
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.mft
File: 5qAfnnpf4L1tom3Ak9swMffqvPU.mft (raw, json)
Hash identifier: opiDJIqCjkR8+2/3iYmnPHkblrXpg4Lb4Sn2+cMQL2o=
Subject key identifier: 45:DF:9E:F3:84:18:FC:8C:AF:AE:1F:7A:7B:DF:FA:3F:18:0A:F5:43
Authority key identifier: E6:A0:1F:9E:7A:5F:E0:BD:6D:A2:6D:C0:93:DB:30:31:F7:EA:BC:F5
Certificate issuer: /CN=A915A6E1/serialNumber=E6A01F9E7A5FE0BD6DA26DC093DB3031F7EABCF5
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qAfnnpf4L1tom3Ak9swMffqvPU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.mft
Manifest number: 85
Signing time: Sun 11 Oct 2026 08:17:54 +0000
Manifest this update: Sun 11 Oct 2026 08:17:54 +0000
Manifest next update: Sun 18 Oct 2026 08:17:54 +0000
Files and hashes: 1: 5qAfnnpf4L1tom3Ak9swMffqvPU.crl (hash: AgEIkemMJEDroomGtn83mSwPDo39n1n9zpp0DG+RnF0=)
2: 5A1CA5FE001511F1B173DED1406F56BC.roa (hash: Q9xRalMlZSgL2EIEYXzUsDgkkdzjYwQVHna8NWAirhs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.crl
rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qAfnnpf4L1tom3Ak9swMffqvPU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 08:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A6E1, serialNumber=E6A01F9E7A5FE0BD6DA26DC093DB3031F7EABCF5
Validity
Not Before: Oct 11 08:17:54 2026 GMT
Not After : Oct 18 08:17:54 2026 GMT
Subject: CN=6acb4632-e1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5d:4d:ac:97:aa:93:6f:87:a7:9d:91:11:bb:
3a:69:06:f9:87:53:66:28:e7:aa:82:86:5f:63:98:
0a:4c:20:97:a1:ba:ac:d6:34:65:fa:49:bb:22:b1:
77:4e:00:b0:da:5b:28:77:eb:52:27:74:59:0b:94:
81:b4:40:2d:7f:ec:f6:9d:ae:d2:2c:88:5d:56:e3:
56:46:af:7d:a8:6e:7b:0f:d9:b8:f8:ba:c2:b5:3f:
29:0e:f5:d0:cb:e1:33:ec:9d:d8:c0:02:ad:09:6b:
60:4f:3b:b3:a2:e7:18:82:b5:89:e2:90:1c:2a:23:
ea:e0:7e:19:7c:5a:fd:c7:c1:0d:0a:6a:ae:72:24:
00:e8:58:3f:57:c5:8a:ee:29:f4:73:87:5e:0b:fb:
af:6b:5d:62:be:4a:bb:f0:9f:ba:13:75:dc:f4:f7:
0e:73:cc:d1:53:84:14:0e:ed:9a:ae:2f:3e:e4:bc:
6a:90:6b:66:b0:01:dc:58:93:8e:3f:c3:8b:62:59:
9c:1d:7f:d1:11:47:09:82:f6:61:07:49:bb:59:8c:
30:33:3f:f2:76:76:b6:aa:a3:1f:0c:ef:da:36:2a:
07:11:fe:fb:dd:e6:dd:d9:f5:6c:bf:43:27:07:36:
70:b2:b0:2b:37:33:1b:b7:85:a2:6f:12:e2:5f:fe:
f9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DF:9E:F3:84:18:FC:8C:AF:AE:1F:7A:7B:DF:FA:3F:18:0A:F5:43
X509v3 Authority Key Identifier:
keyid:E6:A0:1F:9E:7A:5F:E0:BD:6D:A2:6D:C0:93:DB:30:31:F7:EA:BC:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qAfnnpf4L1tom3Ak9swMffqvPU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:20:c8:3f:b2:e2:fd:a7:e4:41:70:2e:85:11:eb:be:a9:5f:
34:d0:9a:e0:25:94:a7:72:06:3d:cd:d3:51:eb:40:14:04:49:
f0:c8:57:a7:2f:2d:00:db:cb:b4:24:c5:96:70:6d:e8:19:72:
e2:14:62:85:7b:c5:2f:a3:7f:0a:69:d9:bb:6f:3c:07:e8:09:
40:3a:a2:22:ce:b6:65:a0:27:5c:c4:05:12:89:b8:b6:19:ed:
1e:58:dc:ac:54:06:9d:8d:8d:7f:32:a1:25:26:eb:9b:a0:f3:
42:18:35:ea:45:96:cf:e9:ce:f5:be:6e:f7:a5:9d:c9:48:6d:
32:c7:6e:21:b6:11:b9:7d:a1:53:46:ea:ab:19:e9:30:84:e5:
97:50:76:e3:00:9a:25:54:04:ab:1b:25:64:7c:cb:c2:7f:c5:
a6:23:7d:4a:a4:17:38:79:73:cf:1e:d9:28:87:c7:18:60:f1:
98:24:61:58:2f:17:f1:ca:31:c7:e9:7c:87:1d:bf:95:a5:83:
85:da:fe:2c:8a:d6:22:d4:dc:b1:5b:ca:d2:1b:0f:cb:fb:0a:
57:d9:42:31:af:f6:06:d1:c1:ea:b2:ab:1f:89:b9:5f:bd:de:
08:ac:d5:3c:d8:bd:81:02:eb:ed:d8:f6:84:4b:e2:d1:6a:6f:
c1:4c:17:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:39:41 2026 by rpki-client