
$ rpki-client -vvf rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft
File: 5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft (raw, json)
Hash identifier: lY4Ap5rCM3P9z2Z3cmqXTQhD5QwqWH5Ymk/EaM8FOsc=
Subject key identifier: 1A:82:A4:3E:31:B8:32:F0:7E:0D:FC:2C:4A:CB:64:33:96:5D:09:FA
Authority key identifier: E5:72:61:FF:C8:10:71:40:79:34:B6:50:4A:22:BB:A3:C1:50:E1:73
Certificate issuer: /CN=A91509B3/serialNumber=E57261FFC81071407934B6504A22BBA3C150E173
Certificate serial: A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft
Manifest number: 9F
Signing time: Sat 13 Jun 2026 07:29:02 +0000
Manifest this update: Sat 13 Jun 2026 07:29:01 +0000
Manifest next update: Sat 20 Jun 2026 07:29:01 +0000
Files and hashes: 1: 5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl (hash: 51pYg/5M4TBs931fuPnfa4I6JPTGnfDPXbwSgXyp2dM=)
2: FD5873EC83BA11F089D8E166C4F9AE02.roa (hash: pgcMYTWRFf4gkxcC+wpc0bSO3rwahz7ouBwd4bk4x64=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl
rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91509B3, serialNumber=E57261FFC81071407934B6504A22BBA3C150E173
Validity
Not Before: Jun 13 07:29:01 2026 GMT
Not After : Jun 20 07:29:01 2026 GMT
Subject: CN=6a2d06be-65ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:91:ac:e5:a8:a3:94:d8:03:17:43:d5:7a:8a:
4d:44:fd:bd:19:59:7c:74:18:5e:1e:f5:62:25:19:
d2:0c:c9:ab:26:ac:a1:2c:75:44:2a:e3:fe:b0:24:
49:96:f6:dd:e0:ad:d1:fc:9e:36:bf:78:6d:aa:38:
38:b8:33:03:5c:04:14:aa:39:6b:cb:a8:58:01:30:
7f:5c:92:d5:34:f4:d5:fa:b7:63:89:54:eb:dc:ab:
98:c8:e3:f9:cf:f1:84:e5:c8:3b:c4:d2:28:f5:09:
6e:ec:6a:19:0b:83:52:59:51:69:4b:ad:06:75:1e:
87:26:70:23:1e:22:fc:6f:6c:63:ec:8d:89:0e:cb:
85:07:7c:68:98:f8:87:80:15:03:02:0b:54:8a:56:
b4:35:b6:77:fa:4b:82:49:97:90:7e:c9:49:1d:94:
e7:20:99:ac:47:fe:df:e9:98:d4:be:70:d8:09:17:
9f:8b:de:17:18:43:63:35:bf:79:59:a5:3e:79:aa:
78:fa:95:f9:19:dc:aa:6d:d8:04:8d:c7:89:59:58:
a3:77:62:1b:79:a3:3c:fd:38:bc:b9:e7:b5:8a:f8:
50:7b:ae:57:12:e0:be:d2:fb:27:6f:5a:a5:2a:64:
6f:f2:ac:00:b0:e1:88:ec:f4:1c:a9:2e:dc:1b:3f:
e9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:82:A4:3E:31:B8:32:F0:7E:0D:FC:2C:4A:CB:64:33:96:5D:09:FA
X509v3 Authority Key Identifier:
keyid:E5:72:61:FF:C8:10:71:40:79:34:B6:50:4A:22:BB:A3:C1:50:E1:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:71:6c:42:b5:f5:29:ae:87:0d:5a:b3:cf:17:71:67:67:d4:
30:3c:c9:07:93:99:e9:53:fc:fa:0a:cf:8d:90:50:ba:c2:69:
f4:0d:e6:0c:fe:5f:de:98:5c:d4:57:f8:ca:ff:1d:29:ec:a9:
2d:c8:ea:d6:8e:a1:3f:63:5b:e4:ec:96:a4:76:b7:9f:bf:6f:
25:11:bf:6c:a0:52:15:cd:52:8c:68:07:aa:f5:2e:28:d7:f2:
60:be:df:b3:d4:c8:8a:89:5b:b5:e2:f4:12:b3:fd:a0:37:3e:
8c:08:f3:c1:5f:52:c3:ba:51:7e:7a:95:d7:c3:7e:98:03:6c:
69:4b:55:08:e2:54:ef:ca:20:cd:e6:9d:4f:c3:d9:42:46:d0:
6b:e8:03:d9:4d:da:23:de:42:63:bf:5f:a9:8a:ae:a0:80:79:
c4:09:6c:14:8f:6b:9b:8c:97:c9:35:43:dc:6e:06:2d:06:92:
9f:4f:8c:53:4f:db:f9:6b:93:88:2d:ab:79:88:1b:49:05:de:
40:45:ed:10:94:ec:d7:fc:0a:1c:c2:bd:98:a8:55:1b:b9:7e:
c8:3b:79:e6:08:b0:74:ac:1e:55:8e:30:96:c9:8b:b8:db:b4:
ed:30:1b:90:3b:32:03:04:e1:55:88:02:b8:e9:af:83:93:6c:
d1:67:34:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:08:05 2026 by rpki-client