
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft
File: 5bRMaejecz32GWYFbn5BXsfHDSo.mft (raw, json)
Hash identifier: cq2B3+ngjA2DCjaekxCyieIsV3gG1uW1n6Lb1p8gDBc=
Subject key identifier: CF:0D:56:6D:33:8F:1C:85:66:5E:FA:05:30:5E:E6:C1:D5:5D:77:87
Authority key identifier: E5:B4:4C:69:E8:DE:73:3D:F6:19:66:05:6E:7E:41:5E:C7:C7:0D:2A
Certificate issuer: /CN=A91B4873/serialNumber=E5B44C69E8DE733DF61966056E7E415EC7C70D2A
Certificate serial: 0174
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft
Manifest number: 016E
Signing time: Sat 13 Jun 2026 04:45:33 +0000
Manifest this update: Sat 13 Jun 2026 04:45:32 +0000
Manifest next update: Sat 20 Jun 2026 04:45:32 +0000
Files and hashes: 1: 5bRMaejecz32GWYFbn5BXsfHDSo.crl (hash: HfZT7MQU9Fu57rg5fRelYRwLeoBzws6EbVhCCI0G91U=)
2: F9AAE6F8994011F097180C40C4F9AE02.roa (hash: +BAp+39366AUiOK5SmP/mdRqu6NWeoWLjWnOKT+SW/E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.crl
rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:45:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4873, serialNumber=E5B44C69E8DE733DF61966056E7E415EC7C70D2A
Validity
Not Before: Jun 13 04:45:32 2026 GMT
Not After : Jun 20 04:45:32 2026 GMT
Subject: CN=6a2ce06c-9133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:9c:ae:21:6d:0b:e5:13:f7:6c:c1:c4:1a:
dc:6f:b9:ab:58:65:03:71:dc:10:ef:c7:56:90:68:
e8:6d:7e:b3:ed:1f:aa:14:0a:55:13:58:a6:46:db:
81:e8:a4:b6:3f:94:40:62:45:4f:74:b8:9c:08:ba:
93:22:de:6a:ae:f8:f6:f1:67:8a:ba:3a:d4:e6:19:
1b:b9:46:9a:9e:57:20:94:f4:b0:fa:d9:32:75:25:
33:64:65:a3:f4:75:cf:fe:70:ac:6a:30:d2:0b:6d:
b3:be:b1:42:dc:4b:4c:01:5f:4d:1b:9a:14:fc:5c:
e2:27:ec:42:07:d8:e8:cb:d7:ea:f3:98:57:29:4c:
ac:8b:ca:ab:f7:15:9f:3a:c3:85:5c:4d:c3:dc:49:
3b:04:e1:56:23:a8:fe:77:af:53:00:9f:b5:de:4f:
b8:fa:7a:ec:b3:b8:28:53:7c:a8:65:e7:62:40:8c:
be:02:e6:18:77:5c:f3:89:e9:8c:e2:bc:8f:6a:6a:
50:0d:cf:10:5b:50:d9:b1:98:12:08:7c:e3:6f:2e:
65:b9:9c:b6:0b:f1:b0:f4:95:1b:94:cf:cf:91:96:
ac:fa:85:50:06:1d:04:1e:6b:ca:54:5c:dc:36:c4:
e8:a6:83:52:40:1e:35:7d:2e:88:fb:74:e4:1d:73:
04:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0D:56:6D:33:8F:1C:85:66:5E:FA:05:30:5E:E6:C1:D5:5D:77:87
X509v3 Authority Key Identifier:
keyid:E5:B4:4C:69:E8:DE:73:3D:F6:19:66:05:6E:7E:41:5E:C7:C7:0D:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:89:31:77:9c:ac:75:19:6f:a0:7e:9d:4c:51:e9:46:95:da:
c5:e0:57:02:54:ea:7d:bd:71:be:f8:02:22:52:c7:ef:d4:2f:
74:f4:fc:b9:03:8a:71:2d:24:b4:57:62:10:d4:00:b7:04:ba:
dc:3c:6e:dc:7a:5e:20:90:4f:13:38:ed:73:f7:59:80:7e:3e:
12:82:30:4f:60:99:7e:13:6f:6e:d0:6d:b1:46:dc:64:42:05:
82:10:12:84:be:20:1f:a0:d2:c4:4b:1a:c5:ea:57:94:b6:7e:
16:cf:07:48:6c:ba:a8:a5:f1:82:33:a6:bf:c7:7a:4e:cc:c3:
cd:ff:86:e0:18:5a:00:3b:15:16:6a:23:39:31:ca:2a:9a:80:
22:a0:6d:8b:09:f1:7c:6d:c9:96:50:c1:87:6c:68:f7:aa:30:
56:73:4c:13:4f:0d:de:09:44:e3:63:5f:1a:12:1e:5c:0e:2f:
74:6c:df:e3:07:9e:80:10:f0:54:19:24:4f:f6:69:7b:ab:be:
1d:d5:2f:3c:03:0a:dc:99:07:b1:91:a7:a5:3a:a0:48:d3:6c:
a9:ef:18:dd:41:2c:94:35:67:46:c1:39:dd:1a:85:78:83:1c:
9d:86:1f:f2:7c:ef:d1:26:02:d6:3d:30:01:d3:d3:e0:25:3a:
8e:f8:7a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:38:14 2026 by rpki-client