
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft
File: P5liYas9HvBBZhs6732JMrVwJjc.mft (raw, json)
Hash identifier: 9QIbB2mCYFfxs0AE3sWNHQRuF2MYNimGWATIb2Pa6zU=
Subject key identifier: A2:E0:2B:9F:11:BA:E2:E9:0C:7B:A7:75:64:12:EA:6D:5C:7C:3A:42
Authority key identifier: 3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37
Certificate issuer: /CN=A91DC2A9/serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637
Certificate serial: 0279
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft
Manifest number: 0265
Signing time: Sat 03 Oct 2026 02:56:55 +0000
Manifest this update: Sat 03 Oct 2026 02:56:54 +0000
Manifest next update: Sat 10 Oct 2026 02:56:54 +0000
Files and hashes: 1: P5liYas9HvBBZhs6732JMrVwJjc.crl (hash: 6+nVjwkKbiN8xbTvoKUfgL0mDDI+cD3pwt/80wWoCwY=)
2: 8A7A9F7AA50C11F18BB0BE293611F970.roa (hash: CZPrNICGMMjA739lq2TDOVb5grDlm/kE1n5Njcl+iio=)
3: 7266A7C492EE11F1B04CCA456811F970.roa (hash: t4GZ18QI4oTf6DHwQOcgAYxGRqo9r2jFkCr7Ti8hMTo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl
rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 02:56:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 633 (0x279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC2A9, serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637
Validity
Not Before: Oct 3 02:56:54 2026 GMT
Not After : Oct 10 02:56:54 2026 GMT
Subject: CN=6ac06ef6-fed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7c:b6:91:25:68:11:f2:2f:e7:5a:dd:1a:d9:
0b:c6:6b:2f:4c:62:39:2c:2c:04:72:56:74:2a:4f:
ec:44:0f:d0:a0:fe:5c:dc:66:5c:84:b3:a8:f6:51:
31:4d:4d:78:05:f0:62:d0:31:36:11:01:e9:fb:0e:
76:00:26:21:fd:1c:8a:1b:d1:16:a6:0c:f2:81:0e:
72:f3:b2:d3:e5:31:64:1c:6d:1a:20:07:45:a4:b1:
db:c8:b6:81:37:d9:f9:50:30:00:f4:8f:44:24:19:
14:a0:0c:f3:9f:e9:b4:cc:18:8c:b1:4c:df:2c:50:
3b:44:0d:ac:6f:b2:a1:c1:11:73:8c:16:01:97:24:
df:3a:4f:d0:99:67:f6:64:b0:05:75:aa:0a:8b:3e:
d8:1c:cc:11:53:06:83:a1:c7:32:48:9f:cb:bb:38:
98:9e:e0:9b:13:39:20:1c:ea:5d:6d:a8:e2:ba:9e:
7a:bd:5f:b7:61:20:4c:ac:f8:07:4c:45:1c:2d:a1:
18:14:bf:02:43:a1:cc:1c:9e:ed:e8:b7:c5:5d:8a:
7b:8e:6c:e1:c2:2e:b3:19:71:c1:52:5a:20:29:70:
f6:1f:56:f3:39:d3:2e:c8:d7:f8:9d:41:0d:1d:b7:
e7:cf:cd:4f:df:91:ec:ca:de:b9:68:4e:b8:0c:26:
c5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E0:2B:9F:11:BA:E2:E9:0C:7B:A7:75:64:12:EA:6D:5C:7C:3A:42
X509v3 Authority Key Identifier:
keyid:3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:df:cf:65:22:c8:e9:e8:b3:05:a3:3a:5a:06:83:6d:9c:8c:
4e:92:7c:25:52:8d:9e:f5:81:06:f7:f8:c7:d9:99:8a:11:49:
d6:ba:7b:12:b5:6b:5a:6b:18:58:90:26:23:92:d7:71:eb:03:
f4:d3:33:6b:2f:fb:56:28:5d:71:0f:2e:98:d3:0b:36:d9:bf:
36:5f:f8:de:6d:6c:2a:57:54:a5:9e:fb:fb:4b:7e:99:ec:e1:
0a:7e:16:ea:0e:76:e2:22:00:29:63:70:8a:3f:7c:a7:3c:7b:
1a:0e:ea:6f:d3:40:73:f7:8b:ca:dd:74:71:58:6b:4a:b4:c0:
2a:21:a8:7c:fa:08:b1:9f:5b:4e:76:41:7b:b8:c3:bb:75:12:
ed:cc:c2:9a:dd:5b:63:36:19:99:75:8e:72:aa:cb:24:6a:36:
5f:30:c2:20:78:fd:21:37:39:97:25:f9:d1:e3:3b:2a:b9:85:
29:ae:a5:3b:f2:65:10:06:cc:81:18:4b:16:3f:20:e1:66:c8:
f7:98:b3:8a:13:cb:82:d9:d8:99:e3:41:c0:b4:6d:5f:f6:46:
20:b3:66:96:56:6a:f4:f2:27:d5:af:c7:2c:bc:bf:72:3e:36:
23:40:bc:7c:6d:86:79:e9:aa:bb:62:d2:cc:87:d9:2f:18:88:
06:aa:55:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:53:27 2026 by rpki-client