
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft
File: 5Ihhomij6U17foS6dO6vR3KJZwk.mft (raw, json)
Hash identifier: bkdRH2A0amXPi3TBP/HjLfA0VpxecWwIeFrI9ZhKip0=
Subject key identifier: 74:DF:B9:3F:06:3B:52:01:4B:B4:BF:90:03:32:A1:30:A8:BC:97:BF
Authority key identifier: E4:88:61:A2:68:A3:E9:4D:7B:7E:84:BA:74:EE:AF:47:72:89:67:09
Certificate issuer: /CN=A91D3060/serialNumber=E48861A268A3E94D7B7E84BA74EEAF4772896709
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ihhomij6U17foS6dO6vR3KJZwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft
Manifest number: C2
Signing time: Fri 09 Oct 2026 07:31:08 +0000
Manifest this update: Fri 09 Oct 2026 07:31:07 +0000
Manifest next update: Fri 16 Oct 2026 07:31:07 +0000
Files and hashes: 1: 5Ihhomij6U17foS6dO6vR3KJZwk.crl (hash: m0cTPERUVzQJIgjjrtifsShcBMM+oFSjJTVPmPHeZLE=)
2: 0FCEAD129CF111F0A76B5F3AC4F9AE02.roa (hash: ifQONvULGYpYHvM+bvP3PgrTKc94bp+crLb4/d1Vd4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.crl
rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ihhomij6U17foS6dO6vR3KJZwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 07:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3060, serialNumber=E48861A268A3E94D7B7E84BA74EEAF4772896709
Validity
Not Before: Oct 9 07:31:07 2026 GMT
Not After : Oct 16 07:31:07 2026 GMT
Subject: CN=6ac8983b-6974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a9:49:b5:82:b0:ee:3f:34:bf:24:1d:04:de:
db:ea:ea:fd:2a:df:fc:3f:11:50:b7:c3:38:56:d4:
25:9a:80:11:30:74:d4:10:92:c2:73:8c:65:10:22:
b7:9e:16:75:01:e0:ca:93:0e:3b:7c:ad:0a:33:d0:
5e:f0:c7:12:3d:01:50:63:f2:92:31:c3:d8:e1:08:
6a:f6:9a:1c:45:77:e6:23:dc:89:31:ac:d1:5b:03:
7e:9f:00:2f:2c:fa:24:fa:1f:d7:f6:8b:c5:00:d7:
8e:67:62:ee:8a:0e:95:9e:56:67:2d:dc:9e:72:9c:
45:18:81:9e:94:c2:22:e9:19:a6:fb:ab:b6:ff:83:
5a:2d:73:6d:82:eb:fa:cb:67:42:67:07:95:8d:64:
2f:77:8d:36:e0:a4:e4:ff:9b:6a:db:77:ed:b6:f9:
94:e6:06:e4:a9:e5:cc:22:33:c5:cf:ee:65:13:7d:
b7:a5:14:06:32:32:8a:ef:ab:0b:4f:04:b5:37:ff:
51:a3:4f:44:3f:32:81:96:c3:95:3a:94:05:43:e5:
e4:4e:1c:17:60:e3:fd:64:a4:99:9b:b1:9f:9b:c3:
c7:48:c4:de:3d:62:63:69:90:2c:47:21:d3:4a:8c:
2e:49:44:41:3e:73:ab:9e:da:d6:87:9b:67:ea:4c:
bd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DF:B9:3F:06:3B:52:01:4B:B4:BF:90:03:32:A1:30:A8:BC:97:BF
X509v3 Authority Key Identifier:
keyid:E4:88:61:A2:68:A3:E9:4D:7B:7E:84:BA:74:EE:AF:47:72:89:67:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ihhomij6U17foS6dO6vR3KJZwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:b0:2c:53:e4:4f:9d:1a:5f:bc:e4:e6:c9:2c:6a:f9:c7:3c:
97:54:96:03:6b:06:b5:70:58:34:bc:f3:7a:27:7a:9f:97:b7:
a1:6d:24:82:be:c6:f5:6c:b6:6a:2c:86:a9:6c:bf:02:fa:0c:
73:0d:8a:fc:e4:fa:9c:20:7e:e4:88:ca:89:0e:7b:37:97:f0:
5f:1d:c6:33:c8:96:77:bc:ce:0d:6b:6c:96:d6:7e:9e:4c:44:
2e:9c:53:4c:93:61:53:a2:33:56:2b:1a:21:a4:3e:e7:71:d4:
fe:90:cf:0c:0a:11:96:69:00:a1:52:12:3c:e2:f2:f7:dd:0f:
f7:d5:83:d3:83:5d:7b:d7:b1:43:a3:4f:80:ff:12:e1:e2:8f:
74:47:e3:52:b8:05:0a:29:1a:4d:da:11:24:5b:92:4a:bc:85:
bf:db:05:08:a0:6a:05:be:4c:2a:c0:47:ab:e7:63:89:1f:31:
90:11:b5:dd:25:38:d3:c4:6b:e3:00:b1:41:8d:9e:54:f3:6e:
65:cf:00:75:62:18:55:37:5a:09:62:8f:f4:46:6c:c5:d4:26:
73:32:9b:87:f7:a0:f5:8c:78:ea:15:0d:e4:79:93:92:f2:27:
d6:46:62:ea:90:8c:b0:fd:28:54:24:ea:0d:43:1d:ad:79:b2:
93:15:6c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:46:21 2026 by rpki-client