
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft
File: 4H5XaJwnqZNhHLq6l7GU0xeWz28.mft (raw, json)
Hash identifier: +30e54hEZftqrYCSzSSIF/PeKOx5hT1U5pDXmMbKce0=
Subject key identifier: 7D:B7:A6:A1:09:BA:30:A9:B4:EC:47:39:C3:BA:19:1B:00:33:CE:C1
Authority key identifier: E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F
Certificate issuer: /CN=A91C7E5B/serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F
Certificate serial: C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft
Manifest number: C5
Signing time: Sat 13 Jun 2026 06:58:41 +0000
Manifest this update: Sat 13 Jun 2026 06:58:41 +0000
Manifest next update: Sat 20 Jun 2026 06:58:41 +0000
Files and hashes: 1: 4H5XaJwnqZNhHLq6l7GU0xeWz28.crl (hash: 2OnHxgWt64YA9wN4sSGfZCBAOaF9P92gl4mvSBeT31E=)
2: DBBAF162C19811F0A42BC412C4F9AE02.roa (hash: Kic9hnPcMWHN6pDr7Ll5IWiixhuAzQj9NWh88//ur+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl
rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7E5B, serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F
Validity
Not Before: Jun 13 06:58:41 2026 GMT
Not After : Jun 20 06:58:41 2026 GMT
Subject: CN=6a2cffa1-c4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e6:e6:c1:47:26:6a:a9:8d:52:e6:f1:bb:59:
2a:af:fe:45:cd:06:72:60:eb:f2:11:30:88:42:bf:
dc:72:fe:05:58:fb:6d:4b:06:99:fc:13:e0:c3:06:
8b:4a:cf:18:36:b6:f2:25:05:51:08:c1:06:c1:2b:
0c:f5:2f:5d:d8:0f:b9:d7:32:ff:3c:9f:e6:6a:b9:
c2:9b:26:84:c7:c2:cd:d3:08:58:6d:01:c0:93:7e:
3f:64:f4:85:ff:0c:77:08:aa:0a:fc:13:73:38:63:
55:bc:41:b2:62:fb:c5:30:50:8f:fa:ba:46:9b:8e:
2a:3b:13:1f:a3:e0:4d:66:e4:0f:cf:f1:90:0c:08:
5d:7b:86:5f:cc:09:df:21:0e:34:7b:47:a0:ff:c6:
aa:f6:b8:c2:e8:95:69:00:8b:bb:3b:c7:41:9b:2a:
db:e1:c6:97:2b:7d:27:13:47:48:c1:12:97:17:78:
f4:c9:cf:e9:88:a8:48:b0:ce:04:49:91:b9:50:e7:
dc:ab:ec:3b:ec:ea:8a:3f:58:ab:f5:2c:92:f7:1c:
0e:1c:26:4c:2b:77:ef:e6:7c:06:fe:f4:1b:93:3e:
47:8a:fc:21:90:af:e0:b7:45:9e:b9:7e:ee:17:0d:
a7:d1:79:5f:62:fa:45:94:1a:8e:47:55:cc:65:7f:
6c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B7:A6:A1:09:BA:30:A9:B4:EC:47:39:C3:BA:19:1B:00:33:CE:C1
X509v3 Authority Key Identifier:
keyid:E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:13:d1:56:3f:57:7f:8f:b7:45:fa:d1:cf:57:10:82:e8:07:
c4:68:95:30:fb:93:f3:d7:05:f5:dc:67:60:d4:58:5a:25:df:
4c:29:8c:9e:ca:43:3f:ce:94:60:11:da:73:d7:ee:ff:1c:60:
1a:3c:85:3a:2e:e3:4d:35:20:06:71:d7:52:e8:a8:f4:fe:da:
1c:ba:58:f3:1b:41:8a:43:02:b4:aa:ac:94:0e:bf:5c:a1:0f:
19:b1:98:2d:bd:eb:5f:5a:5a:51:41:29:ee:91:03:04:c7:af:
0c:84:c8:6e:7e:c3:6e:a1:9c:46:99:7e:df:33:17:f9:8c:42:
86:c1:4f:38:85:8a:a2:48:41:6e:ed:ea:ce:43:a5:f0:6c:7b:
b3:c9:91:1b:e5:d1:81:48:b0:6b:8a:b6:a4:f3:4a:cb:10:25:
d8:be:47:fe:47:82:2d:4d:71:88:10:e0:a9:85:e4:c9:ed:5a:
1e:13:e2:dd:1c:c4:f3:6c:65:4e:49:59:7b:f2:01:f9:d5:f6:
ed:b5:45:0f:bb:2f:6e:fd:fc:fc:39:7c:2b:d0:e1:94:7e:17:
ea:e9:82:55:46:e6:81:d8:59:cf:9d:48:06:88:bc:e7:c5:ab:
e4:0f:06:57:70:d5:37:18:28:80:01:7e:6d:3d:09:a5:aa:61:
66:2b:3c:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdFNUIxMTAvBgNVBAUTKEUwN0U1NzY4OUMyN0E5OTM2MTFDQkFCQTk3QjE5NEQz
MTc5NkNGNkYwHhcNMjYwNjEzMDY1ODQxWhcNMjYwNjIwMDY1ODQxWjAYMRYwFAYD
VQQDEw02YTJjZmZhMS1jNGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy+bmwUcmaqmNUubxu1kqr/5FzQZyYOvyETCIQr/ccv4FWPttSwaZ/BPgwwaL
Ss8YNrbyJQVRCMEGwSsM9S9d2A+51zL/PJ/marnCmyaEx8LN0whYbQHAk34/ZPSF
/wx3CKoK/BNzOGNVvEGyYvvFMFCP+rpGm44qOxMfo+BNZuQPz/GQDAhde4ZfzAnf
IQ40e0eg/8aq9rjC6JVpAIu7O8dBmyrb4caXK30nE0dIwRKXF3j0yc/piKhIsM4E
SZG5UOfcq+w77OqKP1ir9SyS9xwOHCZMK3fv5nwG/vQbkz5HivwhkK/gt0WeuX7u
Fw2n0XlfYvpFlBqOR1XMZX9sqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH23pqEJ
ujCptOxHOcO6GRsAM87BMB8GA1UdIwQYMBaAFOB+V2icJ6mTYRy6upexlNMXls9v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0U1Qi9FMTRGNzIyNDND
NkUxMUYwOUQ3NkEyNERDNEY5QUUwMi80SDVYYUp3bnFaTmhITHE2bDdHVTB4ZVd6
MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRINVhhSnducVpOaEhMcTZsN0dVMHhlV3oyOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0U1Qi9FMTRGNzIyNDNDNkUxMUYwOUQ3NkEyNERDNEY5QUUwMi80SDVYYUp3bnFa
TmhITHE2bDdHVTB4ZVd6MjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIBPRVj9Xf4+3RfrRz1cQgugHxGiVMPuT89cF9dxnYNRYWiXfTCmMnspDP86U
YBHac9fu/xxgGjyFOi7jTTUgBnHXUuio9P7aHLpY8xtBikMCtKqslA6/XKEPGbGY
Lb3rX1paUUEp7pEDBMevDITIbn7DbqGcRpl+3zMX+YxChsFPOIWKokhBbu3qzkOl
8Gx7s8mRG+XRgUiwa4q2pPNKyxAl2L5H/keCLU1xiBDgqYXkye1aHhPi3RzE82xl
TklZe/IB+dX27bVFD7svbv38/Dl8K9DhlH4X6umCVUbmgdhZz51IBoi858Wr5A8G
V3DVNxgogAF+bT0JpaphZis8dQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:17:24 2026 by rpki-client