
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
File: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft (raw, json)
Hash identifier: 3Bm4CSo8XA/IDzID9fRiHoMfBR0/Yay2DiFtBppoIIg=
Subject key identifier: 26:E9:6F:CD:D3:41:B9:26:72:94:05:8C:3B:A2:BC:DC:B6:C4:6B:F8
Authority key identifier: E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2
Certificate issuer: /CN=A91DE5E8/serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2
Certificate serial: 02BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
Manifest number: 02B1
Signing time: Mon 05 Oct 2026 01:44:38 +0000
Manifest this update: Mon 05 Oct 2026 01:44:37 +0000
Manifest next update: Mon 12 Oct 2026 01:44:37 +0000
Files and hashes: 1: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl (hash: q65MGvzcChAFY6bRh2yXJp37CArp22P2Fn+fA2zJ2MU=)
2: B264EB66A30911ED99A82087C4F9AE02.roa (hash: Qsg2AMGaV0HzjGdO1Hutn0CHA9Q/KYFBqKZc552p7Mk=)
3: 785B44D6F2AF11EF97443030C4F9AE02.roa (hash: yzmWg50nzv8Dnad8AXsujO//BFKjYq1nis/lix16bcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl
rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 01:44:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 701 (0x2bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE5E8, serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2
Validity
Not Before: Oct 5 01:44:37 2026 GMT
Not After : Oct 12 01:44:37 2026 GMT
Subject: CN=6ac30106-aaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:66:c5:a5:ad:bf:8c:13:fc:a3:51:96:36:14:
52:70:da:22:55:c3:fc:bb:17:bd:ec:ef:3e:3b:1d:
83:4f:ac:98:32:ed:69:95:89:82:8a:85:45:f5:c2:
bc:d5:a1:d4:dc:8c:3a:36:71:0a:aa:7b:02:a1:8d:
fb:f6:ca:04:ea:0c:b4:c1:a6:9a:4b:88:c6:30:26:
d7:80:44:10:6a:de:36:b1:b6:12:bf:45:50:51:8a:
c5:16:38:a7:08:77:b7:e9:24:33:8e:97:53:cd:48:
b2:ce:38:79:aa:15:00:2a:22:5c:51:53:45:6a:ef:
1f:b7:5c:36:7e:9b:e8:2a:63:cf:0a:53:6c:c2:8c:
65:9c:c3:05:46:80:e2:76:5a:ac:ff:33:20:89:fa:
fc:b9:54:b5:77:9f:9a:fa:23:be:1d:a8:8b:95:30:
fd:04:dd:6d:82:1c:e2:35:79:f6:15:ef:b5:b0:9a:
d5:2e:7a:3d:5d:17:9f:e9:af:72:c9:c8:0f:7f:ff:
03:59:de:14:93:58:81:14:71:94:bf:3f:1f:d6:bf:
9e:4a:30:60:3d:6b:4e:27:15:6e:35:59:9f:6e:1a:
eb:77:4b:19:b7:2d:9e:24:bd:32:ff:2f:19:78:9d:
fb:1b:e7:b7:4c:32:41:6d:f1:ee:d2:2b:3f:fa:95:
2b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E9:6F:CD:D3:41:B9:26:72:94:05:8C:3B:A2:BC:DC:B6:C4:6B:F8
X509v3 Authority Key Identifier:
keyid:E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:e2:93:2c:ea:51:7a:bd:ad:ad:fb:5a:2f:c0:ba:f7:e3:f1:
19:2e:b1:b8:79:eb:59:ff:75:b0:f6:19:62:5c:d7:85:61:8a:
e7:c5:8d:a3:ca:0d:18:5b:e6:68:5b:d2:b7:f0:23:e4:16:32:
5b:55:7b:31:a4:bb:1e:45:67:2c:0c:de:98:f9:00:4a:ed:a6:
c4:b9:60:66:83:9b:19:3e:5f:e3:04:77:92:af:c6:17:65:5d:
c9:5f:14:50:d7:63:69:d1:8f:5a:68:8d:c3:b5:b8:2b:ac:60:
06:28:1a:c9:75:1d:39:7b:8e:d3:73:a9:38:b0:41:7e:b0:ab:
27:46:be:d5:01:52:a5:e1:89:5f:49:e3:8e:a8:6f:45:04:46:
b2:0e:c8:ae:d8:f5:6b:4f:c7:94:8f:7a:4f:01:d3:83:b3:f0:
2a:fc:8f:2f:2e:8a:3c:2c:e8:c3:a2:d3:ec:c7:04:98:b5:e0:
72:a6:0a:13:d4:77:91:18:1a:a7:61:03:c7:58:1f:42:b6:2f:
19:d8:b7:86:69:32:93:ea:11:a5:76:6d:5f:f4:88:74:1a:a0:
ea:be:aa:28:89:9c:50:84:a0:45:49:23:ff:ca:04:68:9b:37:
27:5e:84:83:70:68:07:3d:a4:2d:66:26:28:44:7f:a1:d2:f3:
a6:c4:1e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:50:38 2026 by rpki-client