
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
File: 5CK_AmFA0gPv1r_eruJoqosEZtU.mft (raw, json)
Hash identifier: pjSUeyuCveq6q5uoGIaoCNeergt2O8Qe4Xmo+NyJKPg=
Subject key identifier: B8:05:C7:9A:E2:6F:70:B7:56:11:55:41:4A:82:04:5E:48:AC:DF:F3
Authority key identifier: E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5
Certificate issuer: /CN=A91C3174/serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5
Certificate serial: 03D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
Manifest number: 03CB
Signing time: Tue 13 Oct 2026 00:42:11 +0000
Manifest this update: Tue 13 Oct 2026 00:42:11 +0000
Manifest next update: Tue 20 Oct 2026 00:42:11 +0000
Files and hashes: 1: 5CK_AmFA0gPv1r_eruJoqosEZtU.crl (hash: pTj0MifSlWDOob+aFMzOd7xruruOwirsT+rMsMALKSU=)
2: 9A4B6146EED111EC9BDD4C49C4F9AE02.roa (hash: yIITaHKhLktq8hIVDB/hFkrrSu/yxWdnPRfSTHr4wTQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl
rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 00:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 979 (0x3d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3174, serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5
Validity
Not Before: Oct 13 00:42:11 2026 GMT
Not After : Oct 20 00:42:11 2026 GMT
Subject: CN=6acd7e63-9685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:46:19:e1:fe:3c:cb:80:46:b4:43:dc:95:f2:
50:ea:fc:99:7e:2e:3f:53:b9:2e:30:92:73:77:da:
7b:6b:b1:8e:da:79:9c:7f:b9:ff:04:52:20:19:6e:
f9:4d:9d:aa:78:84:f7:4c:37:f4:55:21:a5:e6:11:
f7:9f:77:e7:9f:1a:7e:42:f8:fe:d9:74:f8:74:c4:
aa:3c:1b:68:2e:21:1d:8b:5c:c2:a6:3e:c0:d5:82:
f2:85:22:ec:24:bd:69:00:da:a7:7a:0d:bf:28:93:
90:62:75:0f:29:3b:af:15:7f:f9:cb:ff:d2:ac:16:
af:02:39:79:a4:9c:48:eb:81:2b:d4:a3:db:4a:58:
ec:75:28:c0:5a:66:f9:f3:0e:e2:79:1c:bf:a0:04:
24:75:a6:a4:19:c5:fd:73:30:27:a7:29:97:6c:c1:
3b:92:4f:95:bd:08:77:39:cc:e6:0f:af:fb:49:fd:
6c:81:01:20:01:6b:ce:da:6d:67:0e:95:2c:d5:99:
9a:5c:da:0f:bb:1d:c3:31:35:8f:dd:88:a6:e3:41:
e4:75:bf:5e:7e:18:a6:52:d9:80:67:f2:63:50:29:
2b:8e:f1:4b:6c:53:ef:35:07:61:82:af:b4:2e:96:
08:d5:04:ba:00:c4:f3:cf:ee:ab:f6:fa:12:89:6a:
16:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:05:C7:9A:E2:6F:70:B7:56:11:55:41:4A:82:04:5E:48:AC:DF:F3
X509v3 Authority Key Identifier:
keyid:E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:62:1d:29:29:bd:73:02:19:d1:8a:18:ae:80:b3:af:c6:31:
fa:0e:4b:59:e4:ce:fa:7b:a6:03:bf:b6:8a:3a:56:25:1a:d5:
f4:59:c2:85:43:4c:84:1a:b3:5f:a6:9b:02:39:0e:5b:78:87:
55:9c:ef:16:b7:ba:cc:67:24:a5:27:4b:f2:43:64:44:47:00:
56:6b:34:96:9d:b3:14:3c:d8:ee:c8:35:3a:51:b4:e3:38:33:
02:10:b5:67:fb:f7:85:e4:28:d2:70:fc:17:50:bd:7c:72:65:
03:22:f8:00:21:da:a7:0c:ba:0f:0e:27:bd:d8:74:f4:26:1c:
72:8d:ea:2f:bc:f6:10:8e:7d:86:73:1c:0b:d2:88:7f:59:dc:
ad:82:fc:82:85:9d:a1:c1:64:0c:6f:6e:b5:8f:db:a9:42:03:
c6:74:ab:78:e1:8f:5a:76:8e:56:5c:b1:f6:82:19:53:ea:e9:
1e:de:79:bf:7d:a5:fd:93:ad:3d:b4:06:1e:0e:0e:97:95:ab:
47:8f:35:6e:09:b2:e5:b8:5b:55:ad:4c:81:ce:a7:47:83:1d:
ff:d8:3d:84:f9:7f:e6:76:cc:19:c0:1c:c0:5e:fa:41:47:6a:
0c:42:93:91:0b:00:0b:bb:32:7b:e3:87:e5:a1:81:ea:56:56:
34:e0:11:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:17:30 2026 by rpki-client