
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft
File: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft (raw, json)
Hash identifier: mSb7RGiZJVI3BdIQW//mKTNzDiTXwCnPNC+kkal9aLs=
Subject key identifier: 81:73:02:58:36:CB:19:47:BE:8D:99:20:10:75:8F:B2:78:F6:43:79
Authority key identifier: 37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB
Certificate issuer: /CN=A91E3E33/serialNumber=379743714CE012230AA978BB1AA8C790E70667AB
Certificate serial: 1324
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft
Manifest number: 12F8
Signing time: Mon 12 Oct 2026 17:06:25 +0000
Manifest this update: Mon 12 Oct 2026 17:06:25 +0000
Manifest next update: Mon 19 Oct 2026 17:06:25 +0000
Files and hashes: 1: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl (hash: 2U8yN6eKiT94bkY8T3x1jPkZBU2fezWGMohF30wkUy8=)
2: 29ED0D46839011EE946C5E63C4F9AE02.roa (hash: XqfvNmxgOBTT3xG3TK9aNVaLcTvBtDRC2XSkMphSbbU=)
3: 4551BE2CD19D11EAA120EE14C4F9AE02.roa (hash: KCLfoCC7NSkzeSPIlugVeY6lBTShkJ7VJdm1UvZ8ejc=)
4: D0B8C09E1BBF11EAA64ECF70C4F9AE02.roa (hash: Ks8khG5IkVk3GytyPpxdUgVHhtoEO8yPx5GXaLa+mGk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl
rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 16:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4900 (0x1324)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3E33, serialNumber=379743714CE012230AA978BB1AA8C790E70667AB
Validity
Not Before: Oct 12 17:06:25 2026 GMT
Not After : Oct 19 17:06:25 2026 GMT
Subject: CN=6acd1391-29d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:7e:89:7e:7c:0a:bc:7e:bc:df:2e:c8:9c:
97:5b:69:78:f9:e3:e9:ba:57:51:e1:7f:d4:93:d5:
3b:a3:52:e7:ec:7b:de:64:f5:dd:09:09:2e:b2:ed:
59:bf:92:b9:9d:90:8d:b0:d4:13:dc:a5:47:55:24:
ab:b0:3d:6d:e8:64:8c:33:63:c0:20:75:8e:8f:45:
1b:e9:80:b7:10:f0:5d:54:dd:44:29:66:d5:51:9d:
e2:4f:cb:b2:4a:fe:5a:9c:3a:4f:f4:c4:cb:48:05:
20:78:55:2d:9e:c7:1f:2b:45:71:2d:70:d4:a0:65:
a6:6a:ab:69:58:b8:d6:fa:b0:90:de:90:c2:4c:c8:
4b:0b:ff:00:52:07:21:3f:01:3d:d3:d7:29:da:7f:
2c:a5:b0:0a:ac:ce:4b:3a:fa:ae:81:bf:95:d3:72:
51:0c:8a:d5:58:55:4b:87:20:3b:a0:64:3d:d5:87:
b5:3f:d7:15:cd:78:16:e0:cf:c4:d9:12:dc:4a:b0:
80:31:ff:e7:70:e6:44:74:2e:14:ad:98:c5:14:8a:
d1:32:b2:b0:16:a5:37:77:7c:4a:26:6a:6f:44:e2:
10:01:5c:dd:0c:9a:36:18:b8:bb:c7:e8:da:d7:a3:
32:eb:20:c4:40:85:aa:ae:00:bc:28:7b:92:ab:6e:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:73:02:58:36:CB:19:47:BE:8D:99:20:10:75:8F:B2:78:F6:43:79
X509v3 Authority Key Identifier:
keyid:37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:29:a7:db:6e:24:85:64:98:ad:89:66:93:75:3e:3f:c5:0c:
3f:75:28:b9:66:fb:e2:b6:94:d5:4a:b9:76:09:13:47:d0:79:
63:99:99:27:bc:ce:87:cb:c0:cd:03:a3:0e:cc:25:b7:3c:db:
f1:9c:37:43:72:a2:96:d2:8d:3b:30:e0:ca:7c:37:6a:1d:1e:
06:83:71:db:c1:6d:df:01:5e:ba:22:d0:8d:b0:08:f1:ec:db:
81:98:fa:df:19:a8:15:e6:dd:20:6a:07:56:a9:89:ed:c2:a6:
19:06:0e:ac:ee:fa:e1:0b:4e:62:61:1d:39:cd:18:a9:e7:ea:
40:72:13:62:46:d0:7b:e2:7e:4d:08:7a:95:51:92:ca:0f:62:
e8:74:34:ee:87:ad:f2:03:41:a0:74:82:a1:87:83:18:27:9d:
f7:32:21:d9:e4:35:f6:43:bd:d1:ed:14:5a:a7:30:fe:92:8b:
ae:e2:c7:e1:f6:d0:a3:3f:34:96:17:7a:13:f7:e2:09:42:4d:
57:63:dd:d6:a6:84:23:ad:f6:b2:d6:8d:aa:5b:a0:cf:dc:6e:
c6:66:41:0d:e9:47:ce:9a:f7:41:67:ba:a6:eb:08:ec:ef:f5:
41:28:69:35:31:fe:a7:6e:b1:c7:a8:98:ac:2e:dc:92:1a:7c:
bc:d8:4a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:22:49 2026 by rpki-client