
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FE64/1641D0DE5E3911F1B10499CF007AAC22/5-hBazlJjR8g7vTYMdsv_s3l8wE.mft
File: 5-hBazlJjR8g7vTYMdsv_s3l8wE.mft (raw, json)
Hash identifier: cQr5W6tjrYirIrAQKcJCGvTMedD98SLq2FT12LK/Yi4=
Subject key identifier: A6:D8:1E:16:6D:75:E7:0B:0F:6F:6C:ED:02:10:55:E5:C6:62:81:06
Authority key identifier: E7:E8:41:6B:39:49:8D:1F:20:EE:F4:D8:31:DB:2F:FE:CD:E5:F3:01
Certificate issuer: /CN=A918FE64/serialNumber=E7E8416B39498D1F20EEF4D831DB2FFECDE5F301
Certificate serial: 45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-hBazlJjR8g7vTYMdsv_s3l8wE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FE64/1641D0DE5E3911F1B10499CF007AAC22/5-hBazlJjR8g7vTYMdsv_s3l8wE.mft
Manifest number: 44
Signing time: Tue 13 Oct 2026 09:12:17 +0000
Manifest this update: Tue 13 Oct 2026 09:12:17 +0000
Manifest next update: Tue 20 Oct 2026 09:12:17 +0000
Files and hashes: 1: 5-hBazlJjR8g7vTYMdsv_s3l8wE.crl (hash: uGz1BEBHGa0RTJfRMlYww/xz+erdicw+moT174xH9pQ=)
2: A966E0CA5E3911F1AE025C80017AAC22.roa (hash: pmtjjwkJfcllfi5+ob6MblnqfEjyL3i5W+8VkNGojAg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FE64/1641D0DE5E3911F1B10499CF007AAC22/5-hBazlJjR8g7vTYMdsv_s3l8wE.crl
rsync://rpki.apnic.net/member_repository/A918FE64/1641D0DE5E3911F1B10499CF007AAC22/5-hBazlJjR8g7vTYMdsv_s3l8wE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-hBazlJjR8g7vTYMdsv_s3l8wE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 09:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FE64, serialNumber=E7E8416B39498D1F20EEF4D831DB2FFECDE5F301
Validity
Not Before: Oct 13 09:12:17 2026 GMT
Not After : Oct 20 09:12:17 2026 GMT
Subject: CN=6acdf5f1-783c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d5:b2:c3:f5:76:d6:3d:fa:08:a9:b9:f6:b0:
84:b3:10:7d:27:08:da:03:35:99:0d:39:b8:ce:d0:
5d:6a:0c:33:fa:fa:85:de:42:c8:2c:b6:ab:6b:23:
a2:99:a6:59:01:93:f7:b7:8b:8d:4f:21:ee:31:2a:
c1:f4:9b:83:d1:75:44:cb:0f:20:65:82:10:2d:17:
d8:6b:73:42:a9:a5:b6:24:0f:16:f3:08:f2:60:4b:
22:ff:2b:44:e9:d2:22:6f:e3:3a:45:87:67:33:d9:
ec:ae:b4:2c:b2:44:ce:22:ea:f1:cd:e8:d3:08:81:
29:83:cc:a1:d0:95:09:55:e2:1b:33:13:03:53:0b:
74:56:a8:e9:96:41:95:90:91:97:b0:02:f8:a6:e9:
9b:13:db:85:08:44:24:d5:66:f7:64:60:86:3c:0f:
5a:58:f9:7f:7e:b7:fa:1d:dd:63:a7:5b:6f:81:14:
81:cf:ab:66:74:02:6a:96:1b:e0:95:54:d2:8c:16:
f3:2b:be:44:5b:2c:24:e2:e1:b0:1a:29:85:27:cf:
a8:5a:3b:d6:3c:cc:20:14:9e:31:70:db:87:3c:6c:
87:07:cd:7c:00:de:10:73:29:5d:77:90:95:2d:c6:
60:17:9e:8e:71:ea:b4:d7:e0:d1:f0:b6:20:40:26:
28:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D8:1E:16:6D:75:E7:0B:0F:6F:6C:ED:02:10:55:E5:C6:62:81:06
X509v3 Authority Key Identifier:
keyid:E7:E8:41:6B:39:49:8D:1F:20:EE:F4:D8:31:DB:2F:FE:CD:E5:F3:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FE64/1641D0DE5E3911F1B10499CF007AAC22/5-hBazlJjR8g7vTYMdsv_s3l8wE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-hBazlJjR8g7vTYMdsv_s3l8wE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE64/1641D0DE5E3911F1B10499CF007AAC22/5-hBazlJjR8g7vTYMdsv_s3l8wE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:49:c5:cf:aa:fd:55:44:64:da:97:19:fd:84:db:02:0c:9a:
88:8c:49:ed:3f:8c:bb:47:ae:47:a6:2e:47:96:48:b6:91:bd:
2d:35:b1:50:9d:31:1a:8f:1d:f8:30:e7:7a:dc:5c:3e:92:4e:
e8:28:e0:98:68:0f:4a:2b:ed:0b:7b:5d:77:37:f1:9b:b0:09:
89:8f:ac:f2:79:7e:e6:4c:bb:c4:32:83:87:ed:21:ad:66:83:
29:3c:fa:3b:14:30:c1:45:0d:2e:0e:86:b6:54:79:04:bf:40:
ec:22:0b:a2:46:39:cd:03:1f:f3:ec:0f:b2:a5:80:a2:c6:40:
f1:71:5f:59:32:57:a4:19:e6:35:a2:62:0d:ee:02:6e:f2:24:
de:cd:1e:f3:40:db:91:6c:e5:e4:8c:4b:a6:6d:0a:31:b9:86:
a7:a6:06:96:c7:6c:7e:ca:08:93:c2:63:b5:65:d4:93:aa:f9:
0f:8d:1b:79:7a:b8:27:db:fd:c4:28:f5:26:4a:0a:2d:b8:d3:
4f:9c:e6:d8:fb:de:02:86:00:9d:73:14:4d:59:f0:9a:2c:7d:
a5:e3:32:0d:7e:30:e4:ab:60:26:1e:ac:a8:52:39:d6:09:5f:
cc:b9:24:66:79:18:d5:64:ab:99:08:42:6a:bc:6d:60:3d:3d:
95:4c:ca:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:44:24 2026 by rpki-client