
$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
File: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft (raw, json)
Hash identifier: wxq9vWDW1POkzn71MgmgzGp+yTandfCjYZouR249nOk=
Subject key identifier: 37:E1:7F:13:3C:EB:07:6D:8B:AD:0D:0C:FA:0E:ED:9E:DB:41:E0:48
Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
Certificate issuer: /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Certificate serial: 018D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
Manifest number: 0185
Signing time: Sat 13 Jun 2026 04:33:26 +0000
Manifest this update: Sat 13 Jun 2026 04:33:25 +0000
Manifest next update: Sat 20 Jun 2026 04:33:25 +0000
Files and hashes: 1: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl (hash: ESQTJHeMPuZiXZjKnH94b4uFV9tAIs+Vs5aGODRBwUY=)
2: 02BCE50286AF11EF9EFFD52FC4F9AE02.roa (hash: HA8Kw92LD3QGPRWQy9en3UrEthfqY+7JRHJQJs+dCaQ=)
3: 1FCE5CE0214F11EFAB245D49C4F9AE02.roa (hash: 1x0I+eVdWJfH3yy8/IHMHpk/2VtmPzxn2HvmLROgLBQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl
rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91698EC, serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Validity
Not Before: Jun 13 04:33:25 2026 GMT
Not After : Jun 20 04:33:25 2026 GMT
Subject: CN=6a2cdd96-7122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:94:54:80:4e:ed:4f:e7:23:e1:2d:89:9f:
61:92:9e:38:9d:ba:45:c4:57:8a:7d:ea:0c:4b:a8:
68:3c:cd:1a:44:4f:d4:4a:94:80:64:4b:a3:e3:8d:
f3:98:3d:67:6c:1e:6e:30:2c:65:d7:ee:16:e4:58:
a1:da:78:7b:d1:bc:28:ec:02:8f:8e:94:b6:1a:73:
48:db:62:f1:eb:6f:28:64:fe:0d:e5:e4:89:09:e1:
79:cf:7a:88:da:aa:db:45:c2:2f:88:96:1f:11:00:
06:b8:ae:90:6b:ba:51:7e:f3:b4:a3:04:e4:ef:93:
02:65:c0:d0:e8:40:54:0b:c4:7f:70:8e:3a:06:52:
9b:d0:e6:aa:77:5b:ae:31:ee:4e:5b:04:5c:33:47:
fe:81:e7:e6:4a:73:4c:3f:81:78:b2:39:83:32:02:
8a:2f:b2:8f:13:ac:42:73:f5:f1:64:7f:dc:f0:5e:
c5:56:73:b7:36:42:8b:4b:86:55:61:f1:19:d4:ea:
4b:a4:f2:c1:9b:6c:8a:b9:66:b2:46:39:0c:c0:44:
77:9f:67:3a:fe:9b:7b:0a:d9:b7:66:eb:a8:9b:82:
73:06:d8:d2:e6:1f:6a:2e:db:cf:6b:91:77:cc:fd:
0e:53:a4:fb:98:f4:40:ce:b4:dc:dd:09:ab:1f:bf:
82:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E1:7F:13:3C:EB:07:6D:8B:AD:0D:0C:FA:0E:ED:9E:DB:41:E0:48
X509v3 Authority Key Identifier:
keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:5b:98:7e:61:3e:13:98:aa:37:a8:6c:9b:d6:0c:f4:3f:49:
e6:87:7a:3f:03:95:2d:95:90:76:e4:01:1e:c3:ce:ca:1e:10:
9b:74:8b:05:16:22:2c:ba:f2:83:03:ad:45:5b:f4:81:63:70:
c6:88:09:09:fe:cc:bb:32:d3:9a:da:d6:18:ce:35:6e:17:98:
ab:91:ab:f8:7a:bd:87:67:29:34:32:6b:ce:ab:2a:f1:39:40:
40:bf:8c:6f:9c:8a:e0:db:ca:42:94:b6:1a:54:41:c4:43:4b:
fd:61:af:05:5d:ef:b6:b4:8f:9e:72:1d:c2:14:c2:ac:e2:1d:
52:79:83:1f:e3:39:27:f3:1e:ef:90:b0:48:91:f2:24:76:c7:
b8:97:26:29:bd:29:68:36:5c:40:3f:25:fa:97:fc:cd:e7:18:
2b:24:e3:3c:78:c2:b0:6d:63:df:36:f6:1f:75:9e:25:a2:94:
53:15:94:0e:70:8d:dc:34:20:3a:17:25:71:a1:aa:1b:22:43:
fd:f2:ef:eb:6e:8d:ee:42:39:5b:f4:79:33:52:56:bd:c1:5c:
d5:81:d5:b8:bf:22:78:93:7e:ef:a7:7b:a7:a2:12:22:7c:d9:
f3:86:7d:0f:0a:a8:66:df:8d:c7:4a:8a:58:2e:5c:3d:f6:67:
a3:c5:06:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:45:33 2026 by rpki-client