
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json)
Hash identifier: pEvptJ1ZtmVa0y1bd6nIx36re7su+FOgzr2ddl4OrGM=
Subject key identifier: E1:A4:13:48:F7:A5:B2:83:90:4A:D6:2D:F0:E4:1E:0B:6B:2C:4C:C2
Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC
Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC
Certificate serial: 0268
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
Manifest number: 0259
Signing time: Fri 17 Apr 2026 02:04:25 +0000
Manifest this update: Fri 17 Apr 2026 02:04:25 +0000
Manifest next update: Fri 24 Apr 2026 02:04:25 +0000
Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: fE92oLgaMT7VpQKnLCXzX33EgrnkoWQd7LEwL/RBgtc=)
2: B987C6AAB7A311F095EF5E67C4F9AE02.roa (hash: BXJT+VuR/xyvQ8o0R6nT8W4UMQGcievCOsLixY+E6r4=)
3: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: xdixf0+5RIcyAcaWT4O3nyVovihJ9bK/xD8dsvcNSEs=)
4: B780E2A097F711EF89B09770C4F9AE02.roa (hash: wK5N6NDC53NOeUkX3Bv4KZdcSUQAmAYv+3NUjiBBfqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl
rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 616 (0x268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC
Validity
Not Before: Apr 17 02:04:25 2026 GMT
Not After : Apr 24 02:04:25 2026 GMT
Subject: CN=69e19529-e50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e6:a4:de:f5:71:24:db:7f:98:08:69:8b:4b:
2e:70:8a:51:13:72:15:b2:8c:df:fa:75:c4:b3:00:
c1:4e:03:15:4a:46:1a:f3:1f:4e:78:38:42:13:12:
c4:fe:b8:0f:9a:10:55:68:0a:62:19:d7:ef:fb:69:
da:5c:bf:74:f2:ec:38:8e:6d:ff:54:78:8c:00:b6:
76:e7:99:1e:a9:33:1b:f3:9f:83:52:ec:d0:f8:80:
2d:e2:85:c0:82:29:a7:e3:19:20:41:51:ef:1a:26:
97:b8:df:fc:74:f4:cc:dc:5a:5f:da:e0:a0:e2:22:
6f:d3:ea:64:09:3e:59:ca:75:98:b3:04:0c:2a:41:
b7:e7:6f:56:53:74:2c:92:e5:ea:78:67:62:84:db:
c3:90:ad:3c:4a:c9:33:9d:f7:60:1e:53:80:8f:d6:
53:e6:30:19:dc:4f:ab:90:9a:56:c6:65:b5:e3:a4:
49:df:b7:9f:ad:d4:e5:df:3c:fc:b5:9f:0b:75:5b:
82:60:ad:79:ba:94:1b:f2:b3:f9:77:94:2e:f8:fa:
7e:a3:17:ad:eb:eb:10:ff:7d:51:7c:0b:f4:ca:70:
7f:49:2b:af:a9:b9:bf:29:5e:7a:ab:27:8e:9d:8e:
b5:4f:11:b1:06:46:3a:69:b0:2b:2e:ad:aa:53:a5:
01:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A4:13:48:F7:A5:B2:83:90:4A:D6:2D:F0:E4:1E:0B:6B:2C:4C:C2
X509v3 Authority Key Identifier:
keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:85:ad:50:67:05:f3:15:f5:d4:59:f1:65:79:f7:6d:00:3c:
d2:cb:4e:35:17:54:d4:8d:0f:07:71:40:22:e8:c5:32:6a:ba:
9c:5d:1e:4d:e3:8a:6a:8a:f5:51:b2:7e:57:ac:18:9d:02:5e:
e4:5a:4b:07:4c:32:09:07:22:6e:17:30:f6:be:58:34:58:a8:
38:5f:7b:12:22:cd:31:86:a2:6a:22:6b:98:20:2f:df:bc:76:
25:61:ca:b8:8e:21:b8:84:11:cf:ad:36:b4:64:32:3d:a6:3c:
2b:15:c5:ce:8b:b6:c4:1b:de:bc:c5:2f:d1:d1:ce:7a:10:35:
0d:aa:23:d6:37:ff:31:6c:b9:79:43:66:e4:7b:79:80:5d:84:
0e:9b:36:bf:85:89:13:38:ae:39:7e:ac:20:46:c9:9f:11:19:
0b:c9:f9:9b:00:f6:d7:64:ef:d5:9d:10:67:b9:6e:22:33:98:
49:e2:70:ae:cd:bd:79:34:c0:b8:e7:ec:e9:ff:30:ce:7c:db:
1f:db:8f:27:74:21:87:e3:c9:98:7b:c2:16:9c:e1:42:84:63:
c2:65:b2:1b:ca:b7:2d:2a:8b:0a:d2:c8:16:36:fe:9c:d2:13:
6f:a1:53:0b:a5:f1:ff:9a:48:28:fc:8a:a2:5f:ae:54:30:ed:
8e:d4:cb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:49 2026 by rpki-client