
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
File: 5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft (raw, json)
Hash identifier: OjemJbM94FILWghtJi4kZeb0oYwxrRpNbH+AhnmMGP4=
Subject key identifier: D6:6F:4F:0B:5D:D6:75:3A:96:BB:72:4B:5B:66:ED:69:3E:B1:02:4F
Authority key identifier: E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
Certificate issuer: /CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Certificate serial: 02A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
Manifest number: 0275
Signing time: Mon 27 Jul 2026 04:14:08 +0000
Manifest this update: Mon 27 Jul 2026 04:14:07 +0000
Manifest next update: Mon 03 Aug 2026 04:14:07 +0000
Files and hashes: 1: 5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl (hash: Ch5LgiINCSUi5oqEnAbL9QJLMJ0mF+1CoVEm6qYwAuY=)
2: 9EEE3C44D94F11EF916BCF23C4F9AE02.roa (hash: /zrcL4nSpe3zdFYdi/0iqkSLzijJlxJzGF9A4BLkUeg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:14:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677 (0x2a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B59E5, serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Validity
Not Before: Jul 27 04:14:07 2026 GMT
Not After : Aug 3 04:14:07 2026 GMT
Subject: CN=6a66db10-5c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:4f:19:cb:54:a1:1b:db:d7:d6:40:2d:2f:
4e:1b:12:d0:0d:51:aa:97:f6:53:8f:a4:4f:34:72:
a1:ae:9e:47:57:55:e2:74:49:0c:93:6c:f9:1f:3f:
2c:06:e8:03:22:74:35:4c:be:ce:9f:60:0f:bf:ca:
2e:a8:ca:5e:3f:66:e7:e2:d0:4c:b3:12:64:0a:c4:
e9:b1:d2:41:d0:9f:f8:11:50:53:72:a4:9d:86:a1:
b8:30:77:68:16:02:c8:4c:99:47:28:28:dd:36:6a:
de:1d:2f:7b:d5:67:38:10:d0:e5:3b:93:3d:20:0d:
72:20:ff:0b:1c:ed:50:02:9c:e9:81:55:e4:f7:b2:
03:fb:53:bc:32:a6:f0:e9:c4:f8:9e:38:de:a2:fe:
5c:8f:2e:75:73:af:09:cc:10:ba:da:19:89:fa:a8:
57:b0:fc:0f:32:ac:3c:56:b6:bf:27:2b:6f:ff:d4:
2c:dd:d5:a2:17:37:40:0c:ef:cf:16:e8:e7:eb:3b:
4f:6b:b8:76:ac:d0:14:0b:ad:dc:6d:b9:ed:27:f2:
e4:63:03:d0:dc:69:0e:9e:55:5e:49:41:c1:2a:6d:
36:ee:17:f5:4f:28:82:0f:3b:5e:6a:fa:06:60:48:
37:a3:2a:45:db:10:91:e6:c3:db:8e:4d:61:0f:2a:
2b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6F:4F:0B:5D:D6:75:3A:96:BB:72:4B:5B:66:ED:69:3E:B1:02:4F
X509v3 Authority Key Identifier:
keyid:E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:8f:7c:de:e4:74:e3:2d:66:eb:62:ec:bf:ea:4a:4e:66:7b:
58:74:21:4b:a1:ff:27:d0:65:31:0d:a3:91:ea:9b:36:51:e1:
c8:fb:ec:f5:37:ad:01:d6:5e:c0:8d:de:9e:b5:3a:f7:92:b0:
3b:38:e1:72:29:c4:e9:01:2f:bd:77:b9:ce:54:d8:77:e8:9c:
e4:7c:b8:58:c7:c9:cd:a9:b6:32:68:31:d8:06:9f:be:6f:c8:
2b:7d:91:91:28:fd:57:7c:78:8a:a5:28:44:23:33:bf:21:35:
d6:c2:c9:22:6e:36:34:1c:5a:f7:29:6b:70:50:d8:b3:e4:96:
6d:6f:73:64:23:31:af:a0:a4:a7:d0:5b:de:72:4e:6a:af:f3:
82:ac:c7:d8:00:16:2d:2d:6a:7a:e9:af:49:ea:26:24:c6:bd:
2d:8d:b8:b2:0b:d6:0c:25:af:a8:a1:17:4b:29:9b:de:b4:20:
8f:0e:14:de:9e:7e:dc:49:8b:ae:a0:15:9b:8c:33:ee:52:fa:
11:91:f3:44:7a:15:f1:13:f5:3e:e0:18:88:11:f5:08:5d:e6:
52:b0:08:a2:8d:81:4b:0d:5c:96:1d:b1:54:05:66:47:65:3d:
bb:e0:7e:b6:b4:67:0e:58:fa:80:3f:11:67:a2:18:cd:9a:f9:
1d:56:ea:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:56:34 2026 by rpki-client