
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
File: p5uCiHAxRBmQsY0aBfnicefnuOY.mft (raw, json)
Hash identifier: fpQM1FGkgPkoPw5ByJe3kRTq2SuTaTYYghlcdIcy+qo=
Subject key identifier: F2:0A:77:44:AF:D9:AE:6C:2C:4C:3E:FE:BE:DE:66:78:83:2D:D9:06
Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Certificate serial: 02F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
Manifest number: 02C0
Signing time: Sun 11 Oct 2026 01:56:46 +0000
Manifest this update: Sun 11 Oct 2026 01:56:45 +0000
Manifest next update: Sun 18 Oct 2026 01:56:45 +0000
Files and hashes: 1: p5uCiHAxRBmQsY0aBfnicefnuOY.crl (hash: 2nj1gB9XaRcnx7wJqb5FBmEtjplN0ImmQu8nlGd3nvA=)
2: C8E6CF687AE811EFA0337A38C4F9AE02.roa (hash: PDg4YxpNHjgxHulVHS263Opr354k6cFJFc+jP5Exk2s=)
3: 34D5ED1210F511EEBCE2A81EC4F9AE02.roa (hash: GzoC5uTWCiyav9k4HtLbNzyni4nvBdiQvhcLFHI5dZ0=)
4: 9F4683A0B86211EDB9EDAD2CC4F9AE02.roa (hash: PNCot+X9idCYrOIArk0BIGKQbPC3Q9UWQJzdgOjjzzM=)
5: E98F15362B3811EF926F1555C4F9AE02.roa (hash: 30oQaXhlRZXA31s2p1Ithopu8SY2+k35hcvw3Gcvbz0=)
6: 610B51267AE711EFACC0CA34C4F9AE02.roa (hash: 68/9HvszJlWJG1Klncq6NQbI3jNLsgAJ7+57XU9yuJw=)
7: 0900F7CA7AE611EF8CE1F784C4F9AE02.roa (hash: VsSWHNWtSicRbaAy2oWMpH/483BYa5Ylp4bCvkTsd4E=)
8: 5D463936C87611EDAC86AA74C4F9AE02.roa (hash: /kMXD66YoOkbovGmviBSlp3XnJGvyJnVXCG8OoKDXuU=)
9: 9CA607DA3C8411F0BDA85229C4F9AE02.roa (hash: 8NZ1UhuGARERdVr4xn3hECAnbMmlyrhbSiHPEdlyKGo=)
10: 4DD66E3C347F11EFB73F4074C4F9AE02.roa (hash: xdRHIcCaSxksB74COkVRYLLWK0cb8iWtFeVfa1Y/ZHc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 01:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 759 (0x2f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Validity
Not Before: Oct 11 01:56:45 2026 GMT
Not After : Oct 18 01:56:45 2026 GMT
Subject: CN=6acaecde-d77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:1b:c0:04:5a:eb:3d:5b:18:7c:e2:53:da:
27:7f:d0:3b:9e:87:d0:db:02:6a:fd:86:3d:8b:80:
13:a7:22:3a:13:ed:ca:d2:e2:34:f7:93:d3:39:d7:
51:c3:04:c6:cf:3b:57:b9:c8:02:5e:49:3b:83:00:
f4:6e:fe:10:89:0e:75:6f:ff:fd:00:04:24:a6:4a:
f3:c0:11:52:c9:c1:19:31:83:d9:d3:54:a8:fe:0c:
b2:ce:32:e7:8e:27:45:56:65:ca:e2:a1:ea:90:ac:
af:ed:2b:52:d0:ab:2d:80:20:7a:7a:e6:03:28:7f:
cf:0b:3b:01:fc:33:de:79:3d:42:91:cc:35:65:54:
74:1e:08:32:91:e9:92:9d:18:40:d9:1b:13:2b:f4:
de:d1:d8:6e:5f:3f:78:ae:bc:bc:3e:43:f1:d1:16:
d8:64:9a:03:f8:50:d4:94:5e:d8:a3:c4:f0:54:27:
af:74:54:b4:0e:e8:6e:41:a9:2b:ca:87:7d:21:ea:
1e:2e:08:7b:33:88:21:39:84:f8:01:11:80:dc:73:
4e:99:79:d2:fe:c7:e6:7b:39:74:b5:98:43:47:cf:
6b:cb:42:29:05:45:26:a0:3f:49:b0:cd:ba:e0:ac:
2b:61:f8:9c:0e:d4:a4:91:eb:c5:a5:c4:0a:fe:41:
be:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0A:77:44:AF:D9:AE:6C:2C:4C:3E:FE:BE:DE:66:78:83:2D:D9:06
X509v3 Authority Key Identifier:
keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b1:93:10:55:fd:53:73:f3:8b:98:b8:28:a7:cd:9b:c2:97:
88:70:ce:8c:2a:da:86:55:cb:27:da:65:7d:eb:3f:81:0c:5b:
1f:3a:7b:38:c6:fe:85:03:43:90:77:18:52:f4:7e:f4:48:87:
93:5e:8a:5d:e7:ff:a4:5a:f7:73:37:72:bb:5d:20:98:06:99:
63:44:bb:74:ed:41:f2:28:bf:d1:e1:29:7a:a0:aa:5b:c7:37:
c0:9a:8d:7f:80:f0:37:78:c5:24:67:19:96:00:e0:83:6f:f7:
4d:94:66:1f:4f:15:18:ca:12:7d:20:ef:43:a9:c4:50:89:fa:
eb:88:53:5d:75:f9:28:a5:2d:cf:27:38:d3:62:9c:de:61:31:
eb:48:77:16:04:62:83:c7:4d:b2:10:b9:62:6a:d8:65:92:97:
e4:b2:19:67:48:bf:c2:22:d5:21:f5:c5:84:f2:af:c7:c6:7e:
2c:e0:f4:2e:6d:1f:98:f8:8d:7a:3e:dd:d0:33:aa:77:a6:a2:
43:cb:06:c8:60:cb:be:f5:ac:1c:d8:8d:ef:a4:01:92:ea:77:
3c:b0:4f:74:b7:5c:bb:8a:62:83:2f:25:36:66:89:1e:e9:b5:
9f:f2:71:ef:3c:de:52:3c:b6:34:92:c7:d9:ee:90:12:54:47:
a5:de:22:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:35:56 2026 by rpki-client