
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
File: s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft (raw, json)
Hash identifier: +m3F0sKFA8wpxMU0si4T8c45n+ttdtnwlcgtno1FxXY=
Subject key identifier: 2D:E4:DA:E8:07:CC:72:AE:36:92:32:01:5C:FC:0C:B2:58:D0:3B:A6
Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
Certificate issuer: /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Certificate serial: 389E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
Manifest number: 3724
Signing time: Mon 28 Sep 2026 14:25:43 +0000
Manifest this update: Mon 28 Sep 2026 14:25:42 +0000
Manifest next update: Mon 05 Oct 2026 14:25:42 +0000
Files and hashes: 1: s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl (hash: kZvSr9qG4ls4nRWJkyUNGLCZUsgEEzD6DX9Zb1MzBB8=)
2: 71D60BC2F6BA11EB865C4246C4F9AE02.roa (hash: KFI2tWHfw3kppvCKmuDyoJI/TXZwNEgYE/dBKADg924=)
3: 9AF37E96D71B11EA9532F30CC4F9AE02.roa (hash: 548W6O4jy2t4m978fP7/vkFNV7StaszXL5cUkqOrlsQ=)
4: 18F4FD76918111EC93DCA42AC4F9AE02.roa (hash: aZB+rnqYjRl4Uc+17dt2ByemLhQ+5bYKCdCl9y70GQM=)
5: 160B219870BA11E99E0F6D2DC4F9AE02.roa (hash: 6MJI5nd76wUg6mIJiXKwgcaYmVbyO2X4VHI5tQqt2gM=)
6: 26A143C291EB11EF8A024083C4F9AE02.roa (hash: qOuOZrrZglkih59X/Pjz7efqStftFhfdFn50wlzJXt4=)
7: 305A13D6C9F211F0ABA27932C4F9AE02.roa (hash: NrPp83eADET8bdfQFh9hNsWD9EoYo/UsIxIfM+Xp3F8=)
8: B36EA83C70B111E98CFFF710C4F9AE02.roa (hash: 2nquH/Th3aV+FpaTguBv+jy8p2aXbOfhDSjXTwmNigg=)
9: B6704306C9F111F08975B813C4F9AE02.roa (hash: QnDSYmh9AS+vc7/gM3qgxQlZaNKWdqAp8+Ehbtb0lnc=)
10: B0EB27B470B811E9B32F6726C4F9AE02.roa (hash: z4MfCyr+jDttoP5VW5Vb0l643tPHIibVvGJ7ZyGfs8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl
rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 14:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14494 (0x389e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Validity
Not Before: Sep 28 14:25:42 2026 GMT
Not After : Oct 5 14:25:42 2026 GMT
Subject: CN=6aba78e7-b4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:53:51:83:df:ef:4b:71:f7:d1:6a:9c:8c:
ca:e4:78:99:cc:30:fa:16:75:f7:f8:4b:ee:6c:0e:
08:4c:41:ce:e8:82:fd:8d:c2:48:70:6f:62:3f:cb:
52:dc:9d:fc:02:60:fa:7f:b4:3e:e5:2f:f8:e8:f5:
ab:76:a1:3d:a5:85:f7:b7:37:f2:13:d0:3c:b6:3c:
38:da:30:3e:55:21:4a:68:54:12:9f:07:40:73:3a:
74:14:25:5e:a8:95:ee:e2:b6:4a:56:ef:60:15:8c:
b3:32:47:b3:26:e5:35:68:c0:b7:19:b6:09:6d:07:
8d:72:a5:34:e1:ad:b1:a6:da:49:ca:77:a2:44:6d:
f8:e4:ea:3f:a6:1c:82:08:19:c2:d5:63:a0:d6:30:
b2:c9:f4:cf:35:69:e9:b8:6f:1f:05:b5:27:e6:61:
f8:f0:4f:95:e0:1a:d8:f7:7d:b2:ea:91:0f:ad:0a:
76:88:cc:5e:a4:82:4c:b1:f8:9a:cd:97:86:0f:f1:
79:17:d2:fa:92:26:ea:4f:1f:2a:8c:27:9d:76:e0:
13:f2:b2:9b:9e:e4:87:ca:78:f9:0a:c0:e0:27:3e:
f2:78:de:0f:02:79:52:29:40:ac:ad:17:d7:e0:a9:
ed:ba:31:0f:ce:46:10:d7:65:86:19:f1:e4:67:6d:
f4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E4:DA:E8:07:CC:72:AE:36:92:32:01:5C:FC:0C:B2:58:D0:3B:A6
X509v3 Authority Key Identifier:
keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:a9:84:2c:95:d3:37:00:94:ac:30:88:d5:41:80:14:5b:7a:
82:49:a9:19:a9:9f:db:e8:14:6c:ee:51:95:10:f8:96:bf:1f:
5e:36:25:8a:2f:38:de:02:fd:14:22:ad:d1:3d:33:d7:9b:c4:
4c:9a:60:87:97:42:6b:00:7e:a0:51:ad:84:66:41:5f:5f:f1:
78:ac:ab:59:ed:87:ef:8a:d1:04:ad:9e:22:db:f7:7d:f8:2f:
f7:3a:d0:e3:ee:9b:d8:7e:8e:85:d8:b9:ff:96:c3:58:d5:92:
26:69:6c:ee:dd:b4:41:d2:17:d1:51:4c:ce:3a:83:d6:b5:c8:
6e:01:46:8f:51:a6:56:ee:02:06:72:79:b1:71:f9:aa:6d:56:
68:98:a4:cc:0e:04:d4:fd:b0:fd:19:e8:81:3c:c4:4e:73:ca:
4c:03:6b:ec:a8:18:d4:4e:39:a3:fc:39:1f:f5:d0:9a:3e:60:
d6:52:02:c2:ef:bf:03:ed:c6:8a:3b:34:cc:22:89:48:55:7d:
ff:e2:bd:69:d4:37:d4:aa:d0:b6:06:fd:40:fb:5d:4a:98:64:
30:7e:93:c9:43:23:09:32:42:98:df:97:ab:56:46:8b:4d:b2:
a2:76:c3:db:43:ba:cc:00:c9:d0:f1:5c:99:9b:7b:1c:f3:7b:
bb:c6:53:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:39:15 2026 by rpki-client