
$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
File: s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft (raw, json)
Hash identifier: qqP/N2yVBvBE2H8uKLTzyJZEFkyy141bQWnZzRENs4A=
Subject key identifier: 98:61:43:B4:E2:E1:E2:CD:D0:94:64:48:39:1F:55:11:72:9D:B9:76
Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
Certificate issuer: /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Certificate serial: 387E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
Manifest number: 3704
Signing time: Tue 28 Jul 2026 14:25:33 +0000
Manifest this update: Tue 28 Jul 2026 14:25:33 +0000
Manifest next update: Tue 04 Aug 2026 14:25:33 +0000
Files and hashes: 1: s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl (hash: zqwAVyob5nOFyOGL1T53mowyt5K5F2ciX8/QGq4vCE0=)
2: B0EB27B470B811E9B32F6726C4F9AE02.roa (hash: z4MfCyr+jDttoP5VW5Vb0l643tPHIibVvGJ7ZyGfs8M=)
3: 71D60BC2F6BA11EB865C4246C4F9AE02.roa (hash: KFI2tWHfw3kppvCKmuDyoJI/TXZwNEgYE/dBKADg924=)
4: 305A13D6C9F211F0ABA27932C4F9AE02.roa (hash: NrPp83eADET8bdfQFh9hNsWD9EoYo/UsIxIfM+Xp3F8=)
5: 26A143C291EB11EF8A024083C4F9AE02.roa (hash: qOuOZrrZglkih59X/Pjz7efqStftFhfdFn50wlzJXt4=)
6: 160B219870BA11E99E0F6D2DC4F9AE02.roa (hash: 6MJI5nd76wUg6mIJiXKwgcaYmVbyO2X4VHI5tQqt2gM=)
7: B6704306C9F111F08975B813C4F9AE02.roa (hash: QnDSYmh9AS+vc7/gM3qgxQlZaNKWdqAp8+Ehbtb0lnc=)
8: 18F4FD76918111EC93DCA42AC4F9AE02.roa (hash: aZB+rnqYjRl4Uc+17dt2ByemLhQ+5bYKCdCl9y70GQM=)
9: 9AF37E96D71B11EA9532F30CC4F9AE02.roa (hash: 548W6O4jy2t4m978fP7/vkFNV7StaszXL5cUkqOrlsQ=)
10: B36EA83C70B111E98CFFF710C4F9AE02.roa (hash: 2nquH/Th3aV+FpaTguBv+jy8p2aXbOfhDSjXTwmNigg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl
rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14462 (0x387e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Validity
Not Before: Jul 28 14:25:33 2026 GMT
Not After : Aug 4 14:25:33 2026 GMT
Subject: CN=6a68bbdd-5afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:39:b3:2b:88:6b:64:d5:ca:46:20:40:1e:26:
ce:21:73:04:58:a3:34:2b:9d:04:1a:40:87:e5:19:
30:b6:60:69:58:b4:dc:a5:bf:9f:40:6c:92:12:32:
1a:f4:39:7f:b0:e7:8d:91:65:63:fe:27:f5:94:4b:
59:06:c7:38:87:e2:e4:e3:7d:ef:93:50:14:e4:26:
7c:ca:da:2c:0f:2f:2b:a4:cf:a8:9d:2d:0d:cf:49:
92:b5:02:64:38:72:35:13:99:c8:3e:a0:8f:72:0c:
74:25:7a:fa:5d:01:42:82:50:b4:1d:c4:15:4d:bd:
57:ec:74:f9:b9:2b:a7:5a:44:41:90:24:08:86:40:
60:31:0f:fc:ab:db:fa:a7:34:6c:a4:24:6d:55:6c:
07:c4:ce:b9:43:7e:8b:27:ef:58:cc:6b:91:f5:16:
d2:1f:60:9c:a2:6f:30:d0:bd:c9:c1:9c:c2:5c:47:
36:b6:e3:39:11:f1:75:7a:a5:00:da:d4:2c:6e:1b:
18:cc:6f:bd:f2:28:9d:ec:fa:8a:da:a3:dc:d1:14:
ec:76:50:53:16:a5:7b:f3:bb:5a:54:07:a5:07:2f:
06:75:76:fa:2e:cd:f1:4c:29:ca:dc:1a:0e:ef:6c:
88:15:11:f4:3f:46:90:27:37:0d:c3:e2:01:f8:9c:
a6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:61:43:B4:E2:E1:E2:CD:D0:94:64:48:39:1F:55:11:72:9D:B9:76
X509v3 Authority Key Identifier:
keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:65:ad:92:fa:3c:8b:2a:fc:99:86:4b:18:b8:23:f1:8b:55:
14:1a:fe:70:53:0d:b8:bb:70:4e:36:28:54:7c:1c:76:d6:f8:
e9:da:b1:03:06:fe:5c:09:72:80:91:84:ef:6c:6b:b6:2c:14:
08:f7:5d:5c:fb:0a:21:ef:a9:de:25:aa:f5:56:32:b8:1a:2c:
18:c1:f4:bc:0c:1e:01:7c:ee:bc:06:13:77:33:ff:d6:33:18:
b2:1d:64:b1:fe:e4:b2:ac:68:b5:11:48:b5:d4:4f:73:ec:ed:
f0:8c:44:cb:48:62:79:f9:17:4c:2c:81:6f:0a:b2:96:91:16:
05:43:66:30:1a:9a:4a:07:b6:8d:e4:e1:f4:0b:ed:cf:9c:47:
82:bd:1f:fe:60:61:09:ec:dc:42:d9:76:ae:c8:ee:90:05:da:
3a:59:a9:0c:c6:8e:72:68:d0:90:dc:dc:e5:2b:43:24:43:6e:
45:28:55:2b:71:5b:9e:39:31:47:fe:dd:5a:68:0a:df:a4:80:
16:1a:2b:77:c8:6c:00:f7:e9:0c:e5:13:da:32:01:0a:a5:41:
15:86:98:36:a1:ce:8b:1b:0f:3d:2b:ad:ce:b2:34:44:cf:44:
ce:7e:d7:5e:90:b5:79:73:48:4b:c7:19:c6:88:ad:d4:2c:05:
d3:f3:1d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:02:52 2026 by rpki-client