
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft
File: 5viFuMHmNK45nsq4FzoD245MEpQ.mft (raw, json)
Hash identifier: VRzDDFdNr3WwIhZAt3CIBQhk6833qvekTNp88WpfyVo=
Subject key identifier: 47:DF:0A:41:67:C1:8D:EB:E0:0B:E5:8E:F0:66:6E:F9:47:69:50:31
Authority key identifier: E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94
Certificate issuer: /CN=A914C4D7/serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294
Certificate serial: 0ED7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft
Manifest number: 0ECB
Signing time: Wed 30 Sep 2026 17:52:53 +0000
Manifest this update: Wed 30 Sep 2026 17:52:53 +0000
Manifest next update: Wed 07 Oct 2026 17:52:53 +0000
Files and hashes: 1: 5viFuMHmNK45nsq4FzoD245MEpQ.crl (hash: sD+rvFRHNK07pQBDrlAco/h7q2qJXo14/oeCN02OtNM=)
2: 1801797EB79211E986129837C4F9AE02.roa (hash: sTQEqI0Zd1ILFJY7IEMF9VrRKsGVR4RFEF9uTNFfGBo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl
rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 17:52:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3799 (0xed7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C4D7, serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294
Validity
Not Before: Sep 30 17:52:53 2026 GMT
Not After : Oct 7 17:52:53 2026 GMT
Subject: CN=6abd4c75-3833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e8:c4:5f:df:aa:d3:16:38:7e:52:63:2e:02:
f7:72:42:44:9a:98:0a:94:56:8e:cd:bd:33:bd:5e:
a9:a1:04:f1:6c:50:95:df:94:40:8d:d9:81:55:04:
6c:d2:b2:ff:61:b0:cc:0c:61:05:3a:17:f0:2c:72:
1b:dc:49:78:18:77:f0:7e:fb:5e:af:79:3a:cd:6e:
25:65:78:65:1e:52:7a:f1:e1:62:e6:0d:0c:fc:54:
77:da:4a:bb:c7:29:08:5b:3f:4d:56:13:7a:8b:c3:
35:ea:a0:37:67:1f:f5:f2:9d:b9:37:8a:e0:64:29:
e8:96:b8:b0:a6:b3:ac:b2:b6:f3:aa:4a:1f:82:23:
67:c2:6f:60:1f:0c:72:04:70:0d:e0:97:d9:b6:a6:
0a:79:78:0f:e5:b1:c9:93:05:cf:0c:b6:c2:50:98:
4f:ba:e8:13:cc:26:44:97:97:25:85:22:3e:fe:57:
f7:4a:55:12:54:8b:50:26:86:f2:1c:b7:16:ec:a9:
58:b7:6f:32:ae:a2:22:06:4b:a3:3a:d6:d5:8b:83:
ca:f2:a6:90:9f:2c:75:76:94:8c:14:aa:0e:a1:06:
d8:b3:a0:bd:a1:a1:9f:50:9e:14:26:d1:20:e7:6f:
5a:f1:e7:ca:dd:8c:77:35:8b:c3:f2:18:db:ea:2a:
c1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DF:0A:41:67:C1:8D:EB:E0:0B:E5:8E:F0:66:6E:F9:47:69:50:31
X509v3 Authority Key Identifier:
keyid:E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:1b:ff:4a:90:ea:c6:03:9a:93:a7:87:22:aa:a8:10:c4:5b:
63:0f:7b:74:d9:2b:e6:94:8e:54:93:4f:9b:ed:61:37:d0:6c:
e1:03:0e:b5:38:45:1c:22:eb:32:ed:e7:85:c5:95:4b:3d:cf:
e2:11:81:d0:bc:2e:b9:3a:3e:a5:2c:ef:5a:13:84:8b:6a:9e:
ab:c7:50:6c:14:e9:e6:c8:54:09:9b:e1:29:15:58:7a:15:e1:
f7:9e:cd:c4:ec:74:cf:45:55:5e:d5:ec:88:d3:20:40:dd:66:
74:08:09:c1:b9:83:cd:c8:5b:40:ec:be:7b:dd:71:62:71:d5:
43:68:67:bc:83:13:49:5d:c9:b0:d8:6b:be:43:f5:15:bb:47:
ee:cd:a8:2a:cc:da:b8:36:0a:7b:67:d6:cb:9d:32:b3:91:cd:
2e:28:e8:a6:ac:dc:8b:f3:3d:f8:5e:81:fb:b1:9a:3b:d1:d1:
a2:83:1a:fa:a8:d8:82:5b:49:aa:0f:4d:09:eb:5d:e4:4c:2f:
e4:7b:e8:37:34:3e:54:bc:36:eb:45:ba:9c:2c:4a:dd:91:43:
02:57:cf:51:04:8a:5d:6a:f5:8d:9f:33:23:d4:2a:f8:60:9a:
44:20:15:ed:5d:22:09:20:45:cf:e4:e9:ef:70:87:1f:17:51:
39:6b:71:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEM0RDcxMTAvBgNVBAUTKEU2Rjg4NUI4QzFFNjM0QUUzOTlFQ0FCODE3M0EwM0RC
OEU0QzEyOTQwHhcNMjYwOTMwMTc1MjUzWhcNMjYxMDA3MTc1MjUzWjAYMRYwFAYD
VQQDEw02YWJkNGM3NS0zODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuejEX9+q0xY4flJjLgL3ckJEmpgKlFaOzb0zvV6poQTxbFCV35RAjdmBVQRs
0rL/YbDMDGEFOhfwLHIb3El4GHfwfvter3k6zW4lZXhlHlJ68eFi5g0M/FR32kq7
xykIWz9NVhN6i8M16qA3Zx/18p25N4rgZCnolriwprOssrbzqkofgiNnwm9gHwxy
BHAN4JfZtqYKeXgP5bHJkwXPDLbCUJhPuugTzCZEl5clhSI+/lf3SlUSVItQJoby
HLcW7KlYt28yrqIiBkujOtbVi4PK8qaQnyx1dpSMFKoOoQbYs6C9oaGfUJ4UJtEg
529a8efK3Yx3NYvD8hjb6irBJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEffCkFn
wY3r4AvljvBmbvlHaVAxMB8GA1UdIwQYMBaAFOb4hbjB5jSuOZ7KuBc6A9uOTBKU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRENy85OUQ5MTUzQUI3
OTAxMUU5QkVFOEREMzRDNEY5QUUwMi81dmlGdU1IbU5LNDVuc3E0RnpvRDI0NU1F
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzV2aUZ1TUhtTks0NW5zcTRGem9EMjQ1TUVwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzRENy85OUQ5MTUzQUI3OTAxMUU5QkVFOEREMzRDNEY5QUUwMi81dmlGdU1IbU5L
NDVuc3E0RnpvRDI0NU1FcFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuhv/SpDqxgOak6eHIqqoEMRbYw97dNkr5pSOVJNPm+1hN9Bs4QMOtThFHCLr
Mu3nhcWVSz3P4hGB0LwuuTo+pSzvWhOEi2qeq8dQbBTp5shUCZvhKRVYehXh957N
xOx0z0VVXtXsiNMgQN1mdAgJwbmDzchbQOy+e91xYnHVQ2hnvIMTSV3JsNhrvkP1
FbtH7s2oKszauDYKe2fWy50ys5HNLijopqzci/M9+F6B+7GaO9HRooMa+qjYgltJ
qg9NCetd5Ewv5HvoNzQ+VLw260W6nCxK3ZFDAlfPUQSKXWr1jZ8zI9Qq+GCaRCAV
7V0iCSBFz+Tp73CHHxdROWtxUg==
-----END CERTIFICATE-----
Generated at Fri Oct 2 15:56:35 2026 by rpki-client