
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
File: 5KlM-o0vn1s570Y1BZHOMS5RT7M.mft (raw, json)
Hash identifier: Hz9W5oIf6Mll8SQkvWD/pi2W1+yfeq5bR9Cw+cwcfJI=
Subject key identifier: 72:80:00:5F:13:9E:71:84:99:59:73:EB:E7:46:D6:7E:62:F8:CE:69
Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3
Certificate issuer: /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
Certificate serial: 0369
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
Manifest number: 034D
Signing time: Mon 27 Jul 2026 02:13:48 +0000
Manifest this update: Mon 27 Jul 2026 02:13:47 +0000
Manifest next update: Mon 03 Aug 2026 02:13:47 +0000
Files and hashes: 1: 5KlM-o0vn1s570Y1BZHOMS5RT7M.crl (hash: WmF9sBECGxN8feAeXx5VgxLY3z43UpZhNCtNBvLtOKM=)
2: F3997FACE21D11EFA5819B7EC4F9AE02.roa (hash: SaiPWLAHUnkyojVdelS2uSfpAinLvbN01a3ry45lnng=)
3: 3D331986E17211EFA5959B2FC4F9AE02.roa (hash: GgxFX6325kuN6RICOxtS2gvb+gkFJTzGc8YA7E0IOc0=)
4: 5B69CE3A474A11EF8624EE6DC4F9AE02.roa (hash: BV3fAhzYpd4ungoocRUfiG5/5RWB1BiAarK17R/lLO0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl
rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 873 (0x369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3AB3, serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
Validity
Not Before: Jul 27 02:13:47 2026 GMT
Not After : Aug 3 02:13:47 2026 GMT
Subject: CN=6a66bedb-7131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:9a:78:1a:88:23:99:5d:ce:06:c2:ee:9f:
5a:43:92:7a:fe:1b:4c:41:ff:3e:16:fa:8a:a2:5f:
cc:7f:59:cf:5c:aa:82:33:e1:35:ba:78:e5:ba:13:
17:70:34:10:37:e3:35:d6:0e:d8:1f:28:a0:45:ce:
7d:d7:1a:bc:04:2a:ef:9b:b1:8c:52:0f:6c:ca:20:
1d:e1:47:7a:51:8c:b1:c7:da:61:67:13:b2:44:7a:
2f:c9:c4:c6:d4:f3:33:8f:9a:e8:37:86:59:9a:0c:
c1:f5:c9:c5:b7:d2:f9:8b:ed:74:a4:d1:0a:80:01:
ae:ab:15:e7:62:64:0f:2e:05:d8:f9:41:06:d4:34:
eb:1e:74:09:63:6c:48:6a:45:6f:5e:dd:c4:80:f5:
c7:d7:d2:15:54:67:17:37:71:a1:2a:e6:fd:9d:64:
cb:4a:30:6c:ef:00:a6:33:1c:81:b3:04:2e:1b:30:
e5:e5:0f:9a:f9:c4:be:55:00:47:a8:84:cd:70:cb:
51:7e:6b:f4:d8:39:19:06:03:24:61:49:3d:d3:40:
df:38:ac:7e:35:bb:aa:db:07:df:48:75:2c:e1:9a:
ea:9a:3d:6e:a3:07:3b:10:95:25:2d:e9:12:e7:18:
af:bf:7e:b4:4f:f3:ce:14:4c:88:1d:90:77:fd:41:
0a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:80:00:5F:13:9E:71:84:99:59:73:EB:E7:46:D6:7E:62:F8:CE:69
X509v3 Authority Key Identifier:
keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:88:e3:e3:e5:d1:06:de:b5:95:f7:dd:2f:4e:fc:12:07:81:
30:82:ef:4d:4d:91:37:38:25:37:22:6b:1b:23:5e:8e:70:2f:
49:5f:cc:4e:a9:1f:ee:63:60:46:59:58:62:7f:d8:0f:d2:4b:
23:f0:9e:1a:ee:30:2f:b3:68:83:38:e9:fe:00:ab:b5:27:0e:
6d:29:60:fd:6b:4d:9c:ed:41:8d:d5:61:70:58:e6:f1:80:10:
d8:60:11:e0:5a:a8:b6:31:68:d1:2e:66:a3:29:7e:d6:1c:7f:
14:2e:5f:e3:16:8b:6e:0d:12:cc:57:42:f3:b5:16:6f:23:5f:
73:42:f8:2b:31:aa:4a:c0:d5:79:66:e6:b0:85:a5:ce:da:f7:
cf:b4:89:77:df:58:72:1e:d3:ef:99:c4:76:ea:fc:a8:61:9e:
2e:cc:68:84:c7:57:e9:36:e0:d7:c1:fe:94:94:6c:2a:66:25:
90:fb:87:5b:5d:88:1c:b4:ca:c5:50:c4:58:b2:fc:73:92:f6:
55:72:8b:ad:6c:10:32:12:b9:88:cd:d8:37:4d:f4:f6:f8:e0:
97:26:7c:3a:41:79:1d:2f:d5:03:34:62:af:6a:c3:3e:63:90:
b0:56:1e:96:c8:8d:1f:19:37:11:06:f2:44:34:a4:a7:52:91:
88:ba:8b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:32 2026 by rpki-client