:d4:ed:4f:0e:5a:53:c4:ad:7c:
3d:fc:6e:91:85:c2:3b:df:56:04:24:b4:41:19:af:d9:ed:42:
20:36:e1:af:2b:c7:8c:a6:8c:ee:1e:4d:7c:a4:05:2b:4c:f1:
b3:ff:cf:34:7a:ce:1f:62:26:30:52:1f:3f:85:54:bc:f3:3e:
77:0b:79:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUzMEQxMTAvBgNVBAUTKEIzOTkyRjBENDlCQUY2QTM2RkRBNjU4RTVCNDU5NDY5
NTIxRTVCNDQwHhcNMjYwOTIzMDMwNzQ4WhcNMjYwOTMwMDMwNzQ4WjAYMRYwFAYD
VQQDEw02YWIzNDI4NC1jN2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArlmQXdH7TiZZno5vvGLd8oxz7+4lcFIZ0PbLeiLHmIiEAk2s+VJ2ecbSwmUz
DpH+9xI6qBLhLIjcfQjUCwGaNOhWrlNTPkNbRpAbQcmTx9MQfgIFn+4HB1atgAFS
4vGi28rnKUZGQHWj21okdZibC7ufLERFo7G9qMVYlBWILwONJPoh2SP2oOhteNTj
ImkIueOVUHhB6HBP45HrGTTcMvg3ZRmRnAn4vmkZT0E1lgAJp+za9KMXHfRnyGa/
MwsHFNeFq+x2hqRCL6DoyDUJp+CV9pYmVBk4oEORuPkotSrJaYnceYp+fQ95LfRy
dp6j7zjXaayStVAZB/WO0cPpdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMUsp55+
M2kLeqKjS/aPiQo1oXNaMB8GA1UdIwQYMBaAFLOZLw1Juvajb9pljltFlGlSHltE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwRC9ERDdFMDkxQ0I2
NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlxTnYybVdPVzBXVWFWSWVX
MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3M1a3ZEVW02OXFOdjJtV09XMFdVYVZJZVcwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTMwRC9ERDdFMDkxQ0I2NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlx
TnYybVdPVzBXVWFWSWVXMFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXVMjNxF9sFCMmhFtS4uMGRgNwalI8m2K1a5zT+sEdR/jcx3iXA0sPd3/fbMk
yDj11v2iJZX6ze2Pts59j1nU/0hZSN+PGBlL0mcFCGLgn5lIBvZxZghJewCsyehw
LgP0C5W4ehSamHLbd+HSwMxOnx8ICCyJjXpY51r8OEcEQTtAzt6rc8oCz+p/fPl8
3BUSsphu0LWZcpRjn98EkCeX5u8EgPUhJegfsTnU8Lp/jwa73dk1dFDz6Mth7v2n
1O1PDlpTxK18PfxukYXCO99WBCS0QRmv2e1CIDbhryvHjKaM7h5NfKQFK0zxs//P
NHrOH2ImMFIfP4VUvPM+dwt5/g==
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:05:04 2026 by rpki-client