
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.mft
File: -soSQJs8JskJ3Pqy874emPzo2oA.mft (raw, json)
Hash identifier: 09IEhh9Nh95fNlDgje3qfvQFE/4QGruATeSwm8O7QZg=
Subject key identifier: 18:F5:D0:67:1B:05:3A:50:A4:92:9F:0B:A1:A7:F2:4D:DC:57:95:EA
Authority key identifier: FA:CA:12:40:9B:3C:26:C9:09:DC:FA:B2:F3:BE:1E:98:FC:E8:DA:80
Certificate issuer: /CN=A91EE8EF/serialNumber=FACA12409B3C26C909DCFAB2F3BE1E98FCE8DA80
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-soSQJs8JskJ3Pqy874emPzo2oA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.mft
Manifest number: 5A
Signing time: Sat 03 Oct 2026 08:54:16 +0000
Manifest this update: Sat 03 Oct 2026 08:54:15 +0000
Manifest next update: Sat 10 Oct 2026 08:54:15 +0000
Files and hashes: 1: -soSQJs8JskJ3Pqy874emPzo2oA.crl (hash: X33/K1Q/Tdo/SrNZoY9fPCA8EI44dMA5hJ7/693yB0g=)
2: 4663706238A311F1973C08FAC9833773.roa (hash: Cm1HBvclOybdzNm8AH82qs/j/bXh5vrr9fMTzOhVfEk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.crl
rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-soSQJs8JskJ3Pqy874emPzo2oA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 08:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE8EF, serialNumber=FACA12409B3C26C909DCFAB2F3BE1E98FCE8DA80
Validity
Not Before: Oct 3 08:54:15 2026 GMT
Not After : Oct 10 08:54:15 2026 GMT
Subject: CN=6ac0c2b7-ff1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:bf:cb:31:54:79:c5:37:a0:69:c0:80:fd:
8b:72:38:a3:0c:bb:c8:36:b5:7f:25:ef:b2:74:15:
46:0e:8b:8f:a7:75:0e:6c:4d:f1:a6:ed:b8:a6:1e:
26:b4:80:db:d9:bb:a7:8e:2a:0e:6f:5c:e7:85:40:
a7:d6:b4:33:37:91:0b:20:78:42:37:30:31:c6:dd:
46:0d:98:1f:1f:6a:e6:67:88:52:7e:c8:35:22:b9:
33:c8:52:ea:56:19:68:a0:b1:0f:41:71:d3:9d:57:
c6:bc:f4:38:c5:2d:2f:c3:25:a4:22:99:af:a9:f0:
7e:5c:1d:6a:87:17:15:5f:8f:64:d2:cd:eb:6b:4a:
9a:f5:31:06:5d:3f:78:a7:cf:d6:bf:25:a3:fd:e2:
5f:10:5d:e0:9f:6d:91:b9:69:3e:f0:ff:e5:3b:6e:
69:4e:8e:c3:ab:a0:ac:0a:4d:ad:32:34:e0:ae:72:
d0:de:55:ec:1c:5d:6f:c7:80:3d:62:43:5f:22:b8:
9d:01:3f:1d:fb:16:c0:c4:c7:8e:25:18:82:65:bd:
cf:5c:54:fd:de:58:ae:43:b7:c9:8c:d6:dc:21:d6:
db:8b:f4:f0:a2:92:8d:48:8f:e2:c3:6e:cf:29:6c:
91:60:0d:a1:70:1d:27:9a:a1:a2:62:a2:63:2f:3b:
5e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F5:D0:67:1B:05:3A:50:A4:92:9F:0B:A1:A7:F2:4D:DC:57:95:EA
X509v3 Authority Key Identifier:
keyid:FA:CA:12:40:9B:3C:26:C9:09:DC:FA:B2:F3:BE:1E:98:FC:E8:DA:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-soSQJs8JskJ3Pqy874emPzo2oA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:cd:67:d8:8f:0e:62:fe:3b:c5:66:ef:00:81:0d:ac:0b:d2:
af:af:cf:cd:30:f7:df:f7:21:90:0a:f1:a4:61:ce:12:c8:54:
fa:70:d1:70:66:e6:e7:04:c5:32:1c:7d:a6:dc:e8:ab:00:e8:
f2:c7:9f:80:1d:22:a1:a8:c9:2c:70:12:a2:4e:a5:5d:37:c0:
9f:cd:ae:93:68:e8:f1:a3:31:91:e9:31:7c:47:d0:37:40:99:
92:96:bf:47:a0:21:af:52:31:5f:54:99:b0:4f:07:52:f1:0f:
e8:92:b0:5a:65:91:ca:29:9e:3f:da:21:8c:7b:4c:42:4d:42:
51:49:26:a3:12:fd:88:c6:67:d1:8a:92:df:f7:7b:dd:68:d5:
f1:c9:27:d9:a2:01:53:b5:37:f3:fd:09:5f:c1:d0:e6:55:e0:
91:32:85:b7:b6:15:55:36:c4:cc:99:b2:e2:4d:fb:e6:fc:26:
9d:78:a2:26:ee:25:f2:ea:37:63:c6:75:65:af:10:a1:ca:d7:
07:48:8b:fc:a0:5d:ca:02:8c:28:88:6e:53:88:6f:47:21:07:
55:53:e8:66:83:04:30:b6:03:04:67:24:41:44:c3:79:a8:ac:
1c:15:db:94:1e:15:ce:11:88:aa:86:b3:7c:b4:e7:39:b9:e0:
8b:c6:23:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:06:42 2026 by rpki-client