
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
File: 5esYDNbcUWxm01KwR7npxaUCcOM.mft (raw, json)
Hash identifier: 2/Ta8fFh9w2bFLa2xvFpOF4nWX5WWUieVeuq4Yoq9JM=
Subject key identifier: CE:C0:D5:2F:B3:16:3E:50:87:50:D8:63:5E:3F:7C:9E:E8:28:1F:EE
Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3
Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
Certificate serial: 0978
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
Manifest number: 094D
Signing time: Thu 16 Apr 2026 20:02:39 +0000
Manifest this update: Thu 16 Apr 2026 20:02:38 +0000
Manifest next update: Thu 23 Apr 2026 20:02:38 +0000
Files and hashes: 1: 5esYDNbcUWxm01KwR7npxaUCcOM.crl (hash: yVK4MiLRxExM9Wi014A4PXZcFSUJs1ndqoW0TbNU2s4=)
2: 6AE50E1C21E011EBBF36CD21C4F9AE02.roa (hash: lMhUzM6SrZqnaSb3sq+PG5FZ88KlD5XwOD16PSgtpr8=)
3: 36945EC2232711EBA0F14F17C4F9AE02.roa (hash: lOAwTW5XkFCPCUk/gWDqiJqpMlb51sjQCmzCQhzil4Q=)
4: E22ECDEAC4F811EAB8D31113C4F9AE02.roa (hash: 32WeveE7dnAV5izIj802rGBUdP9CIosFzoeZQ6CO6QU=)
5: F1A54AC47A5611EB876D281FC4F9AE02.roa (hash: k0ZucBj+etuvwgMyyarMxzRHSJzy5ua857nN2Fqt8Kw=)
6: E2E21364C4F811EAB8D31113C4F9AE02.roa (hash: 9iL3rgMf4vh9lsgcWbb8FKQC+wyReC1nKI6xvJ+GiO0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl
rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2424 (0x978)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
Validity
Not Before: Apr 16 20:02:38 2026 GMT
Not After : Apr 23 20:02:38 2026 GMT
Subject: CN=69e1405f-cfed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1b:09:36:e7:c4:f2:f9:b4:7a:fb:5b:41:f9:
4b:fb:6a:eb:a7:0b:68:5e:8f:6e:c2:99:3f:72:84:
41:1c:82:04:ce:bc:c1:a3:3c:29:e8:48:b1:45:7b:
30:b1:0a:eb:50:ae:1e:a4:b4:9f:00:4b:ec:64:fe:
00:04:a3:ce:59:48:8b:6a:a2:26:57:b4:e7:7c:d3:
2d:3c:6c:b0:7a:db:77:2d:0b:c2:5b:f2:e3:a1:df:
00:ec:3b:eb:80:26:40:36:e0:b2:09:95:5c:be:e8:
34:56:13:8d:ed:b8:bd:06:77:55:63:df:f6:6f:79:
1a:be:7b:18:f1:6e:28:e3:78:24:7e:42:5f:22:51:
14:31:9b:3b:15:65:0f:26:13:82:08:4f:96:86:f2:
3b:c2:03:a1:38:e0:14:72:e3:7d:b1:27:cc:05:cb:
f4:1c:22:aa:15:d6:6e:ab:49:4e:d9:7d:96:42:64:
9e:6c:42:c7:f2:39:7f:35:d9:99:89:aa:65:7b:ae:
9c:f0:90:b2:97:14:3c:ea:b9:2b:4b:ff:0a:0b:c0:
6b:82:2b:a6:96:9c:92:7f:84:c7:82:0a:d5:6c:dc:
ae:80:50:ec:59:d4:d7:66:3b:fa:79:4f:87:1a:e8:
65:5a:ef:a9:c4:04:50:f6:32:4c:a1:86:2b:4c:31:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C0:D5:2F:B3:16:3E:50:87:50:D8:63:5E:3F:7C:9E:E8:28:1F:EE
X509v3 Authority Key Identifier:
keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:a7:84:08:57:70:55:be:ab:18:9d:70:fe:c7:7c:68:25:40:
e2:32:c1:1b:38:11:ae:0c:a9:7d:03:8c:bb:04:0e:30:44:7e:
10:bc:c2:69:85:f0:ab:75:5e:ec:85:19:27:a4:53:2f:35:f4:
98:de:fa:63:20:02:ce:54:3f:0d:23:c1:17:ee:46:8c:52:bb:
c2:52:34:99:38:bd:b1:37:ce:e5:b3:9d:d4:cf:a0:68:16:ed:
19:07:18:84:26:11:ed:66:7d:cb:47:98:3c:61:b8:64:c6:1b:
c1:a9:fe:55:5b:16:88:24:95:7c:d9:6a:f0:54:54:7d:f7:10:
87:35:b6:b0:3e:57:8c:46:37:53:bd:37:64:08:2b:ea:33:35:
db:6f:38:18:da:17:80:e4:13:a7:12:a4:93:ca:67:33:9f:97:
fd:bb:85:3b:1d:fd:96:ee:65:8e:9d:fc:8a:17:46:d3:33:c5:
bf:fc:13:c0:23:f3:f3:60:bc:4d:cd:ec:e6:30:b8:1a:60:ee:
a4:33:6c:5a:dc:5d:65:ee:6f:3d:4f:f5:78:2a:e0:9a:f0:5e:
09:e0:6d:d5:2d:9b:38:3f:d2:0c:eb:af:94:46:fe:e3:b6:3e:
74:8d:db:f4:93:b2:70:50:3b:a5:44:cf:df:37:fa:01:a8:9b:
ca:15:a1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:58 2026 by rpki-client