
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
File: 5hI_ServZkwi-UzV67rqztOHoW8.mft (raw, json)
Hash identifier: KLabkb6lZUb/WJkckoubLLtIUv00GFnml5ZewqIbSE0=
Subject key identifier: 72:7C:1C:42:9A:2A:26:13:CE:F2:AC:5F:3D:F2:2D:54:24:3E:C5:32
Authority key identifier: E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F
Certificate issuer: /CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F
Certificate serial: 0708
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
Manifest number: 06FE
Signing time: Sat 10 Oct 2026 22:14:00 +0000
Manifest this update: Sat 10 Oct 2026 22:14:00 +0000
Manifest next update: Sat 17 Oct 2026 22:14:00 +0000
Files and hashes: 1: 5hI_ServZkwi-UzV67rqztOHoW8.crl (hash: O/op/yvv2eSCd0Hs52peJDkUTipte2Sk79v9TAVVO40=)
2: 1D0BA0FC57EB11F096357F7CC4F9AE02.roa (hash: qYnHpPQuWWyQUppUZeSoLqg0pl5Eo+MYWVanyVnMZyM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl
rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 22:13:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1800 (0x708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B861D, serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F
Validity
Not Before: Oct 10 22:14:00 2026 GMT
Not After : Oct 17 22:14:00 2026 GMT
Subject: CN=6acab8a8-fc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:36:84:09:a4:86:fb:01:53:79:4d:7f:7f:
c0:31:c7:6d:ed:5d:b5:6a:fb:74:55:16:84:a8:f1:
ed:bf:9d:ef:83:48:5d:2b:04:c9:47:e0:67:2c:05:
f0:5e:fb:55:db:27:78:6d:76:7e:fd:ae:bb:4e:44:
b2:61:63:f8:b0:df:03:b4:aa:26:14:84:41:da:f7:
28:0c:f9:9a:34:35:ec:0d:b7:49:c1:c2:f8:24:f0:
fd:9e:85:5b:e9:83:8c:b4:df:97:e7:e0:56:33:e3:
df:5a:01:3d:91:f0:cb:e3:3f:d8:99:ae:0f:63:0f:
5f:e3:72:02:12:d6:33:54:16:53:45:2d:ec:45:52:
f7:8a:19:d5:d5:06:bb:d6:27:44:da:4e:40:88:86:
06:a1:40:a2:dc:c5:ad:42:c7:3b:18:9f:58:c6:bf:
ec:c5:a3:db:46:df:26:bf:46:df:2f:6a:b9:9a:f0:
04:2b:05:2b:c5:e2:18:1f:ea:9f:90:c7:d4:b1:51:
0f:69:ab:7b:f3:2b:41:04:54:76:48:bb:c9:71:6b:
30:0e:be:3a:bd:af:23:24:59:c4:8c:20:35:16:de:
3c:1e:4d:a4:78:fd:8d:32:96:ee:6b:23:e3:d1:21:
80:64:7c:00:8a:18:84:1b:bf:61:cc:d1:8b:d2:52:
dd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7C:1C:42:9A:2A:26:13:CE:F2:AC:5F:3D:F2:2D:54:24:3E:C5:32
X509v3 Authority Key Identifier:
keyid:E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:80:bc:66:b5:bf:3e:80:71:33:e7:f2:e6:7b:f3:b9:46:3a:
19:f4:c0:b6:7d:dd:ba:ee:47:1b:1d:b4:fd:a3:2e:22:ba:98:
9f:dd:eb:8a:25:27:cd:d8:e8:cd:4a:1d:4f:17:8a:4d:ed:c3:
24:4b:59:3f:f7:22:2f:7f:42:7d:29:d7:51:2b:5c:b5:fe:02:
d7:c7:0a:95:62:19:71:70:e0:35:58:0c:31:aa:8f:f8:41:c5:
ef:0f:b9:f4:c3:2f:6d:8c:51:38:3c:91:9f:b2:14:e5:f2:e8:
c6:e1:08:c9:bc:67:63:ef:38:fc:cd:e1:8d:2c:48:2a:de:11:
ce:f7:b5:f5:8d:b8:39:2b:c4:29:20:95:8a:1e:e0:35:70:b6:
b2:be:c7:e8:c8:9b:16:54:76:82:d1:ea:9d:1a:0e:71:f0:20:
93:36:d0:80:b9:75:83:91:83:2f:a0:9f:e6:23:ed:09:2e:1d:
a0:50:a4:ee:d5:bd:8b:0c:74:82:b1:04:8b:21:2f:be:d8:80:
46:c7:05:12:c9:f6:3f:2f:b9:25:f2:bc:d1:9e:53:c9:ab:a6:
c1:a3:b2:a7:ed:3f:68:03:40:ea:d6:ae:d9:8e:92:4f:82:72:
8d:1a:5d:b0:ae:e7:ff:ea:e0:3f:af:36:a7:86:ac:ef:cf:86:
1b:cb:10:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjg2MUQxMTAvBgNVBAUTKEU2MTIzRjQ5RUFFRjY2NEMyMkY5NENENUVCQkFFQUNF
RDM4N0ExNkYwHhcNMjYxMDEwMjIxNDAwWhcNMjYxMDE3MjIxNDAwWjAYMRYwFAYD
VQQDEw02YWNhYjhhOC1mYzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvsM2hAmkhvsBU3lNf3/AMcdt7V21avt0VRaEqPHtv53vg0hdKwTJR+BnLAXw
XvtV2yd4bXZ+/a67TkSyYWP4sN8DtKomFIRB2vcoDPmaNDXsDbdJwcL4JPD9noVb
6YOMtN+X5+BWM+PfWgE9kfDL4z/Yma4PYw9f43ICEtYzVBZTRS3sRVL3ihnV1Qa7
1idE2k5AiIYGoUCi3MWtQsc7GJ9Yxr/sxaPbRt8mv0bfL2q5mvAEKwUrxeIYH+qf
kMfUsVEPaat78ytBBFR2SLvJcWswDr46va8jJFnEjCA1Ft48Hk2keP2NMpbuayPj
0SGAZHwAihiEG79hzNGL0lLdDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJ8HEKa
KiYTzvKsXz3yLVQkPsUyMB8GA1UdIwQYMBaAFOYSP0nq72ZMIvlM1eu66s7Th6Fv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODYxRC9EMjk5N0Y2MEFC
RTMxMUVCOUMyQjExNTZDNEY5QUUwMi81aElfU2Vydlprd2ktVXpWNjdycXp0T0hv
VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVoSV9TZXJ2Wmt3aS1VelY2N3JxenRPSG9XOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODYxRC9EMjk5N0Y2MEFCRTMxMUVCOUMyQjExNTZDNEY5QUUwMi81aElfU2Vydlpr
d2ktVXpWNjdycXp0T0hvVzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgoC8ZrW/PoBxM+fy5nvzuUY6GfTAtn3duu5HGx20/aMuIrqYn93riiUnzdjo
zUodTxeKTe3DJEtZP/ciL39CfSnXUStctf4C18cKlWIZcXDgNVgMMaqP+EHF7w+5
9MMvbYxRODyRn7IU5fLoxuEIybxnY+84/M3hjSxIKt4Rzve19Y24OSvEKSCVih7g
NXC2sr7H6MibFlR2gtHqnRoOcfAgkzbQgLl1g5GDL6Cf5iPtCS4doFCk7tW9iwx0
grEEiyEvvtiARscFEsn2Py+5JfK80Z5TyaumwaOyp+0/aANA6tau2Y6ST4JyjRpd
sK7n/+rgP682p4as78+GG8sQmA==
-----END CERTIFICATE-----
Generated at Mon Oct 12 23:18:07 2026 by rpki-client