
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
File: b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft (raw, json)
Hash identifier: CwMzqJtTPVd+hqp9WTXOHUb/E/BE1K70DMX1lUPOMhc=
Subject key identifier: 4D:8F:BD:FD:26:7D:55:B8:81:8A:F3:2A:36:2A:A7:19:55:34:6E:99
Authority key identifier: 6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D
Certificate issuer: /CN=A918D2CA/serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D
Certificate serial: 0108
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
Manifest number: 0103
Signing time: Fri 25 Sep 2026 06:16:29 +0000
Manifest this update: Fri 25 Sep 2026 06:16:28 +0000
Manifest next update: Fri 02 Oct 2026 06:16:28 +0000
Files and hashes: 1: b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl (hash: Yp7nIW5tzeX9DresUUEpmJWvY9hOIXYpgFIQUTyOVzc=)
2: 8C9E2B18354711F09FCEEE25C4F9AE02.roa (hash: vLHp4ObDO1IK1mUqYi6ciOieF4o9Rbhwa3XZX1qH6lI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl
rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:16:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D2CA, serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D
Validity
Not Before: Sep 25 06:16:28 2026 GMT
Not After : Oct 2 06:16:28 2026 GMT
Subject: CN=6ab611bd-4f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2f:c0:41:bd:b6:22:d6:dd:41:78:ff:a1:5f:
f8:14:4c:a3:d1:10:bf:59:cd:a5:69:19:57:13:11:
5b:72:aa:99:56:fe:60:77:24:ec:36:9e:fe:1b:6e:
ef:17:e4:04:85:f9:c1:ce:7e:3f:53:c5:d3:6d:7c:
2e:27:d8:1e:e7:68:92:7c:fc:83:03:b5:60:6c:28:
dc:04:63:71:78:77:38:67:be:1b:37:e2:e2:15:05:
7b:04:06:06:a7:f5:ac:7b:03:b1:e1:b3:55:81:83:
90:14:b1:a4:09:7d:33:5f:b4:ea:17:d7:40:ce:b8:
85:25:b1:72:dd:8c:84:26:df:08:be:a7:cb:5e:8c:
da:34:05:d9:ac:19:d8:59:f0:86:d7:95:2b:b0:c0:
1a:e8:48:53:4b:92:8d:83:dc:9c:6b:ad:64:cb:33:
30:a5:a5:2c:22:d5:66:9b:70:71:eb:88:4c:e4:17:
07:04:b4:f3:59:55:ce:81:c7:6b:f9:1e:0c:75:51:
f4:84:54:fe:5b:c8:aa:38:b1:f7:33:11:11:2c:75:
ed:00:3f:17:fe:a3:a9:2c:8d:2b:fe:59:68:be:e9:
d6:18:a2:3b:4a:90:88:8e:26:de:e6:75:34:7b:f3:
b2:04:ae:1c:37:b9:d2:6e:48:50:a5:32:d0:11:45:
7b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8F:BD:FD:26:7D:55:B8:81:8A:F3:2A:36:2A:A7:19:55:34:6E:99
X509v3 Authority Key Identifier:
keyid:6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:97:fb:51:36:92:b1:03:01:9a:5a:46:c3:d5:29:bf:04:8e:
dd:63:03:97:b0:64:98:95:33:23:90:89:53:fe:12:dd:3c:cf:
e5:76:af:71:13:0c:76:ad:2e:18:5e:c1:ee:48:d2:d6:6b:79:
72:1f:9b:c9:80:6d:2e:03:da:af:33:2d:fc:62:2c:04:30:f1:
8a:fb:b5:d3:4a:e1:ed:04:9e:b0:17:2e:06:57:52:5f:fe:50:
02:3a:7f:07:cd:8a:a6:57:3a:40:4b:d1:69:a5:1a:4c:ec:6a:
ae:df:f8:22:83:34:11:2f:30:26:60:b7:f7:1b:71:1c:36:57:
92:65:d2:46:14:b4:e5:85:98:13:b0:8c:d7:b8:77:15:cb:29:
9d:28:19:57:41:7d:74:ca:23:cd:a7:40:0e:a5:e4:5f:03:ba:
4e:87:0c:ae:5f:6c:10:b8:a9:7f:e5:a4:70:32:d0:6b:6f:37:
73:7b:2a:94:3f:f8:fb:74:c3:87:d7:f0:72:72:51:0d:31:a4:
ac:37:46:e5:6b:cd:eb:a9:53:ca:91:ef:5a:8a:fd:c5:56:fe:
53:e1:e8:76:56:35:46:71:12:2d:26:98:d6:0d:2e:46:58:45:
ef:96:cc:a5:91:a8:48:a5:28:47:7f:ee:e8:a3:8d:50:f1:bd:
5b:c5:22:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQyQ0ExMTAvBgNVBAUTKDZGOTFDNzZBNEY3NDY2NDEwMEREOERFQkQxNzg1MTQy
RTEzNzgwMkQwHhcNMjYwOTI1MDYxNjI4WhcNMjYxMDAyMDYxNjI4WjAYMRYwFAYD
VQQDEw02YWI2MTFiZC00ZjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAly/AQb22ItbdQXj/oV/4FEyj0RC/Wc2laRlXExFbcqqZVv5gdyTsNp7+G27v
F+QEhfnBzn4/U8XTbXwuJ9ge52iSfPyDA7VgbCjcBGNxeHc4Z74bN+LiFQV7BAYG
p/WsewOx4bNVgYOQFLGkCX0zX7TqF9dAzriFJbFy3YyEJt8IvqfLXozaNAXZrBnY
WfCG15UrsMAa6EhTS5KNg9yca61kyzMwpaUsItVmm3Bx64hM5BcHBLTzWVXOgcdr
+R4MdVH0hFT+W8iqOLH3MxERLHXtAD8X/qOpLI0r/llovunWGKI7SpCIjibe5nU0
e/OyBK4cN7nSbkhQpTLQEUV7XwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE2Pvf0m
fVW4gYrzKjYqpxlVNG6ZMB8GA1UdIwQYMBaAFG+Rx2pPdGZBAN2N69F4UULhN4At
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDJDQS8wOUY3NEVGNjM1
NDcxMUYwODEwM0JFMjRDNEY5QUUwMi9iNUhIYWs5MFprRUEzWTNyMFhoUlF1RTNn
QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2I1SEhhazkwWmtFQTNZM3IwWGhSUXVFM2dDMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDJDQS8wOUY3NEVGNjM1NDcxMUYwODEwM0JFMjRDNEY5QUUwMi9iNUhIYWs5MFpr
RUEzWTNyMFhoUlF1RTNnQzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg5f7UTaSsQMBmlpGw9UpvwSO3WMDl7BkmJUzI5CJU/4S3TzP5XavcRMMdq0u
GF7B7kjS1mt5ch+byYBtLgParzMt/GIsBDDxivu100rh7QSesBcuBldSX/5QAjp/
B82Kplc6QEvRaaUaTOxqrt/4IoM0ES8wJmC39xtxHDZXkmXSRhS05YWYE7CM17h3
FcspnSgZV0F9dMojzadADqXkXwO6TocMrl9sELipf+WkcDLQa283c3sqlD/4+3TD
h9fwcnJRDTGkrDdG5WvN66lTypHvWor9xVb+U+HodlY1RnESLSaY1g0uRlhF75bM
pZGoSKUoR3/u6KONUPG9W8Ui0g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:07:58 2026 by rpki-client