
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
File: 5KlM-o0vn1s570Y1BZHOMS5RT7M.mft (raw, json)
Hash identifier: wRRNxZWeFi3z+H6b3l9h1gQI8qmIYmOLZpfGX4g9gdg=
Subject key identifier: 53:23:18:43:4D:AA:12:47:5A:19:A8:FA:46:06:7A:C9:4C:5F:99:68
Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3
Certificate issuer: /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
Certificate serial: 0331
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
Manifest number: 0318
Signing time: Fri 17 Apr 2026 01:09:37 +0000
Manifest this update: Fri 17 Apr 2026 01:09:37 +0000
Manifest next update: Fri 24 Apr 2026 01:09:37 +0000
Files and hashes: 1: 5KlM-o0vn1s570Y1BZHOMS5RT7M.crl (hash: fmQ/yFqJmpFh8gsrqS/gfT1pMyv4DyHkbSpg2XWKoI0=)
2: F3997FACE21D11EFA5819B7EC4F9AE02.roa (hash: u+ZBN57vIi/zKLX25fP2Ihd1dJ5sMPLruwdZtn9hxms=)
3: 5B69CE3A474A11EF8624EE6DC4F9AE02.roa (hash: V4WCKZt7Bk1mQsPfTsZBXrVnrbvkth09Cs8cneRogjA=)
4: 3D331986E17211EFA5959B2FC4F9AE02.roa (hash: HWbA9pcNRQ2T+MNcxggr7hprcPhBvL1c1z3ltsFnoBs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl
rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:09:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 817 (0x331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3AB3, serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
Validity
Not Before: Apr 17 01:09:37 2026 GMT
Not After : Apr 24 01:09:37 2026 GMT
Subject: CN=69e18851-3c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:6a:12:c0:28:a2:67:6c:29:b3:35:aa:a8:
71:d2:28:f6:55:2b:0a:8d:09:39:70:2b:89:79:0b:
c2:d9:a6:b4:6a:2a:cd:71:54:c2:5e:87:c0:3d:5c:
4e:98:b2:cc:c9:71:8f:45:b3:a1:5c:f7:f2:07:ce:
14:72:1b:54:a6:56:99:78:46:8e:d1:c1:df:e6:da:
c3:0f:4c:e5:7d:b4:0c:a8:de:0c:a5:97:4f:ff:df:
45:b0:90:8c:a3:3d:21:32:27:5c:f6:1f:cb:ab:41:
a1:c3:57:11:e9:e2:e1:4c:35:5d:af:b1:9f:bd:81:
5f:80:f1:c5:2b:1f:68:89:3d:83:ab:5d:ae:07:3a:
47:99:66:70:1c:d1:6e:a6:38:b7:02:05:e6:f4:09:
a9:3a:e7:e3:a9:42:47:ed:6f:d3:8e:17:75:41:56:
a0:23:72:25:14:71:8a:d6:1c:1a:c4:5b:4e:5c:a5:
b6:af:b8:ce:f1:aa:eb:cc:e1:30:9a:75:9a:d6:37:
84:63:c2:7b:cc:59:aa:fa:92:00:df:2a:7c:19:af:
b1:d3:a9:20:c2:b5:27:35:21:41:0d:eb:18:8d:f5:
ec:f5:a4:e9:ed:52:6c:97:9d:87:10:16:e8:af:98:
f5:03:2c:a5:d2:32:86:ee:f0:f0:20:65:b5:9a:a4:
e6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:23:18:43:4D:AA:12:47:5A:19:A8:FA:46:06:7A:C9:4C:5F:99:68
X509v3 Authority Key Identifier:
keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:df:60:96:78:80:ed:da:5c:57:82:7d:89:6c:dd:3f:4c:1a:
37:45:7c:0a:17:61:24:ff:45:96:a9:7e:fc:e3:d6:53:66:93:
bd:40:40:03:a3:ec:a4:9d:67:43:ba:f9:d3:b8:19:7c:6f:c2:
07:bd:bd:fa:59:ec:c2:b4:1b:26:c3:34:02:41:41:81:9a:fa:
40:26:c1:52:26:b5:11:9c:dd:28:6a:5c:fe:03:c5:f3:87:86:
42:20:32:33:6b:a6:35:e4:7c:8f:12:75:63:b3:2f:47:59:37:
15:73:49:97:63:15:49:5d:f3:42:39:ce:09:80:5f:c9:98:dc:
d9:a4:39:34:01:9a:0b:0d:66:74:a5:3a:7c:0d:27:0c:4c:c6:
23:db:24:72:87:88:2e:b3:15:73:8a:bd:63:ea:10:50:88:8b:
b2:fe:cc:42:08:dc:ff:05:a1:0f:cf:05:e9:4a:15:56:0a:58:
df:e5:a7:c8:28:85:33:d5:c6:96:94:77:02:9a:89:f6:d4:7f:
d1:fc:70:35:fa:06:5e:3b:63:34:e9:ad:d0:a1:01:97:90:62:
f0:03:93:b4:7d:cc:4d:35:7f:07:73:2e:6c:e0:51:f3:cf:54:
72:f2:2e:cb:f0:64:fd:f7:72:67:e6:f0:bb:22:94:cc:ef:6d:
12:ca:86:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:15:37 2026 by rpki-client