
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft
File: r5ACm-EBySLPz0vRRdevHcZA5eA.mft (raw, json)
Hash identifier: CCRJSAGnlF/Wy4YKLNQyHbhllX3lP0x4LdAzXrs6Ts4=
Subject key identifier: E7:BA:01:1B:A4:35:53:68:05:C4:0A:EF:6B:7C:03:51:47:F6:93:0B
Authority key identifier: AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0
Certificate issuer: /CN=A91D2646/serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0
Certificate serial: 0A9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft
Manifest number: 0A8E
Signing time: Thu 16 Apr 2026 19:28:16 +0000
Manifest this update: Thu 16 Apr 2026 19:28:15 +0000
Manifest next update: Thu 23 Apr 2026 19:28:15 +0000
Files and hashes: 1: r5ACm-EBySLPz0vRRdevHcZA5eA.crl (hash: La2zohjRaPGO64SoxPzKPp3oFlkkJXrpB1pZYtLaKXo=)
2: EE675FC27BED11EABD4A3A27C4F9AE02.roa (hash: Pa7iN+/Nc2RiTHjZ4lG8tJKuf6SwOlhtLxE/cKb22d0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl
rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2714 (0xa9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2646, serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0
Validity
Not Before: Apr 16 19:28:15 2026 GMT
Not After : Apr 23 19:28:15 2026 GMT
Subject: CN=69e13850-b3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:48:6a:37:42:29:03:05:5c:8c:e9:1f:20:
ee:ea:74:9e:5a:a8:aa:c1:5a:b2:5c:d4:c3:6e:6c:
ab:72:44:56:e6:b7:df:31:fc:38:22:d1:ab:04:af:
f4:0a:76:7f:a0:df:f8:d5:e1:11:aa:db:ff:9b:ea:
3b:b2:cf:84:ca:13:88:20:01:aa:d6:95:3a:c2:6a:
6e:68:8f:ba:7f:30:09:1f:8c:62:aa:96:00:fb:ef:
19:7c:3d:7f:da:c3:ec:10:9c:c3:67:d6:13:23:1e:
ce:44:1b:62:ee:3e:99:6e:d0:fa:6a:c4:48:2a:6c:
aa:8b:2e:cd:c7:b4:7d:88:ef:49:bc:ec:09:a1:71:
88:53:8c:bd:a3:93:17:97:02:f0:8a:c6:4e:fb:68:
85:b7:51:aa:4c:74:ad:52:fb:e3:d3:5a:13:5e:d5:
0e:7a:ab:82:7b:2a:b3:38:84:8a:c5:6a:b2:af:5d:
a1:f7:c4:d6:5c:cc:9e:3e:05:62:b0:23:01:3b:84:
36:8f:c4:e2:37:36:a7:40:5b:2e:e4:1c:48:20:d3:
3a:ad:71:b8:f1:55:1d:b0:9b:e7:f8:10:25:49:e7:
e1:1b:9e:7c:96:12:33:75:12:5a:62:b5:f8:94:a9:
7f:3b:92:7f:4b:5d:c8:9e:e7:9e:61:0c:23:e2:27:
4f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BA:01:1B:A4:35:53:68:05:C4:0A:EF:6B:7C:03:51:47:F6:93:0B
X509v3 Authority Key Identifier:
keyid:AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:2a:1d:0a:0a:0d:2b:77:13:4e:57:49:5c:40:ab:a8:a2:77:
e1:d1:72:b0:a4:c5:0b:16:3a:56:2d:9e:d5:48:63:0b:f0:e6:
d5:8f:c8:e2:7e:02:e6:6c:a7:b8:45:74:e9:ad:8c:cb:14:6e:
8a:5d:72:f3:98:82:dc:68:0e:03:d5:59:f6:6d:8a:3b:fb:31:
1a:4c:93:d7:d5:17:0b:8c:11:0d:b8:60:0e:87:ee:31:dc:0d:
ed:d7:26:d7:6d:3c:e0:5a:39:04:3f:25:fd:b4:af:6f:ff:d2:
1c:13:13:a8:ee:7e:2a:4d:db:dd:23:4f:aa:0b:af:bc:9f:b5:
b8:12:62:7c:f7:cd:eb:d5:0c:8e:2a:f0:85:e1:1e:09:7c:37:
01:8e:d0:48:6e:73:fc:ea:62:1e:2f:75:61:4e:82:65:44:cd:
64:be:5a:b8:61:03:a8:92:fd:c8:1b:35:61:b2:c8:b6:24:f2:
10:8c:9c:74:ba:61:f6:2f:a5:00:90:95:c8:33:80:8a:f5:f3:
79:b5:cb:2c:6e:ee:8a:6c:f1:49:9e:2e:ca:94:f1:93:a0:82:
f1:da:04:4d:a3:02:fd:ed:c2:03:6e:c3:96:e0:70:ec:dd:c5:
8e:bd:23:44:df:fc:12:29:c3:e8:cf:6c:52:9d:02:13:6d:c9:
ac:7b:26:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:51 2026 by rpki-client