
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft
File: 5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft (raw, json)
Hash identifier: c2fFdS44oTx2ZIV9pSsYqMdxd4mU0n0Bv7RkZp5OtMc=
Subject key identifier: 4B:EF:D2:A7:5D:53:6B:5F:F3:09:5E:F4:CC:67:3A:9B:D1:A0:6E:C5
Authority key identifier: E4:D6:2D:31:29:7F:17:E4:9C:42:FA:7A:7B:66:23:62:4A:D9:41:75
Certificate issuer: /CN=A91B9B0D/serialNumber=E4D62D31297F17E49C42FA7A7B6623624AD94175
Certificate serial: 0700
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NYtMSl_F-ScQvp6e2YjYkrZQXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft
Manifest number: 06F7
Signing time: Thu 16 Apr 2026 21:59:39 +0000
Manifest this update: Thu 16 Apr 2026 21:59:39 +0000
Manifest next update: Thu 23 Apr 2026 21:59:39 +0000
Files and hashes: 1: 5NYtMSl_F-ScQvp6e2YjYkrZQXU.crl (hash: Vnzw2x42vkTkqwuOvkDmvIxCXAKSmszGv7GbDNKHcIU=)
2: 3F9CDA68179911EDB9008D18C4F9AE02.roa (hash: ujU1B1KKk8uCOgjiGvdkkocmT0/xdPECzUqBQtEEibQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.crl
rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NYtMSl_F-ScQvp6e2YjYkrZQXU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:59:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1792 (0x700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9B0D, serialNumber=E4D62D31297F17E49C42FA7A7B6623624AD94175
Validity
Not Before: Apr 16 21:59:39 2026 GMT
Not After : Apr 23 21:59:39 2026 GMT
Subject: CN=69e15bcb-ff37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:10:b3:c3:0d:d7:ae:a9:4d:d1:8d:db:a5:90:
da:eb:7d:d3:03:79:cb:a6:4b:69:85:0a:5b:34:68:
c0:6c:e9:79:5f:05:50:b7:a3:37:6a:2b:e0:0f:16:
1b:7a:20:db:18:b1:33:38:11:0c:9e:e9:49:64:ce:
08:7f:71:93:79:22:3b:7a:f8:e2:f2:d0:37:11:e7:
a4:c3:00:9c:f3:38:51:7d:6a:3d:74:09:b9:70:f9:
7f:5a:0d:39:16:73:63:39:24:4e:b8:b5:2a:ec:18:
7d:5d:1b:e4:9a:19:f3:48:b0:f1:bc:18:6d:44:e6:
78:53:d7:29:f7:9a:a2:0e:2f:b0:98:b1:10:42:f4:
98:4f:89:8f:0c:31:46:da:1f:89:38:a8:80:57:e9:
a1:16:64:57:65:9a:90:44:60:bd:c2:23:94:62:4e:
9e:20:10:46:5f:4f:ce:e4:58:42:97:72:3f:c5:4f:
48:e8:bd:d7:ab:0a:23:2b:86:8a:01:cf:a0:4c:7c:
d1:f2:6b:e1:c5:42:7e:61:a8:de:a3:7e:8d:bb:9c:
ba:51:e8:44:a4:77:3a:e3:94:fd:b8:ab:2b:99:8a:
d0:33:dd:52:82:89:97:e3:e1:4b:c3:0b:ea:fe:3f:
8c:a0:3e:1f:95:25:2f:20:17:1d:67:30:a9:4c:eb:
a6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EF:D2:A7:5D:53:6B:5F:F3:09:5E:F4:CC:67:3A:9B:D1:A0:6E:C5
X509v3 Authority Key Identifier:
keyid:E4:D6:2D:31:29:7F:17:E4:9C:42:FA:7A:7B:66:23:62:4A:D9:41:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NYtMSl_F-ScQvp6e2YjYkrZQXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:bc:09:86:9b:15:ae:5e:84:76:5a:ba:de:3a:8e:83:25:70:
e6:ad:5d:38:c0:8c:92:0e:71:a7:7c:b8:d9:da:f3:08:6d:2a:
58:39:41:d2:b7:48:fe:b9:23:d5:74:27:78:64:1d:e4:f0:62:
b7:07:dd:23:66:42:35:ab:d8:bb:ef:d0:e3:5b:f0:1f:a4:5d:
49:96:7b:8d:03:69:c8:99:9c:71:c9:81:dd:7b:c8:0a:17:1f:
a2:a5:f9:ea:a8:78:73:50:79:b8:97:26:bb:35:f1:bf:05:97:
dd:9b:01:88:7e:cf:17:8a:17:c4:4d:0e:83:47:8b:ec:e6:01:
1b:bb:2c:ef:56:08:9b:3a:57:1e:1d:06:07:85:da:1c:b4:be:
d7:2e:e6:88:e5:c2:05:4e:b7:0e:ee:a1:c7:bd:a5:bf:b8:17:
d1:69:f0:e6:2f:2d:32:c5:b3:4c:94:0b:22:da:f4:e7:ce:d3:
b1:76:32:be:ab:39:71:28:81:3a:b3:ba:01:b7:a8:69:31:81:
bd:0f:a0:84:74:16:4d:2e:51:b4:20:fa:72:0e:c0:64:8d:f4:
3c:ef:44:96:07:6c:a8:bf:db:d3:c8:ab:e6:47:28:9c:63:66:
4a:dc:00:1a:22:75:a6:14:41:cb:f8:c9:81:93:69:c2:1a:a0:
19:04:7a:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlCMEQxMTAvBgNVBAUTKEU0RDYyRDMxMjk3RjE3RTQ5QzQyRkE3QTdCNjYyMzYy
NEFEOTQxNzUwHhcNMjYwNDE2MjE1OTM5WhcNMjYwNDIzMjE1OTM5WjAYMRYwFAYD
VQQDEw02OWUxNWJjYi1mZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1BCzww3XrqlN0Y3bpZDa633TA3nLpktphQpbNGjAbOl5XwVQt6M3aivgDxYb
eiDbGLEzOBEMnulJZM4If3GTeSI7evji8tA3EeekwwCc8zhRfWo9dAm5cPl/Wg05
FnNjOSROuLUq7Bh9XRvkmhnzSLDxvBhtROZ4U9cp95qiDi+wmLEQQvSYT4mPDDFG
2h+JOKiAV+mhFmRXZZqQRGC9wiOUYk6eIBBGX0/O5FhCl3I/xU9I6L3XqwojK4aK
Ac+gTHzR8mvhxUJ+Yajeo36Nu5y6UehEpHc645T9uKsrmYrQM91SgomX4+FLwwvq
/j+MoD4flSUvIBcdZzCpTOum8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEvv0qdd
U2tf8wle9MxnOpvRoG7FMB8GA1UdIwQYMBaAFOTWLTEpfxfknEL6entmI2JK2UF1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUIwRC9BMjhFQ0JDMDhB
QjYxMUVCODIzN0Q0MTRDNEY5QUUwMi81Tll0TVNsX0YtU2NRdnA2ZTJZallrclpR
WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVOWXRNU2xfRi1TY1F2cDZlMllqWWtyWlFYVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUIwRC9BMjhFQ0JDMDhBQjYxMUVCODIzN0Q0MTRDNEY5QUUwMi81Tll0TVNsX0Yt
U2NRdnA2ZTJZallrclpRWFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh7wJhpsVrl6Edlq63jqOgyVw5q1dOMCMkg5xp3y42drzCG0qWDlB0rdI/rkj
1XQneGQd5PBitwfdI2ZCNavYu+/Q41vwH6RdSZZ7jQNpyJmcccmB3XvIChcfoqX5
6qh4c1B5uJcmuzXxvwWX3ZsBiH7PF4oXxE0Og0eL7OYBG7ss71YImzpXHh0GB4Xa
HLS+1y7miOXCBU63Du6hx72lv7gX0Wnw5i8tMsWzTJQLItr0587TsXYyvqs5cSiB
OrO6AbeoaTGBvQ+ghHQWTS5RtCD6cg7AZI30PO9ElgdsqL/b08ir5kconGNmStwA
GiJ1phRBy/jJgZNpwhqgGQR6ow==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:12:51 2026 by rpki-client