
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
File: 5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft (raw, json)
Hash identifier: m2LSAaiLQHxoKCOObC1hD20bkOElClE2tJqTX27sLOc=
Subject key identifier: 4D:BE:EC:7E:2A:BF:20:7A:0B:DB:DD:13:E3:5E:76:60:BC:BA:D3:4C
Authority key identifier: E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
Certificate issuer: /CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Certificate serial: 028F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
Manifest number: 025F
Signing time: Sat 13 Jun 2026 02:56:09 +0000
Manifest this update: Sat 13 Jun 2026 02:56:08 +0000
Manifest next update: Sat 20 Jun 2026 02:56:08 +0000
Files and hashes: 1: 5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl (hash: rz8cTrmjMNyCLiSnkbR7D6pRuF2Qjt7yhEAvM0BAjSY=)
2: 9EEE3C44D94F11EF916BCF23C4F9AE02.roa (hash: /zrcL4nSpe3zdFYdi/0iqkSLzijJlxJzGF9A4BLkUeg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655 (0x28f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B59E5, serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Validity
Not Before: Jun 13 02:56:08 2026 GMT
Not After : Jun 20 02:56:08 2026 GMT
Subject: CN=6a2cc6c9-7b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:99:b1:da:f8:1c:89:4b:54:79:0c:50:90:de:
0d:34:ed:92:32:81:13:a9:93:37:38:6c:7e:fd:c3:
69:b2:fc:cb:33:70:b4:22:41:d8:a0:7b:63:50:6f:
3b:34:db:ef:54:78:c5:ab:f4:56:49:cd:99:da:ed:
8b:b4:05:d1:53:ce:8f:17:c7:21:c4:18:f6:03:4b:
2a:ba:78:0f:d2:02:a3:fa:8a:07:d1:49:c0:89:c1:
ad:9e:72:04:0d:3a:cd:a8:b5:a2:4a:a2:86:70:6f:
cd:0f:80:64:d8:06:f3:e2:a1:18:c4:50:0e:40:32:
5e:41:f4:4b:94:90:ff:ed:36:38:70:3d:3f:97:25:
82:a6:e7:47:38:ff:e2:4c:96:c4:08:2e:dd:80:7b:
80:07:6c:12:ec:82:d1:f5:c1:90:8b:fc:94:6f:db:
e4:48:c2:fc:aa:85:51:3b:21:f0:58:52:31:32:7f:
f1:b7:69:86:ca:d6:30:e9:21:a0:6f:79:3a:66:e6:
92:2b:57:a7:eb:2b:44:9c:e1:05:80:e3:a9:64:18:
56:fd:ea:e0:29:30:3a:7d:80:b3:32:be:31:b0:7a:
b7:bc:e0:fc:6f:6b:cf:1b:a0:89:0d:5a:04:a7:05:
93:b8:da:58:0f:59:73:0e:6e:2d:18:85:18:50:50:
3a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BE:EC:7E:2A:BF:20:7A:0B:DB:DD:13:E3:5E:76:60:BC:BA:D3:4C
X509v3 Authority Key Identifier:
keyid:E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1f:bc:50:28:21:ef:fb:8e:72:c0:c6:3a:a7:7d:31:eb:90:
5e:12:ba:eb:c8:dd:c0:ad:12:58:e0:7d:a8:d1:20:bc:2c:a2:
b5:c8:58:f9:14:df:38:b5:f7:7f:95:05:32:bc:94:d6:6b:81:
4a:60:ec:7a:bd:0f:03:aa:6e:d0:b4:23:7e:d8:66:aa:3d:f7:
1a:b0:b1:0e:2f:c4:f7:78:62:49:a4:94:0b:12:46:74:84:d8:
e4:ae:4b:56:05:89:ae:ac:c9:24:aa:d4:5c:e0:74:dd:da:60:
db:89:2c:1d:86:79:cb:26:87:79:74:3f:06:c4:35:b5:08:d5:
91:39:3b:1f:b5:cb:98:a6:67:c1:8d:e3:b1:fc:13:4a:a7:38:
54:39:73:51:7c:ef:c9:54:03:fe:b5:4e:e2:e6:a5:dd:e6:e3:
fe:37:d9:d8:2e:46:92:d0:70:25:01:78:cc:b6:ee:ac:da:da:
40:38:7d:e1:39:fe:83:f7:97:35:20:47:82:8d:2b:16:96:54:
4e:32:31:71:a8:9a:a6:0b:27:88:e7:ae:09:20:ca:04:f8:f8:
a9:15:ab:e5:42:a4:9d:a7:c1:cd:db:c7:98:ef:92:f0:e0:be:
d6:d9:4e:d2:5a:84:e2:5b:54:a5:d7:9b:f4:4a:82:5c:24:49:
e9:f5:e2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:16:23 2026 by rpki-client