
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft
File: r5ACm-EBySLPz0vRRdevHcZA5eA.mft (raw, json)
Hash identifier: qKWui4X0tFjH8Zto/l/s2gZD0m855rWzMDoV/LCczhU=
Subject key identifier: AB:06:9F:C3:94:C4:C7:90:94:B1:0E:73:4D:61:45:FB:BB:F7:14:32
Authority key identifier: AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0
Certificate issuer: /CN=A91D2646/serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0
Certificate serial: 0AF0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft
Manifest number: 0AE2
Signing time: Sun 20 Sep 2026 19:21:08 +0000
Manifest this update: Sun 20 Sep 2026 19:21:08 +0000
Manifest next update: Sun 27 Sep 2026 19:21:08 +0000
Files and hashes: 1: r5ACm-EBySLPz0vRRdevHcZA5eA.crl (hash: jJ6O08IpKn6xnqVwvUxKofK7BaQN2076KibJN8QXth4=)
2: 2B3DAF56792F11F1AA232E0470A30FBC.roa (hash: FaexDfof3iMtZUkiOS5mGwX0gEamxotee2n3devY+9Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl
rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 19:21:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2800 (0xaf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2646, serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0
Validity
Not Before: Sep 20 19:21:08 2026 GMT
Not After : Sep 27 19:21:08 2026 GMT
Subject: CN=6ab03224-f5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c2:b1:df:38:87:f6:c7:dd:f6:ec:c9:c6:ec:
8e:88:e5:b2:73:8e:0c:aa:45:21:87:09:83:d9:29:
42:ed:e1:14:47:85:84:f4:13:62:8c:68:fa:a5:56:
04:9c:11:3f:a0:ca:ed:5b:77:5d:e4:a5:54:d7:44:
b6:4f:02:02:04:85:b0:cf:59:59:6b:33:1a:d3:1f:
f1:ad:8a:ab:d6:0a:a0:4a:7e:0a:fe:d0:c6:cd:15:
1c:df:0b:28:ea:5d:9c:ab:68:96:76:bf:e0:59:58:
5b:a0:3a:9b:53:49:91:26:e0:9c:cc:4a:dd:ea:65:
4c:87:da:e7:ba:5b:96:fc:9a:3f:8a:00:2f:5a:31:
ab:81:c3:39:dd:06:7d:e0:8b:00:6b:e6:d9:96:a7:
7e:ed:ed:87:f4:dd:a9:51:2b:c7:97:a8:9d:40:18:
9a:bd:a3:87:73:99:f9:e4:da:50:98:87:bf:b2:0b:
2f:9b:8d:35:13:e3:bb:f8:2e:31:c8:9a:5a:47:08:
15:ec:0c:79:c0:ab:31:7e:b0:5a:49:cd:c9:b6:22:
83:b5:28:cb:38:06:9a:21:30:0d:b0:48:0f:bc:ad:
b7:5b:a8:59:51:f7:81:6a:a5:b6:c7:0a:74:38:5d:
6b:79:f9:fb:6c:af:79:0a:fc:92:a4:24:fa:b4:e1:
a0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:06:9F:C3:94:C4:C7:90:94:B1:0E:73:4D:61:45:FB:BB:F7:14:32
X509v3 Authority Key Identifier:
keyid:AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:b6:29:78:52:ff:38:69:57:7c:f0:b8:7a:f8:ae:a9:a0:af:
be:41:80:28:fe:d9:c1:4b:ed:7a:17:e8:4b:e2:df:b0:d9:24:
ec:66:9e:ae:df:cf:4a:f7:1f:ae:24:db:95:50:16:40:3f:ec:
37:f3:aa:96:1c:2a:8e:94:48:66:e5:f8:00:6a:41:f6:23:46:
dc:ba:fc:39:d5:38:5c:b6:c3:ba:0d:ee:01:8f:2c:05:cd:43:
40:dd:8e:ef:9f:12:6a:49:c4:02:e1:8d:08:28:eb:5c:bf:72:
80:6a:bb:9a:2b:9b:cb:95:1e:75:ac:5f:bd:7a:46:8a:ee:8a:
d1:5d:48:fb:e4:b8:a6:f5:ce:77:75:08:b5:43:40:d6:28:2c:
d5:d0:86:6d:d3:86:0c:ff:e2:93:2b:a2:83:d6:62:5d:39:0b:
ec:c3:94:7b:e8:c6:d0:58:dc:2c:28:7f:a0:24:81:9f:63:f2:
53:23:21:47:7b:21:17:0d:3c:6c:6f:1c:10:64:79:ab:18:96:
f5:30:b6:d8:62:6e:d5:3d:db:34:93:fa:ae:93:cf:33:4d:a5:
7d:f8:f2:ae:a8:2b:b2:81:13:17:dc:ee:6c:a6:74:43:50:1d:
51:17:77:65:1e:47:c3:07:1b:bb:80:68:42:5e:b3:02:3b:d7:
4a:19:26:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI2NDYxMTAvBgNVBAUTKEFGOTAwMjlCRTEwMUM5MjJDRkNGNEJEMTQ1RDdBRjFE
QzY0MEU1RTAwHhcNMjYwOTIwMTkyMTA4WhcNMjYwOTI3MTkyMTA4WjAYMRYwFAYD
VQQDEw02YWIwMzIyNC1mNWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9cKx3ziH9sfd9uzJxuyOiOWyc44MqkUhhwmD2SlC7eEUR4WE9BNijGj6pVYE
nBE/oMrtW3dd5KVU10S2TwICBIWwz1lZazMa0x/xrYqr1gqgSn4K/tDGzRUc3wso
6l2cq2iWdr/gWVhboDqbU0mRJuCczErd6mVMh9rnuluW/Jo/igAvWjGrgcM53QZ9
4IsAa+bZlqd+7e2H9N2pUSvHl6idQBiavaOHc5n55NpQmIe/sgsvm401E+O7+C4x
yJpaRwgV7Ax5wKsxfrBaSc3JtiKDtSjLOAaaITANsEgPvK23W6hZUfeBaqW2xwp0
OF1refn7bK95CvySpCT6tOGgZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKsGn8OU
xMeQlLEOc01hRfu79xQyMB8GA1UdIwQYMBaAFK+QApvhAckiz89L0UXXrx3GQOXg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY0Ni9EMjAzN0QxMjdC
RUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlTTFB6MHZSUmRldkhjWkE1
ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3I1QUNtLUVCeVNMUHowdlJSZGV2SGNaQTVlQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjY0Ni9EMjAzN0QxMjdCRUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlT
TFB6MHZSUmRldkhjWkE1ZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU7YpeFL/OGlXfPC4eviuqaCvvkGAKP7ZwUvtehfoS+LfsNkk7Gaert/PSvcf
riTblVAWQD/sN/OqlhwqjpRIZuX4AGpB9iNG3Lr8OdU4XLbDug3uAY8sBc1DQN2O
758SaknEAuGNCCjrXL9ygGq7miuby5UedaxfvXpGiu6K0V1I++S4pvXOd3UItUNA
1igs1dCGbdOGDP/ikyuig9ZiXTkL7MOUe+jG0FjcLCh/oCSBn2PyUyMhR3shFw08
bG8cEGR5qxiW9TC22GJu1T3bNJP6rpPPM02lffjyrqgrsoETF9zubKZ0Q1AdURd3
ZR5Hwwcbu4BoQl6zAjvXShkmmQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:11:22 2026 by rpki-client