
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
File: 5CK_AmFA0gPv1r_eruJoqosEZtU.mft (raw, json)
Hash identifier: tTFv9nauIXEp+6b68UpCLlN1xE5rAbPOO0PxvCgSgpU=
Subject key identifier: D3:79:FA:F7:A7:C7:CC:C6:4D:E4:E4:75:02:4F:71:D0:30:0E:C6:60
Authority key identifier: E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5
Certificate issuer: /CN=A91C3174/serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5
Certificate serial: 03AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
Manifest number: 03A3
Signing time: Mon 27 Jul 2026 01:49:49 +0000
Manifest this update: Mon 27 Jul 2026 01:49:49 +0000
Manifest next update: Mon 03 Aug 2026 01:49:49 +0000
Files and hashes: 1: 5CK_AmFA0gPv1r_eruJoqosEZtU.crl (hash: 3tqYlOd+aGitendyEhE9CJijE6m0EjOXWoZ+5pdPhRU=)
2: 9A4B6146EED111EC9BDD4C49C4F9AE02.roa (hash: yIITaHKhLktq8hIVDB/hFkrrSu/yxWdnPRfSTHr4wTQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl
rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939 (0x3ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3174, serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5
Validity
Not Before: Jul 27 01:49:49 2026 GMT
Not After : Aug 3 01:49:49 2026 GMT
Subject: CN=6a66b93d-60ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:14:4f:f4:c4:e3:18:41:dd:8d:78:cf:39:55:
07:7c:f0:2f:2e:6a:72:de:10:4b:3b:77:46:53:6b:
bb:bf:14:a0:3d:58:49:b7:5f:49:a7:92:8b:3e:14:
c8:fa:1a:01:cb:8c:ea:69:0d:14:37:bb:45:47:68:
cd:e4:3a:51:4d:77:aa:a0:7b:b5:97:e9:b4:1e:8f:
b1:30:79:e9:d3:7c:73:3c:e7:7f:d1:69:e4:eb:5a:
11:63:b7:c2:fb:e3:b6:38:08:3f:51:48:21:fc:c4:
a9:7d:2b:54:a7:81:72:fd:5f:60:32:c3:b0:d3:07:
ac:b3:b0:d5:96:b8:80:5c:df:ac:b3:98:8f:96:41:
32:1b:09:30:75:58:16:94:c5:48:6d:e4:40:1a:d5:
b7:fb:3f:8a:6d:18:6b:a9:df:d5:53:7f:b8:ec:ab:
0e:ec:06:2f:70:7b:7d:3d:67:17:ab:83:31:c2:9a:
7c:b8:60:61:5d:17:cc:27:18:66:46:0a:5c:91:bf:
30:d8:d3:23:d3:81:50:9a:2e:9b:68:d9:b2:66:a7:
33:82:7d:dc:26:90:91:41:7d:9c:de:70:9b:ff:52:
56:62:a7:dd:5c:8d:f1:fb:58:f0:ae:03:67:cf:3f:
88:e3:63:12:72:22:7a:66:4b:55:8e:a7:2b:07:61:
1f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:79:FA:F7:A7:C7:CC:C6:4D:E4:E4:75:02:4F:71:D0:30:0E:C6:60
X509v3 Authority Key Identifier:
keyid:E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:47:4a:fb:d0:f3:7a:f5:75:7a:7b:6e:0a:86:b7:e1:c7:b3:
56:aa:e9:47:aa:1d:25:0e:f4:0c:e2:c0:3c:4c:db:2f:7d:22:
68:dd:ac:34:b7:89:45:3e:87:32:95:48:c3:c1:09:83:40:5f:
0e:fb:23:5b:4f:e2:3c:af:b7:53:75:ad:75:8d:76:93:42:19:
20:62:a3:42:ce:0c:6d:66:12:60:b4:a5:4d:1c:81:74:cf:91:
d2:e0:07:98:35:6d:56:ff:bf:67:0b:29:31:f5:7d:fd:25:6a:
df:71:8f:58:a5:f6:83:7e:88:70:b4:69:a1:20:d4:86:2a:35:
11:f3:8e:46:97:95:69:8a:73:3a:78:7f:cb:16:ee:84:bf:11:
40:49:d1:d6:40:d9:fc:a4:f4:69:d2:e6:0d:99:b8:d7:a2:90:
03:24:93:7a:18:29:19:f7:25:15:56:7f:d8:7d:60:65:9f:d3:
ba:b4:86:c7:74:83:de:71:03:ad:2b:d6:61:3d:82:27:42:58:
04:44:a9:c6:00:ce:a7:58:79:c7:30:81:84:66:61:e9:d2:44:
95:86:21:d4:8e:38:a9:bc:23:70:21:7a:6c:72:24:ff:7c:ea:
19:c1:3c:1a:a3:d6:31:68:58:13:33:12:62:4d:94:55:5a:0a:
67:f6:a3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:23:44 2026 by rpki-client