
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
File: 5VbchrlOkc-bLilEqF9xaS2glNI.mft (raw, json)
Hash identifier: b8Gh2asIfV0gbEsgHmVX5GtmaHZivepsD8QvHJ3ZX+w=
Subject key identifier: 38:18:9C:B1:D4:DC:EF:34:90:61:92:BC:21:10:D3:80:25:9C:5A:3E
Authority key identifier: E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2
Certificate issuer: /CN=A919B20D/serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2
Certificate serial: 01FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
Manifest number: 01F4
Signing time: Mon 27 Jul 2026 04:57:57 +0000
Manifest this update: Mon 27 Jul 2026 04:57:56 +0000
Manifest next update: Mon 03 Aug 2026 04:57:56 +0000
Files and hashes: 1: 5VbchrlOkc-bLilEqF9xaS2glNI.crl (hash: eVV5uV+na/X4WI3BfG4e2mppP43IOMmOxas/I62Qgc4=)
2: 4B3E4A0693DE11EE81D1045FC4F9AE02.roa (hash: JqhFhmjTQ7lTEerY4ZxrMkv0NK26Qh/GjDI/YArXFV4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl
rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:57:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507 (0x1fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B20D, serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2
Validity
Not Before: Jul 27 04:57:56 2026 GMT
Not After : Aug 3 04:57:56 2026 GMT
Subject: CN=6a66e555-dd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6e:a9:20:30:af:90:f1:d7:0f:0c:98:c4:86:
8f:8f:d9:6d:db:70:7d:8c:b0:9f:34:92:b7:c4:ad:
75:1b:6f:60:ac:14:ad:cd:cf:b6:bd:b4:af:dc:94:
21:af:96:10:a4:40:92:86:ac:b9:e8:7f:84:36:84:
26:dd:8b:5a:f7:b3:0f:11:53:37:8b:19:b3:91:91:
09:3b:0c:cb:07:a1:15:1f:67:73:ed:32:85:aa:f0:
62:b5:8c:c2:07:01:58:c9:cf:02:e4:59:f6:da:de:
3b:e0:08:66:14:aa:38:c5:89:d3:8b:9c:70:cc:0a:
70:6d:8d:da:c5:1f:10:e9:d3:dc:5c:dd:d6:09:85:
7a:45:cf:c4:04:67:ea:87:28:81:b8:21:c7:86:15:
ef:d1:eb:e0:f0:47:80:2f:58:a7:dc:1c:03:e0:e5:
40:6d:81:fe:84:03:76:2a:b4:f4:d8:e4:55:82:58:
17:71:0f:77:a4:e3:f0:f1:8e:87:a9:b1:ea:04:2b:
a0:47:c5:dc:d0:2d:e9:87:b4:e2:a2:6a:ae:bc:2e:
32:34:ae:99:9d:20:2c:7d:ec:7f:17:cb:5e:4a:51:
23:9c:95:b1:03:18:49:e8:e5:c3:da:b6:2f:ca:fe:
bb:00:ec:74:3c:93:59:48:7a:53:b4:14:c0:66:07:
24:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:18:9C:B1:D4:DC:EF:34:90:61:92:BC:21:10:D3:80:25:9C:5A:3E
X509v3 Authority Key Identifier:
keyid:E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:10:fe:75:ca:16:fd:c5:a3:93:90:d2:f3:2f:ae:d9:20:e6:
76:af:a8:28:19:da:90:f0:f5:c0:91:ed:eb:57:32:85:19:d9:
1a:fc:a0:cf:dd:ac:67:77:23:45:0c:c2:f9:5d:de:70:c1:c0:
12:15:4d:51:0a:fd:0b:b2:c6:fc:09:9e:6c:60:21:f1:4b:95:
ec:15:67:29:57:69:ca:4f:38:ea:fa:b7:9d:8d:d8:08:6a:42:
72:f1:71:9d:e1:2c:34:20:1a:55:5b:f0:d8:c8:35:65:42:51:
96:ee:bf:54:57:3f:8d:25:73:82:13:f6:81:3e:53:99:28:68:
80:90:90:2f:69:1c:e7:35:c4:b3:09:bb:70:cd:4a:ec:77:78:
c1:26:c7:9e:ac:39:9d:97:e9:00:b6:e5:22:aa:cd:32:be:e3:
48:75:08:a6:df:3f:96:94:45:8d:a4:a8:82:83:5b:d4:01:93:
62:f6:58:54:92:2e:3f:31:b7:bf:88:90:60:dc:e5:32:f4:36:
7a:50:96:cf:9b:8d:b9:3c:e9:f4:b3:27:0c:44:4d:de:2a:f7:
7e:75:d9:0d:9b:6c:55:66:f0:e9:b6:08:2c:61:06:d2:76:f5:
67:e5:0f:26:da:c1:bc:f4:32:be:c4:a3:45:ac:34:b5:3b:20:
61:7e:19:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:39:56 2026 by rpki-client