
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
File: p5uCiHAxRBmQsY0aBfnicefnuOY.mft (raw, json)
Hash identifier: NEM8kCFKPZevCaMV6PZ72iXkr1CDJalGEuA34ImlpKw=
Subject key identifier: 35:FF:07:B9:BF:A7:FE:7C:36:C8:46:3B:27:82:15:6A:79:8B:90:B3
Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Certificate serial: 02EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
Manifest number: 02B8
Signing time: Fri 25 Sep 2026 01:39:13 +0000
Manifest this update: Fri 25 Sep 2026 01:39:13 +0000
Manifest next update: Fri 02 Oct 2026 01:39:13 +0000
Files and hashes: 1: p5uCiHAxRBmQsY0aBfnicefnuOY.crl (hash: VTDqYAePqO7xBlN6+l+NjZA61DK8qIW15uZaukLtBpk=)
2: 5D463936C87611EDAC86AA74C4F9AE02.roa (hash: /kMXD66YoOkbovGmviBSlp3XnJGvyJnVXCG8OoKDXuU=)
3: 9CA607DA3C8411F0BDA85229C4F9AE02.roa (hash: 8NZ1UhuGARERdVr4xn3hECAnbMmlyrhbSiHPEdlyKGo=)
4: C8E6CF687AE811EFA0337A38C4F9AE02.roa (hash: PDg4YxpNHjgxHulVHS263Opr354k6cFJFc+jP5Exk2s=)
5: 0900F7CA7AE611EF8CE1F784C4F9AE02.roa (hash: VsSWHNWtSicRbaAy2oWMpH/483BYa5Ylp4bCvkTsd4E=)
6: 610B51267AE711EFACC0CA34C4F9AE02.roa (hash: 68/9HvszJlWJG1Klncq6NQbI3jNLsgAJ7+57XU9yuJw=)
7: 34D5ED1210F511EEBCE2A81EC4F9AE02.roa (hash: GzoC5uTWCiyav9k4HtLbNzyni4nvBdiQvhcLFHI5dZ0=)
8: E98F15362B3811EF926F1555C4F9AE02.roa (hash: 30oQaXhlRZXA31s2p1Ithopu8SY2+k35hcvw3Gcvbz0=)
9: 4DD66E3C347F11EFB73F4074C4F9AE02.roa (hash: xdRHIcCaSxksB74COkVRYLLWK0cb8iWtFeVfa1Y/ZHc=)
10: 9F4683A0B86211EDB9EDAD2CC4F9AE02.roa (hash: PNCot+X9idCYrOIArk0BIGKQbPC3Q9UWQJzdgOjjzzM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 01:39:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 751 (0x2ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Validity
Not Before: Sep 25 01:39:13 2026 GMT
Not After : Oct 2 01:39:13 2026 GMT
Subject: CN=6ab5d0c1-4421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:51:51:e3:0b:4b:ef:a6:d2:37:fd:98:3e:dd:
cb:38:54:34:1a:a9:6a:4d:7e:7e:58:12:2e:24:d3:
a8:1d:25:a5:11:09:47:b1:20:0e:50:88:33:61:a8:
d5:3b:94:ba:c2:1d:70:24:87:f7:5b:a6:3d:cf:be:
57:5a:7f:8a:61:ec:f6:9c:89:5f:b9:69:00:85:6b:
69:a6:c0:32:4b:81:91:66:78:9d:f3:15:42:2b:95:
5e:fa:1b:09:b0:11:7a:a3:8b:e2:40:f5:03:7b:02:
35:54:3a:15:cd:cd:5c:1d:42:74:30:1b:47:0f:fa:
f7:52:bf:c0:fd:d9:b9:eb:72:35:cd:a3:55:eb:03:
79:a8:cc:69:24:9d:db:7d:d5:fa:e8:db:b6:9b:2f:
69:4e:b5:25:47:4e:ac:17:6c:05:01:38:a2:42:b3:
22:e9:c6:62:c3:2d:eb:5f:63:cb:70:39:5b:36:3a:
0f:e1:5b:e1:a3:d0:da:a8:00:fb:fb:4a:88:1b:3d:
8e:a9:f2:2c:0d:9b:b3:ad:63:71:b7:75:73:c1:7e:
17:81:b1:3b:e9:72:54:db:8b:97:3e:18:2e:4c:c6:
3d:9c:1f:38:d8:ca:53:4d:b3:cd:b8:a1:1b:27:03:
5d:fa:dc:85:b0:56:da:97:4d:75:51:43:6f:0e:e2:
17:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FF:07:B9:BF:A7:FE:7C:36:C8:46:3B:27:82:15:6A:79:8B:90:B3
X509v3 Authority Key Identifier:
keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:03:29:57:d4:bf:b0:ac:e0:63:a3:35:9d:a9:21:4b:15:dd:
8e:bb:86:14:ad:0b:8e:f2:89:e8:3c:89:13:34:5a:15:0a:9c:
03:f6:f6:0e:9d:55:b0:66:7f:40:8c:a9:69:a2:28:cf:3e:3e:
0e:65:0a:68:9c:a3:63:e5:8f:9b:bf:87:da:e9:7e:50:85:25:
50:ac:4f:df:17:e5:5b:e8:d1:1c:06:0d:a9:57:bc:1d:a3:44:
f9:a6:b9:37:6a:82:e3:20:3a:8a:c3:f4:64:76:ca:ad:4b:a3:
8d:63:c9:cb:3e:eb:67:21:96:c1:06:89:84:c2:19:56:b3:c8:
f4:72:9e:ea:73:4c:60:eb:7f:63:f8:4a:0b:c3:c6:58:ba:29:
24:b1:e5:57:77:fc:bb:d7:d2:32:2e:26:68:a9:5e:1d:38:b9:
60:bc:b1:b1:a2:cc:7d:9f:55:f5:eb:38:ab:39:ee:ae:63:3c:
88:43:2b:07:c2:9d:22:98:5d:b4:0b:a7:cf:b8:4d:e8:ce:5d:
6f:aa:44:01:be:38:56:fa:c1:16:a4:93:27:9e:52:e9:5b:be:
75:b3:1f:ed:79:55:3e:a9:d5:f3:7f:00:f5:ca:84:1c:e5:fb:
10:ac:ce:9c:9e:99:4e:bd:13:9f:61:d9:1a:de:fe:25:94:e1:
22:1a:0c:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUJFOUExMTAvBgNVBAUTKEE3OUI4Mjg4NzAzMTQ0MTk5MEIxOEQxQTA1RjlFMjcx
RTdFN0I4RTYwHhcNMjYwOTI1MDEzOTEzWhcNMjYxMDAyMDEzOTEzWjAYMRYwFAYD
VQQDEw02YWI1ZDBjMS00NDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqlFR4wtL76bSN/2YPt3LOFQ0GqlqTX5+WBIuJNOoHSWlEQlHsSAOUIgzYajV
O5S6wh1wJIf3W6Y9z75XWn+KYez2nIlfuWkAhWtppsAyS4GRZnid8xVCK5Ve+hsJ
sBF6o4viQPUDewI1VDoVzc1cHUJ0MBtHD/r3Ur/A/dm563I1zaNV6wN5qMxpJJ3b
fdX66Nu2my9pTrUlR06sF2wFATiiQrMi6cZiwy3rX2PLcDlbNjoP4Vvho9DaqAD7
+0qIGz2OqfIsDZuzrWNxt3VzwX4XgbE76XJU24uXPhguTMY9nB842MpTTbPNuKEb
JwNd+tyFsFbal011UUNvDuIXQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDX/B7m/
p/58NshGOyeCFWp5i5CzMB8GA1UdIwQYMBaAFKebgohwMUQZkLGNGgX54nHn57jm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkU5QS84RkExRjU2RUI4
NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJCbVFzWTBhQmZuaWNlZm51
T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3A1dUNpSEF4UkJtUXNZMGFCZm5pY2VmbnVPWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QkU5QS84RkExRjU2RUI4NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJC
bVFzWTBhQmZuaWNlZm51T1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2QMpV9S/sKzgY6M1nakhSxXdjruGFK0LjvKJ6DyJEzRaFQqcA/b2Dp1VsGZ/
QIypaaIozz4+DmUKaJyjY+WPm7+H2ul+UIUlUKxP3xflW+jRHAYNqVe8HaNE+aa5
N2qC4yA6isP0ZHbKrUujjWPJyz7rZyGWwQaJhMIZVrPI9HKe6nNMYOt/Y/hKC8PG
WLopJLHlV3f8u9fSMi4maKleHTi5YLyxsaLMfZ9V9es4qznurmM8iEMrB8KdIphd
tAunz7hN6M5db6pEAb44VvrBFqSTJ55S6Vu+dbMf7XlVPqnV838A9cqEHOX7EKzO
nJ6ZTr0Tn2HZGt7+JZThIhoMkw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:19:38 2026 by rpki-client