
$ rpki-client -vvf rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
File: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft (raw, json)
Hash identifier: aLm0E+KwGNtzACSMv6fyLab6PwIfXwLyMr4zEKPwmos=
Subject key identifier: A5:47:F3:77:B2:53:5C:C4:6A:03:0A:79:BE:83:71:D4:A0:2E:F1:D6
Authority key identifier: 0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14
Certificate issuer: /CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
Certificate serial: 0142
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
Manifest number: 013E
Signing time: Mon 27 Jul 2026 07:18:51 +0000
Manifest this update: Mon 27 Jul 2026 07:18:51 +0000
Manifest next update: Mon 03 Aug 2026 07:18:51 +0000
Files and hashes: 1: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl (hash: 05vx03DCeVa9k7PRd38ot/OcAK7ENuDjFBi50jt0Tvk=)
2: D1E78BC0A15D11EFBAE3332CC4F9AE02.roa (hash: hdQpo+xnXuDoOPe/5r+BnsM8aeG+LI4VCVPfcf0L3eI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl
rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:18:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91637FD, serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
Validity
Not Before: Jul 27 07:18:51 2026 GMT
Not After : Aug 3 07:18:51 2026 GMT
Subject: CN=6a67065b-cdfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fd:6b:1a:d9:4d:25:8c:a7:5a:5a:48:e5:12:
cc:c1:d7:65:9d:28:f2:9e:e1:2e:8e:94:7d:3a:6b:
47:31:f2:6e:06:1a:8f:d0:ba:08:99:72:0a:88:35:
85:3a:da:f9:13:41:7c:55:a6:48:f9:94:9e:8c:bd:
7e:a3:66:a2:80:09:ec:51:90:34:58:ae:af:e8:81:
ef:79:1b:37:a1:81:33:46:57:72:78:63:7b:1e:c1:
67:fc:0d:85:fa:7f:71:ea:9f:d8:5e:39:83:ee:e8:
43:99:a0:29:3c:c4:fc:fd:bc:28:8b:50:4a:b0:78:
d7:d5:eb:3c:38:01:f7:c1:12:ec:33:02:26:16:89:
42:4d:91:e4:b0:7d:81:97:41:e7:63:a2:a3:d8:92:
60:23:bc:7e:02:5d:79:9c:62:7a:50:a6:47:c7:21:
70:32:8d:0f:0e:e0:19:cf:68:a8:28:7c:17:f5:94:
46:4d:3e:e2:26:c1:ed:b1:b0:22:ec:f8:f9:b6:1d:
73:db:90:4f:eb:8f:91:31:b2:8e:b1:ec:04:62:61:
2c:2c:c8:38:4f:fb:0c:a7:c0:1b:3d:fe:3b:d0:7b:
35:86:12:da:a9:09:c7:e9:28:22:67:46:56:b9:5e:
d4:8c:3e:3d:b1:17:fe:eb:cb:2b:e4:63:8c:f1:6e:
0b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:47:F3:77:B2:53:5C:C4:6A:03:0A:79:BE:83:71:D4:A0:2E:F1:D6
X509v3 Authority Key Identifier:
keyid:0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:ec:d8:19:97:da:85:e1:8c:6b:da:63:52:f6:aa:2e:17:62:
21:43:ff:f9:f2:e8:04:a9:65:f3:8b:2a:a7:3d:dd:46:65:b6:
2d:b9:34:a8:26:d9:4e:12:ea:4c:28:ac:c8:44:53:dd:3e:2c:
27:f7:b5:0e:3c:c7:f4:2d:05:8e:52:73:16:2a:f8:ca:f3:43:
d8:ab:b4:e4:4b:1e:3d:3f:d2:11:51:eb:06:17:d1:2c:47:6a:
fc:49:c7:28:26:24:69:90:e8:40:44:1a:03:16:16:82:95:c6:
6d:45:cc:2d:60:71:cb:fa:46:98:54:df:43:ca:2c:72:2c:46:
9b:27:c5:c1:f0:34:21:7a:f5:96:e8:3e:58:10:b5:87:5c:2f:
6b:e3:dd:32:89:27:98:0f:66:f4:51:62:46:45:03:e1:84:e0:
e9:3a:6d:e5:cc:08:61:e7:e4:38:e1:41:1c:a6:0e:79:12:6b:
90:82:91:5e:d5:79:5b:08:00:4e:cc:13:ee:ea:b8:c0:a2:9b:
35:0c:0f:80:a7:9e:7d:e2:aa:71:90:4e:da:f3:2b:12:48:b6:
cb:ca:94:b9:48:c4:78:16:57:2c:7a:89:ba:27:7d:55:a1:53:
09:ca:7a:f5:bc:37:a5:b7:f0:44:b5:92:3d:87:74:9e:1a:d5:
62:7b:fc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:55:43 2026 by rpki-client