
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft
File: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft (raw, json)
Hash identifier: SoWc23bHZjwropu/CLp/1/DDxJJ6nd2Thd2uXFiInU4=
Subject key identifier: 18:E3:75:6D:6B:5E:03:71:28:DE:80:24:DF:59:2D:67:C4:61:9F:28
Authority key identifier: E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52
Certificate issuer: /CN=A91C8790/serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352
Certificate serial: 05B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft
Manifest number: 05AC
Signing time: Sun 04 Oct 2026 23:10:59 +0000
Manifest this update: Sun 04 Oct 2026 23:10:59 +0000
Manifest next update: Sun 11 Oct 2026 23:10:59 +0000
Files and hashes: 1: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl (hash: oi2f9e7PQ+auSCHY/QNe73WFpx6768TaadIYFq2bJa8=)
2: BA7E6B1A30B911EC974C3830C4F9AE02.roa (hash: xxqSemGox4kEl/WxL9eirDeCZylY2NkVCa0+GT9iexI=)
3: CA24F21C6DE711F180D709405CA30FBC.roa (hash: Oyiw752YkZ+aWMvYkiVvYpwM7PpYiOLSODbco0Yd+e0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl
rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 23:10:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1462 (0x5b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8790, serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352
Validity
Not Before: Oct 4 23:10:59 2026 GMT
Not After : Oct 11 23:10:59 2026 GMT
Subject: CN=6ac2dd03-0adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:00:45:47:dd:ed:d5:6e:48:06:11:61:6a:96:
9d:9f:66:58:bb:f5:11:26:b2:d0:da:64:f9:2f:be:
1b:77:26:eb:e3:5f:4a:76:e5:0c:13:56:80:59:c1:
b8:04:80:28:2f:b2:a5:7a:96:ec:71:ae:76:96:85:
59:33:44:5d:b8:e2:92:1f:ad:26:6f:ee:22:71:c6:
d4:bb:b7:65:c7:72:f2:00:36:59:3b:44:dd:f9:4d:
e7:13:e6:c7:33:3f:b3:d3:cc:b7:55:89:ab:7a:8f:
09:c2:cd:24:22:60:d5:93:f4:a6:31:02:02:85:b5:
92:9b:39:c0:89:6b:94:11:f6:2d:9f:61:c3:6b:89:
6f:2f:fd:6f:86:a9:21:ff:6f:54:a3:3c:47:5a:36:
56:64:44:4e:e2:79:ac:f6:92:23:a6:20:73:e3:49:
d7:d3:a3:f1:49:ee:59:50:73:10:23:f6:da:6f:fc:
ce:72:7d:c2:5f:7c:75:ca:6f:4c:01:30:03:ed:07:
1d:6a:f1:64:08:44:ca:a2:0a:15:d2:03:22:aa:c6:
fb:4a:ac:53:1d:83:41:25:17:e2:e0:36:97:25:7c:
77:5c:3c:a1:a3:a5:5a:0e:9e:b2:46:5a:2d:75:ea:
d2:d0:04:99:fb:00:69:44:0d:0f:79:a3:2c:9c:91:
03:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E3:75:6D:6B:5E:03:71:28:DE:80:24:DF:59:2D:67:C4:61:9F:28
X509v3 Authority Key Identifier:
keyid:E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:79:06:84:60:94:97:62:42:47:77:e5:47:33:b9:03:0a:ec:
bd:25:21:13:dd:6c:0e:82:13:d8:ba:62:a0:07:60:da:e1:26:
e1:8c:3d:8c:f0:dc:fa:fe:6b:9f:2d:3d:61:dd:4c:7c:d1:6b:
28:81:a9:1c:26:5a:a3:ba:00:9c:d2:c8:5a:5b:d9:80:48:fe:
69:a8:2d:5b:d6:ce:6b:f4:88:72:55:f3:58:3a:32:d6:47:aa:
b9:8e:f2:56:fa:9a:04:53:0b:e5:ec:0e:8c:5d:f1:25:21:78:
da:56:0e:47:04:bc:70:6e:8d:fb:bb:eb:a0:14:a4:45:96:ba:
a0:13:01:34:ee:c5:d4:4b:60:55:cc:d2:13:db:b2:bf:f7:e0:
77:41:23:ce:ee:ef:fa:d0:13:1a:ad:42:70:7a:9a:58:ad:28:
db:95:4b:89:e4:f6:68:c7:af:13:46:3e:93:de:22:cc:50:d2:
7f:0d:7f:ce:fc:23:b3:92:79:a8:4f:ce:44:87:96:45:14:39:
9f:da:c9:53:78:3e:6a:da:11:ad:0c:aa:2f:20:0c:5f:26:36:
ab:75:cc:73:bb:46:16:03:e5:b3:85:5e:3c:bf:c7:8e:de:72:
44:3b:9c:58:5d:49:0c:50:b6:ec:86:f5:4d:4c:fc:3e:1f:26:
d2:fc:1e:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzg3OTAxMTAvBgNVBAUTKEU1QTRENEY5NTYwQjVCNUM1QzVGRTREMDYxQjRCODgx
QzhEMjIzNTIwHhcNMjYxMDA0MjMxMDU5WhcNMjYxMDExMjMxMDU5WjAYMRYwFAYD
VQQDEw02YWMyZGQwMy0wYWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnQBFR93t1W5IBhFhapadn2ZYu/URJrLQ2mT5L74bdybr419KduUME1aAWcG4
BIAoL7Klepbsca52loVZM0RduOKSH60mb+4iccbUu7dlx3LyADZZO0Td+U3nE+bH
Mz+z08y3VYmreo8Jws0kImDVk/SmMQIChbWSmznAiWuUEfYtn2HDa4lvL/1vhqkh
/29UozxHWjZWZERO4nms9pIjpiBz40nX06PxSe5ZUHMQI/bab/zOcn3CX3x1ym9M
ATAD7QcdavFkCETKogoV0gMiqsb7SqxTHYNBJRfi4DaXJXx3XDyho6VaDp6yRlot
derS0ASZ+wBpRA0PeaMsnJEDwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBjjdW1r
XgNxKN6AJN9ZLWfEYZ8oMB8GA1UdIwQYMBaAFOWk1PlWC1tcXF/k0GG0uIHI0iNS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODc5MC8zM0ZFMzYyNjMw
QjcxMUVDOUIwMjk0MkRDNEY5QUUwMi81YVRVLVZZTFcxeGNYLVRRWWJTNGdjalNJ
MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVhVFUtVllMVzF4Y1gtVFFZYlM0Z2NqU0kxSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
ODc5MC8zM0ZFMzYyNjMwQjcxMUVDOUIwMjk0MkRDNEY5QUUwMi81YVRVLVZZTFcx
eGNYLVRRWWJTNGdjalNJMUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASnkGhGCUl2JCR3flRzO5AwrsvSUhE91sDoIT2LpioAdg2uEm4Yw9jPDc+v5r
ny09Yd1MfNFrKIGpHCZao7oAnNLIWlvZgEj+aagtW9bOa/SIclXzWDoy1kequY7y
VvqaBFML5ewOjF3xJSF42lYORwS8cG6N+7vroBSkRZa6oBMBNO7F1EtgVczSE9uy
v/fgd0Ejzu7v+tATGq1CcHqaWK0o25VLieT2aMevE0Y+k94izFDSfw1/zvwjs5J5
qE/ORIeWRRQ5n9rJU3g+atoRrQyqLyAMXyY2q3XMc7tGFgPls4VePL/Hjt5yRDuc
WF1JDFC27Ib1TUz8Ph8m0vweoA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 22:57:51 2026 by rpki-client