
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
File: p5uCiHAxRBmQsY0aBfnicefnuOY.mft (raw, json)
Hash identifier: U0Bhx32p5JnguxtdoU5o2P1zBFYRgF6KL12/lcsgXD4=
Subject key identifier: 43:20:DA:49:73:F1:48:E1:23:F9:D2:60:44:30:31:A0:C0:02:9F:1E
Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Certificate serial: 02F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
Manifest number: 02C1
Signing time: Tue 13 Oct 2026 01:59:54 +0000
Manifest this update: Tue 13 Oct 2026 01:59:54 +0000
Manifest next update: Tue 20 Oct 2026 01:59:54 +0000
Files and hashes: 1: p5uCiHAxRBmQsY0aBfnicefnuOY.crl (hash: OW0AtKAfHzuAG72FUCj2IVYUKNndHJfEdmYMCWJw+k8=)
2: 9CA607DA3C8411F0BDA85229C4F9AE02.roa (hash: 8NZ1UhuGARERdVr4xn3hECAnbMmlyrhbSiHPEdlyKGo=)
3: C8E6CF687AE811EFA0337A38C4F9AE02.roa (hash: PDg4YxpNHjgxHulVHS263Opr354k6cFJFc+jP5Exk2s=)
4: 610B51267AE711EFACC0CA34C4F9AE02.roa (hash: 68/9HvszJlWJG1Klncq6NQbI3jNLsgAJ7+57XU9yuJw=)
5: 9F4683A0B86211EDB9EDAD2CC4F9AE02.roa (hash: PNCot+X9idCYrOIArk0BIGKQbPC3Q9UWQJzdgOjjzzM=)
6: 0900F7CA7AE611EF8CE1F784C4F9AE02.roa (hash: VsSWHNWtSicRbaAy2oWMpH/483BYa5Ylp4bCvkTsd4E=)
7: 4DD66E3C347F11EFB73F4074C4F9AE02.roa (hash: xdRHIcCaSxksB74COkVRYLLWK0cb8iWtFeVfa1Y/ZHc=)
8: 34D5ED1210F511EEBCE2A81EC4F9AE02.roa (hash: GzoC5uTWCiyav9k4HtLbNzyni4nvBdiQvhcLFHI5dZ0=)
9: E98F15362B3811EF926F1555C4F9AE02.roa (hash: 30oQaXhlRZXA31s2p1Ithopu8SY2+k35hcvw3Gcvbz0=)
10: 5D463936C87611EDAC86AA74C4F9AE02.roa (hash: /kMXD66YoOkbovGmviBSlp3XnJGvyJnVXCG8OoKDXuU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 01:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 760 (0x2f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Validity
Not Before: Oct 13 01:59:54 2026 GMT
Not After : Oct 20 01:59:54 2026 GMT
Subject: CN=6acd909a-9892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:6a:7f:c9:ef:31:e8:f8:f8:ad:14:07:d7:
e2:db:07:80:40:de:11:a5:1b:0f:1e:2d:b5:42:4a:
6b:2c:91:3d:49:1d:b3:37:c0:9c:55:4c:4e:f4:c5:
8c:5c:d8:55:9f:ba:0d:7c:78:d2:1f:57:f7:74:61:
b1:8c:26:90:22:f2:56:91:a5:fc:0c:64:a8:cb:9b:
cc:ff:c4:3d:9e:66:c1:96:4b:9c:1e:a6:e9:a3:ca:
98:b5:5c:7e:25:25:97:d3:2c:34:d1:95:c6:3e:16:
a4:bb:04:db:f1:58:df:c4:77:24:4b:af:6a:34:67:
c8:96:21:6c:a6:fa:98:d0:d9:65:f6:ef:76:16:63:
1e:96:65:bb:ef:e9:a6:1a:d2:c3:27:07:78:f1:e5:
3a:4f:c3:b1:c1:d8:2a:54:aa:65:ef:5d:d4:10:89:
aa:f7:c0:86:14:0e:87:22:e8:a5:c4:d4:1d:e6:be:
ab:b3:2c:eb:25:aa:df:51:3d:7f:e3:fa:f8:c9:77:
91:4b:8b:87:5f:60:5e:b9:6a:22:96:42:f6:39:d0:
69:49:dd:0e:94:6d:3f:69:f6:b0:df:5e:bb:1e:59:
cd:71:cb:e5:ff:10:ac:d8:6e:24:38:0d:26:43:15:
97:c6:77:06:dd:72:01:dd:22:31:9a:4b:4c:37:54:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:20:DA:49:73:F1:48:E1:23:F9:D2:60:44:30:31:A0:C0:02:9F:1E
X509v3 Authority Key Identifier:
keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:ba:00:d4:78:e9:78:78:4d:0c:ec:cf:9c:2a:c0:de:88:46:
db:89:74:05:5e:96:2b:de:30:0c:76:07:03:a0:75:ad:79:37:
33:27:a4:71:8d:47:66:a1:1c:80:99:74:76:b3:12:57:75:fd:
ec:1e:d4:f1:2d:c7:08:17:95:be:98:1f:0d:07:bf:82:55:69:
a5:90:2f:bf:5a:41:97:27:12:5c:dd:0c:fe:c0:e2:25:2a:14:
4a:6c:1f:5e:dc:f5:2f:af:b3:74:82:fa:43:f9:48:93:f6:46:
a6:6b:42:67:4d:7f:b8:e7:78:13:2c:44:28:3e:4d:7a:cd:a1:
36:d2:db:4a:a2:32:4d:21:b4:35:31:fa:c0:98:09:7f:ab:a9:
4f:05:9d:2e:44:af:57:67:d0:55:87:46:42:c1:a7:7c:de:d7:
29:12:7f:9f:6a:f5:65:42:26:e7:99:44:1d:66:32:54:5a:c3:
04:58:c7:54:6a:7b:1c:9c:57:d8:ca:69:e0:aa:ee:1b:62:7d:
69:b4:1d:7f:4a:44:04:7f:f1:88:53:36:8c:40:d7:9a:e5:dc:
f9:bf:32:2e:d8:3f:b6:4c:6c:a0:90:0e:28:29:7d:28:72:2a:
f3:fe:c9:6a:a7:bf:b4:73:28:27:d3:51:5d:40:e6:a2:09:34:
05:f7:1c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:33:33 2026 by rpki-client