
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft
File: S5R0cysQASlff10ywBNpOhk3aBM.mft (raw, json)
Hash identifier: ZS17WHGHimdDqseQXYwmHD6JpRcWFnsfiEjOrJrL+bo=
Subject key identifier: 90:93:21:AD:A2:8F:BD:9F:37:E2:79:9F:A5:2A:CE:FC:DB:00:3E:08
Authority key identifier: 4B:94:74:73:2B:10:01:29:5F:7F:5D:32:C0:13:69:3A:19:37:68:13
Certificate issuer: /CN=A915393C/serialNumber=4B9474732B1001295F7F5D32C013693A19376813
Certificate serial: 0198
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft
Manifest number: 018F
Signing time: Fri 09 Oct 2026 05:03:36 +0000
Manifest this update: Fri 09 Oct 2026 05:03:35 +0000
Manifest next update: Fri 16 Oct 2026 05:03:35 +0000
Files and hashes: 1: S5R0cysQASlff10ywBNpOhk3aBM.crl (hash: g/6q5J02Md64LP0EWiHVrj8mMHq5ypsRxLcAKjwdG30=)
2: D970354A640E11EF93D18659C4F9AE02.roa (hash: jiKiKQpZQRaBArebauC1LMccMeWkEfFbYfCrRscBtwk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.crl
rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915393C, serialNumber=4B9474732B1001295F7F5D32C013693A19376813
Validity
Not Before: Oct 9 05:03:35 2026 GMT
Not After : Oct 16 05:03:35 2026 GMT
Subject: CN=6ac875a8-8e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a7:d6:2e:4d:0d:ab:c2:8f:12:c3:09:5f:03:
dd:55:95:5d:3e:b6:d8:54:de:2f:d1:65:45:27:39:
c6:f6:6f:65:b2:8f:64:29:2f:06:ff:fc:ab:c2:b2:
f6:84:80:45:aa:c6:78:96:b5:39:ca:38:ce:89:f7:
54:48:a8:75:2d:14:5a:b4:fa:8a:bb:08:9f:54:7a:
09:69:0d:cc:67:80:3d:02:4c:ad:80:04:ef:fd:52:
a4:00:5b:08:60:05:61:ee:e3:03:f4:d5:3d:af:be:
fd:e8:19:22:a5:76:77:3f:b1:0d:c8:ed:ed:1b:fe:
27:6a:3c:75:86:60:7e:35:e9:18:29:ff:e8:9a:da:
13:a6:bb:10:ea:35:9e:c6:94:e8:7a:8c:1f:ce:cc:
5f:52:d4:5c:d8:fb:31:ea:56:13:50:ca:f0:92:7d:
37:40:05:71:25:09:3a:28:cc:07:97:b5:35:b5:d1:
ac:f8:06:45:76:6d:56:f8:e8:c8:4f:7b:fb:7f:41:
12:c9:49:fb:d5:d5:ca:f6:e9:3f:ed:b1:cf:9d:67:
39:d6:b3:ab:e8:14:30:8a:6a:b2:72:fd:40:08:ea:
e6:61:2b:fc:31:bd:b8:30:d1:2f:e0:2c:41:21:12:
a8:23:fe:dd:41:ea:ae:c9:b0:4f:6d:79:7e:ce:7b:
0f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:93:21:AD:A2:8F:BD:9F:37:E2:79:9F:A5:2A:CE:FC:DB:00:3E:08
X509v3 Authority Key Identifier:
keyid:4B:94:74:73:2B:10:01:29:5F:7F:5D:32:C0:13:69:3A:19:37:68:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:c5:8c:ee:d4:42:1f:2e:75:a4:87:57:fc:f2:fc:1c:e1:8a:
4e:4a:c7:a2:6f:65:6e:02:dc:09:7c:50:0a:f9:e9:8c:16:7f:
d6:0e:e2:99:91:03:49:ec:e5:9b:2a:d8:ae:a0:2e:c8:bd:83:
bd:c6:61:0a:3f:7f:e0:b4:1b:57:82:9e:f1:12:ca:7c:75:71:
80:a1:dd:c8:70:00:c0:86:ed:a2:3c:5d:c4:51:18:c2:7a:0f:
5f:4c:36:e6:28:5d:23:be:fc:f7:cd:83:a4:87:a3:8c:f4:51:
1b:04:8f:a1:ee:f4:35:b1:82:bc:f8:e8:aa:d0:f7:69:9e:4c:
e0:e9:bd:aa:84:25:87:ce:7e:b2:19:0b:c0:54:e3:9a:23:4d:
bf:8e:27:67:c4:96:5f:25:6f:aa:86:d4:19:57:a7:f8:30:ea:
b1:f2:28:09:c1:77:09:56:64:3b:40:93:b4:b2:80:42:45:ea:
ce:41:03:8b:c8:51:6b:5b:fa:4a:71:9b:7b:bc:f2:5d:be:ff:
b4:12:8e:c2:dd:6b:5a:21:63:1f:38:ed:6a:d8:53:00:df:a1:
10:57:43:3a:a0:26:e7:52:c7:95:da:ca:c4:48:eb:3d:32:bf:
c4:e8:56:d9:13:ca:c5:23:d8:b7:8e:1b:97:e0:d2:eb:02:47:
af:ad:c6:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM5M0MxMTAvBgNVBAUTKDRCOTQ3NDczMkIxMDAxMjk1RjdGNUQzMkMwMTM2OTNB
MTkzNzY4MTMwHhcNMjYxMDA5MDUwMzM1WhcNMjYxMDE2MDUwMzM1WjAYMRYwFAYD
VQQDEw02YWM4NzVhOC04ZTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl6fWLk0Nq8KPEsMJXwPdVZVdPrbYVN4v0WVFJznG9m9lso9kKS8G//yrwrL2
hIBFqsZ4lrU5yjjOifdUSKh1LRRatPqKuwifVHoJaQ3MZ4A9AkytgATv/VKkAFsI
YAVh7uMD9NU9r7796BkipXZ3P7ENyO3tG/4najx1hmB+NekYKf/omtoTprsQ6jWe
xpToeowfzsxfUtRc2Psx6lYTUMrwkn03QAVxJQk6KMwHl7U1tdGs+AZFdm1W+OjI
T3v7f0ESyUn71dXK9uk/7bHPnWc51rOr6BQwimqycv1ACOrmYSv8Mb24MNEv4CxB
IRKoI/7dQequybBPbXl+znsPTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJCTIa2i
j72fN+J5n6UqzvzbAD4IMB8GA1UdIwQYMBaAFEuUdHMrEAEpX39dMsATaToZN2gT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzkzQy82RDA0MzE1RTY0
MEUxMUVGQjU0NDY0NThDNEY5QUUwMi9TNVIwY3lzUUFTbGZmMTB5d0JOcE9oazNh
Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1M1UjBjeXNRQVNsZmYxMHl3Qk5wT2hrM2FCTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzkzQy82RDA0MzE1RTY0MEUxMUVGQjU0NDY0NThDNEY5QUUwMi9TNVIwY3lzUUFT
bGZmMTB5d0JOcE9oazNhQk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQcWM7tRCHy51pIdX/PL8HOGKTkrHom9lbgLcCXxQCvnpjBZ/1g7imZEDSezl
myrYrqAuyL2DvcZhCj9/4LQbV4Ke8RLKfHVxgKHdyHAAwIbtojxdxFEYwnoPX0w2
5ihdI778982DpIejjPRRGwSPoe70NbGCvPjoqtD3aZ5M4Om9qoQlh85+shkLwFTj
miNNv44nZ8SWXyVvqobUGVen+DDqsfIoCcF3CVZkO0CTtLKAQkXqzkEDi8hRa1v6
SnGbe7zyXb7/tBKOwt1rWiFjHzjtathTAN+hEFdDOqAm51LHldrKxEjrPTK/xOhW
2RPKxSPYt44bl+DS6wJHr63GDg==
-----END CERTIFICATE-----
Generated at Fri Oct 9 22:42:10 2026 by rpki-client