
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft
File: 5bRMaejecz32GWYFbn5BXsfHDSo.mft (raw, json)
Hash identifier: mkWndQ880icdMYliTcKlrExdioOahZVa/kfi734Lypc=
Subject key identifier: 01:DC:48:71:A0:6A:7B:F1:5F:31:4C:65:3A:0A:A9:9E:4A:5D:AB:69
Authority key identifier: E5:B4:4C:69:E8:DE:73:3D:F6:19:66:05:6E:7E:41:5E:C7:C7:0D:2A
Certificate issuer: /CN=A91B4873/serialNumber=E5B44C69E8DE733DF61966056E7E415EC7C70D2A
Certificate serial: 018D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft
Manifest number: 0186
Signing time: Mon 27 Jul 2026 06:19:51 +0000
Manifest this update: Mon 27 Jul 2026 06:19:49 +0000
Manifest next update: Mon 03 Aug 2026 06:19:49 +0000
Files and hashes: 1: 5bRMaejecz32GWYFbn5BXsfHDSo.crl (hash: 2YFW7zevouEGDu5dukeH36BhtGAXlmCkcLA+gCZ1ZVY=)
2: F9AAE6F8994011F097180C40C4F9AE02.roa (hash: rN+KK3jryyT29WxMz6TJQKyL9vxdeXLa8TTLUuh8DZg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.crl
rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:19:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4873, serialNumber=E5B44C69E8DE733DF61966056E7E415EC7C70D2A
Validity
Not Before: Jul 27 06:19:49 2026 GMT
Not After : Aug 3 06:19:49 2026 GMT
Subject: CN=6a66f886-1ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:20:24:7d:d6:10:d4:27:4f:6c:53:14:b8:
da:f1:15:d7:7c:ab:dd:13:c0:3c:48:cb:c6:47:db:
63:cb:16:02:f6:bc:84:cd:6d:ca:f9:d2:3f:c8:89:
2f:1f:03:e6:cf:b0:93:a8:97:2e:4b:be:06:99:88:
1e:ea:e5:9a:54:f8:b2:80:28:8c:d8:84:cd:fd:24:
3d:37:2f:c4:99:8b:dc:e8:98:27:d6:92:5b:ee:05:
bf:d5:44:9b:d0:4f:ec:7a:34:8f:30:37:89:3d:3d:
db:59:c9:ac:e2:7b:d5:7f:b0:8b:0a:d4:ab:d4:eb:
ba:3c:bc:ec:d6:eb:09:76:20:20:1d:f7:23:b2:7b:
93:94:ed:06:92:7b:2e:1c:cc:f4:c5:20:a4:c5:70:
95:b7:1a:10:bd:40:34:a4:0b:15:8b:a6:32:87:d6:
89:96:64:df:ed:6f:a5:26:ae:dc:1f:cb:a2:c3:22:
89:84:4a:aa:c6:f4:3e:e9:99:04:dd:4e:e0:c4:28:
cd:48:f9:7a:c9:5a:4c:bf:5f:45:e3:db:2f:84:e7:
de:d6:4c:8f:67:ca:0e:05:49:27:c8:d4:1e:2f:d8:
97:ce:58:4b:b3:0c:6e:3f:1c:62:5f:34:54:02:f2:
85:75:f5:d8:09:c3:ed:26:c1:00:be:e7:1d:cc:7e:
3e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DC:48:71:A0:6A:7B:F1:5F:31:4C:65:3A:0A:A9:9E:4A:5D:AB:69
X509v3 Authority Key Identifier:
keyid:E5:B4:4C:69:E8:DE:73:3D:F6:19:66:05:6E:7E:41:5E:C7:C7:0D:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:5e:ef:66:64:81:47:56:69:a7:e3:72:1a:29:5d:d3:66:5e:
23:1e:ec:76:c6:1c:f0:6f:bb:b1:d6:de:a3:5f:13:ca:99:2c:
d9:38:da:12:f3:14:e6:12:45:76:d8:3a:4b:9c:2c:76:cc:b5:
29:28:60:e3:43:2b:30:bf:dd:c0:61:0a:5f:64:b5:07:4b:a4:
72:b7:db:07:4b:fb:0d:69:39:b7:5b:4d:81:63:c1:68:09:bf:
83:fb:4a:a1:31:4e:2b:15:ce:f5:9b:f8:76:ea:14:49:7d:56:
12:4b:8f:e4:d6:26:8c:56:26:e3:8b:13:57:f6:9f:55:63:8e:
3b:20:d2:b9:7b:29:e6:97:bf:36:7c:a9:37:36:3a:07:48:d7:
08:0c:b5:e0:b4:21:08:5e:cc:e6:a3:9b:00:7c:9a:36:47:45:
2d:55:b6:66:f2:03:4f:12:26:a0:bf:40:e1:e2:e4:d2:b2:f3:
d2:33:ea:84:5c:25:f3:5f:44:41:38:c5:d8:90:96:59:53:6a:
5f:14:1c:d8:05:07:4b:eb:42:a7:9e:bb:42:73:70:7a:ee:21:
c2:74:fd:58:33:80:08:2d:33:2c:03:4f:d3:b9:f4:64:98:f0:
dd:14:3c:6f:c0:30:08:13:dd:f9:e1:0a:cd:22:c4:0f:f8:37:
35:b5:27:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:19:58 2026 by rpki-client