
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft
File: 5Otd-leSQpC7j-xFuZd_xsf2-jc.mft (raw, json)
Hash identifier: Ru4hJQHwYFCC7bARNCHseqe/4/MB+CcxLAtiaRiLXf0=
Subject key identifier: A7:12:B3:81:FD:F0:05:24:EA:61:DD:A8:39:3B:16:95:F4:EA:0F:B9
Authority key identifier: E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37
Certificate issuer: /CN=A91A8B0B/serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37
Certificate serial: 0D5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft
Manifest number: 0D42
Signing time: Fri 12 Jun 2026 18:02:31 +0000
Manifest this update: Fri 12 Jun 2026 18:02:30 +0000
Manifest next update: Fri 19 Jun 2026 18:02:30 +0000
Files and hashes: 1: 5Otd-leSQpC7j-xFuZd_xsf2-jc.crl (hash: CW/pgFqb8vX9Ue5i8/cL1V7JUJwIoWWcsciCu11Xhd0=)
2: 5842DDF0FCE511E9BFA4B27AC4F9AE02.roa (hash: tiznFO31M77tVMAqZuT5RhZyjOfXG4VtSqcUKQ0h8mI=)
3: EA17F65E6C6711ECB7C0925AC4F9AE02.roa (hash: JBITMoocNfEn/DC51LyDttOjzmGPPbU/nUR+4OvjGYI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl
rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3418 (0xd5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8B0B, serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37
Validity
Not Before: Jun 12 18:02:30 2026 GMT
Not After : Jun 19 18:02:30 2026 GMT
Subject: CN=6a2c49b7-55ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2b:a8:59:93:de:e1:b2:f8:fb:43:fb:2e:b7:
e4:ca:04:9c:b4:ee:2e:08:84:e6:42:e6:4a:25:a5:
c8:1b:3d:49:10:e3:b5:42:48:80:8e:a8:14:8c:03:
80:8b:2f:90:ff:7d:be:c3:6f:fb:c5:99:4e:dc:f7:
28:cc:fe:3c:2b:13:ec:bc:36:45:4c:52:87:a3:f6:
d0:a6:28:2f:1f:74:7f:6a:3c:21:1c:06:63:f7:e0:
25:a5:69:c8:b4:71:2f:7c:a7:f1:e0:7f:2d:be:b9:
e2:80:c4:57:d6:02:62:a4:4d:63:e2:8e:1a:73:ec:
a6:a3:16:6f:2f:b3:24:5f:e9:59:bc:36:7e:2b:73:
f3:ad:3f:e7:66:c8:8c:b5:94:ee:6a:e7:2e:c4:a3:
37:2a:c3:b0:ff:f0:19:d7:ca:7e:2a:5f:73:da:79:
91:60:58:b2:8b:49:2e:3b:38:14:e2:c2:d0:ce:3e:
43:94:08:9f:36:15:7f:b0:72:11:6c:e2:1b:07:04:
18:8a:27:53:bf:43:7b:8c:09:a3:fa:17:a0:d7:b9:
fe:5f:8c:7a:3e:3a:3e:f7:45:74:73:d5:06:20:20:
30:85:fd:c2:36:85:07:16:6f:c5:8f:49:7c:63:fd:
8d:28:5b:7c:a7:2c:d9:bb:80:4a:d7:d5:c5:c7:80:
f3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:12:B3:81:FD:F0:05:24:EA:61:DD:A8:39:3B:16:95:F4:EA:0F:B9
X509v3 Authority Key Identifier:
keyid:E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:ec:2c:92:bf:3b:81:53:80:98:79:6b:ed:44:e8:83:5c:0a:
36:9a:77:05:9d:cc:5e:97:ce:27:0c:ab:16:5b:c3:e1:3e:f8:
1d:c9:45:df:74:53:da:18:0a:7c:84:fa:04:fb:4a:16:b0:3f:
6c:75:e0:9c:a2:7c:e0:78:9f:eb:21:b6:9d:15:35:4c:4d:68:
71:fd:2b:73:42:fb:01:5f:d1:ce:f8:d2:a2:7e:b7:8f:ce:b7:
f1:d6:4b:bc:d5:c5:87:e7:69:a9:f6:fc:d9:c7:4d:ff:8f:48:
93:87:7c:ec:d1:7d:63:46:99:4c:54:d7:09:6b:e9:c8:85:99:
00:d4:39:43:dc:5b:6e:62:f6:b2:da:66:b5:b7:aa:e9:ee:6a:
20:27:ac:b0:55:ef:bf:f1:50:38:5d:74:ee:4d:a7:55:42:41:
e7:07:5e:e1:96:5f:46:35:cd:35:1f:5a:f9:8b:2f:5f:06:4a:
fb:a9:9f:d0:d1:c4:42:e1:5f:5a:1c:94:6d:68:fc:34:65:eb:
04:e3:35:26:82:7c:3f:9d:73:47:9e:08:5a:7d:95:dd:65:bd:
e8:01:d0:ea:6b:dc:b6:b5:e2:89:0d:fb:a5:99:6f:e4:0b:27:
ad:60:56:c6:fa:36:a0:8f:3f:6d:ec:71:19:ab:14:c4:96:02:
96:fa:ad:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:04:06 2026 by rpki-client