
$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
File: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft (raw, json)
Hash identifier: 0t/b2CP9TTwF3LRP9t147F2wpmIy3XudCTiQ217lgKY=
Subject key identifier: 51:CC:FF:B2:78:CE:19:1A:D9:3C:5B:70:D4:35:8D:E8:AD:57:FF:C4
Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
Certificate issuer: /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Certificate serial: 0171
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
Manifest number: 0169
Signing time: Fri 17 Apr 2026 04:35:31 +0000
Manifest this update: Fri 17 Apr 2026 04:35:30 +0000
Manifest next update: Fri 24 Apr 2026 04:35:30 +0000
Files and hashes: 1: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl (hash: dtUXxB7bI3TBYH9ibpqH6fC1ZB7ryit7dMOZj/nIzfI=)
2: 02BCE50286AF11EF9EFFD52FC4F9AE02.roa (hash: HA8Kw92LD3QGPRWQy9en3UrEthfqY+7JRHJQJs+dCaQ=)
3: 1FCE5CE0214F11EFAB245D49C4F9AE02.roa (hash: 1x0I+eVdWJfH3yy8/IHMHpk/2VtmPzxn2HvmLROgLBQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl
rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:35:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91698EC, serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Validity
Not Before: Apr 17 04:35:30 2026 GMT
Not After : Apr 24 04:35:30 2026 GMT
Subject: CN=69e1b893-62a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:76:81:b4:7f:bf:24:cb:74:a6:4b:39:15:c3:
39:d0:01:0f:5a:85:dc:80:10:83:8b:80:38:0a:07:
4a:be:03:68:b6:ea:57:ca:4f:de:16:f3:80:8f:c6:
67:1a:70:bb:e5:83:2a:c1:32:8a:22:af:80:bf:20:
f7:c8:d1:6c:2b:24:2f:f5:ab:4c:19:31:5b:7a:ad:
42:1f:44:5a:c5:a6:50:d0:58:de:9f:e1:63:70:ba:
e3:5c:bb:b2:7a:c6:ce:6e:7b:ff:9a:c3:3f:0c:b9:
c4:27:d4:89:3c:2c:d2:83:76:9b:f5:09:bb:c0:50:
4b:c2:eb:b4:e5:17:13:27:6f:59:6c:a3:56:a0:ae:
db:04:a9:77:fc:1c:94:9f:83:fb:37:43:df:9e:aa:
d3:f1:fe:f9:1b:39:67:59:bb:f6:b7:d4:64:f7:94:
dd:e4:50:9a:28:40:7d:58:11:4e:83:0b:29:c7:5a:
ef:3c:f3:ee:86:93:d0:39:ec:13:ac:f0:b6:c7:f3:
c4:9a:d2:3a:c2:0a:6b:98:15:94:bb:b6:c9:a2:f7:
16:9d:71:6d:c8:9b:f9:76:06:88:8a:ed:8a:df:39:
27:20:e7:37:2b:e3:cf:94:22:69:a0:9f:8a:0e:49:
ea:2e:e7:ae:90:58:da:8b:dc:00:e9:77:e7:68:ac:
64:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CC:FF:B2:78:CE:19:1A:D9:3C:5B:70:D4:35:8D:E8:AD:57:FF:C4
X509v3 Authority Key Identifier:
keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2a:51:15:04:94:84:10:d9:d1:2f:27:e5:c7:3b:6f:39:3c:
a8:ef:b5:53:f3:7c:32:64:b0:38:72:0c:5b:65:a3:49:cb:69:
b6:86:0c:dd:5b:16:5d:22:1a:07:64:d8:d2:30:02:5b:2b:ae:
05:85:37:27:ab:ef:e0:93:86:e8:a6:c3:72:6e:42:e3:84:c8:
cb:ba:6d:4d:a2:99:bd:dd:72:38:fb:48:16:98:8d:b7:d2:a1:
5a:60:ed:cd:23:9f:6e:67:03:31:82:38:ea:08:49:4c:c7:72:
67:08:2c:fa:75:8f:51:d6:ec:40:3d:65:61:08:93:12:e5:c4:
66:6b:a3:d5:a1:b2:0c:5a:e8:8e:53:c9:88:b5:ea:3b:7a:a5:
c8:47:22:86:6c:c2:4c:0e:6d:63:32:7e:1f:39:11:29:5e:2d:
28:3d:be:77:c2:fc:bf:c3:fd:a7:54:9a:a6:e7:ab:84:54:67:
46:9c:ba:80:c6:bd:26:4a:02:59:a6:e8:84:02:d6:71:53:43:
c0:09:c8:4b:9f:b8:fe:11:b9:71:76:f5:d6:81:ac:65:d1:bb:
15:c2:c2:32:58:63:c6:e3:ea:19:6b:e0:ae:b3:b0:af:80:1a:
30:b7:9e:84:41:9e:74:f3:db:17:e4:95:5a:f8:3f:87:be:3c:
11:7a:c0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:58:34 2026 by rpki-client