
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.mft
File: 5x-HDnK9Im57-jqrGpGKtGIybF8.mft (raw, json)
Hash identifier: 3bziUAk7en+uNZXM99qVfRllgf+86WtIYhJXpaZ5Jbg=
Subject key identifier: 79:FF:C7:04:49:B7:A1:72:B7:19:78:69:78:61:B1:92:16:71:CB:78
Authority key identifier: E7:1F:87:0E:72:BD:22:6E:7B:FA:3A:AB:1A:91:8A:B4:62:32:6C:5F
Certificate issuer: /CN=A91964B3/serialNumber=E71F870E72BD226E7BFA3AAB1A918AB462326C5F
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/5x-HDnK9Im57-jqrGpGKtGIybF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.mft
Manifest number: 5C
Signing time: Sun 20 Sep 2026 14:24:45 +0000
Manifest this update: Sun 20 Sep 2026 14:24:45 +0000
Manifest next update: Sun 27 Sep 2026 14:24:45 +0000
Files and hashes: 1: 5x-HDnK9Im57-jqrGpGKtGIybF8.crl (hash: JJnHiN5aps8tItBZ0OCrwcEKlT80e0JMUfuLRqC1K6E=)
2: 86ED876641FA11F1981D4479BF833773.roa (hash: wpEZ66kuoyr7SVEgrWcX1562rxR0piPy4GQLCmkL6TA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.crl
rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/5x-HDnK9Im57-jqrGpGKtGIybF8.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 14:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91964B3, serialNumber=E71F870E72BD226E7BFA3AAB1A918AB462326C5F
Validity
Not Before: Sep 20 14:24:45 2026 GMT
Not After : Sep 27 14:24:45 2026 GMT
Subject: CN=6aafecad-fb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:6c:fd:84:a9:ba:95:cb:b1:51:c0:16:d4:
02:0a:a0:40:6d:62:da:a9:1a:ea:9b:df:6f:c2:61:
92:6b:b4:6d:9e:a9:87:75:54:2d:b3:e2:fb:5d:08:
8f:70:1a:e1:53:a1:1b:2e:66:5f:1c:cc:a4:6e:60:
0c:f0:1e:21:68:9a:83:05:e0:c4:f2:38:51:a6:cb:
94:37:0f:2c:8b:74:ca:bd:55:5a:14:71:e9:98:7c:
62:7f:78:8f:ed:18:97:ae:96:4c:1e:8f:e6:60:2f:
14:18:5f:da:f3:8e:b9:b2:82:84:8a:9f:a6:c3:62:
5b:da:e0:fb:b3:94:23:fa:9c:a7:f6:6f:35:35:7c:
66:bf:d0:07:75:38:8c:9c:83:cc:40:23:5d:0e:7f:
ff:2f:75:30:d0:e2:31:91:14:05:34:01:4c:b8:17:
8b:4c:98:73:26:d6:0e:6c:05:37:72:32:30:b6:cb:
08:6f:a9:7f:02:39:9d:b7:e4:42:51:45:3a:c5:83:
22:62:0d:44:f5:45:a1:04:0c:95:57:ac:c7:67:f7:
91:d9:9d:fe:0f:06:aa:63:53:de:9e:c8:b9:34:82:
87:32:31:5e:6b:7d:4b:b0:f8:76:7c:fa:c6:f7:66:
34:cc:dc:ad:b1:01:8d:4a:ac:10:57:dc:53:bb:54:
1d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FF:C7:04:49:B7:A1:72:B7:19:78:69:78:61:B1:92:16:71:CB:78
X509v3 Authority Key Identifier:
keyid:E7:1F:87:0E:72:BD:22:6E:7B:FA:3A:AB:1A:91:8A:B4:62:32:6C:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/5x-HDnK9Im57-jqrGpGKtGIybF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:22:5b:10:92:24:8e:0e:9e:d1:40:c2:8e:e7:6f:97:08:2a:
31:8d:0b:0e:13:7a:fc:20:ed:5a:4b:b2:92:62:47:00:3d:f4:
d7:23:c5:37:b2:41:ef:ad:08:81:ef:88:7e:41:05:23:3d:29:
51:0a:e1:d7:9e:da:4f:ce:1c:97:17:48:25:87:ef:c1:73:26:
7c:b4:dd:9b:66:8f:0f:65:be:3e:e4:03:7b:b3:ae:b4:de:7c:
6a:d5:15:52:7e:8b:89:93:4e:7e:b8:59:e3:8f:7b:04:4f:d3:
c1:9f:64:e1:59:4d:80:20:6e:ee:31:70:de:bd:ef:b4:f8:46:
3e:dc:40:5a:c3:30:bc:4d:59:c8:23:7b:ef:86:f0:f3:55:c0:
5a:3c:68:ea:dc:0f:e4:23:09:7e:eb:bd:84:08:37:38:79:85:
a2:70:26:4a:3f:89:15:12:bd:5d:5a:a4:c6:da:15:96:e6:71:
18:ff:1d:58:eb:33:7a:7a:8f:12:3f:47:8c:de:dd:9b:6c:26:
16:92:55:8e:b4:d1:d9:7f:a3:b2:fa:ae:81:d6:71:ea:de:f4:
7f:d7:aa:d9:ca:4a:06:a4:cb:06:70:00:bf:23:c1:b1:16:15:
a4:ab:7a:a7:44:3e:3a:3a:10:a7:ce:87:9a:1d:21:14:f7:ef:
bb:e4:ec:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:46:52 2026 by rpki-client